CN106627443A - T-BOX information safety protection method based on vehicle characteristic safety levels - Google Patents

Abstract

A T-BOX information security protection method based on the safety level of vehicle characteristics, including the following steps: Step 1: Calculate the range of kinetic energy of the vehicle according to the range of vehicle speed and vehicle load, divide the vehicle safety level and import T-BOX BOX; Step 2: T-BOX obtains the values of the two vehicle characteristics of vehicle speed and vehicle load, and then calculates and judges which safety level the current vehicle is in according to the values of these two vehicle characteristics; Step 3: T-BOX Judging which electronic control systems should be isolated and protected according to the safety level of the current vehicle driving state, and sending corresponding isolation start messages to these electronic control systems; Step 4: the electronic control system ECU receives the isolation message and enters the corresponding isolation state, The task of importing vehicle characteristic safety level to T‑BOX in step 1 is performed only once, and then steps 2, 3 and 4 are repeated.

Description

A T-BOX information security protection method based on vehicle characteristic security level

technical field

The invention relates to the field of automobile information security, in particular to a T-BOX information security protection method based on vehicle characteristic security levels.

Background technique

In recent years, the automobile industry has developed vigorously, and the automobile has also begun to transform from a purely mechanical system to a mechanical-electronic combination system. Today's cars contain many electronic control systems, including electronically controlled ignition (ESA), electronically controlled fuel injection (EFI), idle speed control (ISC), electronically controlled automatic transmission (ECT), anti-lock braking system (ABS), Drive anti-skid system (ASR), electronically controlled power steering system, etc. So many electronic control systems exchange information through the CAN bus. If external threatening information enters the CAN bus and then attacks many electronic control systems, it will cause serious damage to the information security of the car. The T that is responsible for managing and controlling the electronic control system -BOX has become a key protection device for vehicle information security.

Telematics BOX, referred to as vehicle T-BOX, as shown in Figure 1. It communicates with the host through CANBUS to realize the transmission of instructions and information, including vehicle status information, button status information, control instructions, etc. The vehicle-mounted T-BOX can deeply read the car CAN bus data and private protocol. The T-box terminal has a dual-core processing OBD module and a dual-core processing CPU architecture, which collects the bus data related to the car bus Dcan, Kcan, PTcan and private protocol feedback respectively. Direction control, transmit data to cloud server through GPRS network, provide vehicle condition report, driving report, fuel consumption statistics, fault reminder, violation query, location track, driving behavior, security and anti-theft, reservation service, remote car search, and use mobile phone to control the car Doors, windows, lights, locks, horns, double flashing lights, folding mirrors, sunroofs, monitor central control warnings and airbag status, etc.

Although many automotive information security protection mechanisms based on information-level characteristics have appeared in recent years, there are not many information security protection mechanisms based on physical-level characteristics. High-risk physical-level information protection is far from Not enough, once an information attack is received under high-risk conditions and the vehicle loses control, the consequences will be disastrous.

Contents of the invention

In order to solve the above problems, the present invention constructs a security level based on physical characteristics related to automobile security, and provides a T-BOX information security protection mechanism with simple structure, easy implementation, and expected functional goals.

The T-BOX information security protection mechanism based on the safety level of vehicle characteristics provided by the present invention uses one or more vehicle characteristics that have a significant impact on driving safety as a safety level standard based on vehicle characteristics, and controls some electronic controls according to the safety level. The system implements appropriate safeguards.

The vehicle characteristics are vehicle running parameters that have a significant impact on driving safety, and the vehicle characteristics selected in the present invention are based on the object kinetic energy formula: Selected, be the vehicle speed and the vehicle load; the safety level standard is established based on the vehicle speed and the vehicle load selected by the present invention, and the direct reference of the safety level standard division is the kinetic energy size of the whole vehicle under the current driving state , the entire vehicle includes the car itself, passengers in the car, cargo and other objects carried on the vehicle; the protective measure is an isolated protection that blocks the exchange of information between the electronic control system and the T-BOX. In the current CAN BUS, it is the In the case of a general communication network, the information exchange between the electronic control system and the T-BOX is controlled by setting the isolation start message and the isolation end message: when the function controlled by an electronic control system is to be isolated, the T-BOX will pass The CAN bus sends an isolation start message to the electronic control system. After the message is received, the ECU of the electronic control system can recognize the isolation command issued by the T-BOX, and then enter the isolation protection state. In this state, the electronic control system The system will ignore all CAN messages except the isolation end message. When the electronic control system receives the isolation end message, its ECU can recognize the isolation end command issued by the T-BOX and jump out of the isolation protection state. At this time, the electronic control system can receive all CAN messages; the electronic control system is some Electronic control systems that have a relatively large impact on driving safety include automotive passive safety systems such as airbags and seat belts, automotive active safety systems such as brake anti-lock brakes and tire pressure monitoring, and some body control systems. The isolation function is divided according to the degree of influence of the function itself on vehicle safety, such as seat belts, airbags, etc., which have a greater degree of influence; power steering, headlights, etc., which have a lesser degree of influence.

The flow chart of the T-BOX information security protection mechanism based on the vehicle characteristic security level of the present invention is mainly realized through the following steps:

Step 1: Calculate the range of vehicle kinetic energy according to the range of vehicle driving speed and vehicle load, and divide the vehicle safety level based on this and import it into T-BOX.

Step 2: T-BOX needs to obtain the values of the two vehicle characteristics of vehicle speed and vehicle load. Then, according to the numerical calculation of these two vehicle characteristics, it is judged which safety level the current vehicle driving state is in.

Step 3: T-BOX judges which electronic control systems should be isolated and protected according to the safety level of the current vehicle driving status, and sends corresponding isolation messages to these electronic control systems.

Step 4: The electronic control system ECU enters the corresponding isolation state after receiving the isolation message.

Beneficial effects of the present invention:

① The present invention simultaneously considers speed and load, the two factors that have the greatest impact on driving safety, calculates the kinetic energy of the vehicle according to the kinetic energy formula, and builds a safety level based on the kinetic energy of the entire vehicle, comprehensively balancing the two vehicle characteristic speeds and loads The degree of impact on driving safety, the safety level constructed is more reasonable.

②The present invention protects information in terms of driving safety, which fills the gap in the current automobile field in the indirect protection of driving safety by protecting information security, and attackers cannot control the vehicle in a dangerous driving state, so that the safety of the life and property of the driver is at the information level be guaranteed.

③The function isolation type protection adopted in the present invention is more inclined to the protection at the physical level, with strong reliability, simple implementation and easy realization. The purpose of protection can be achieved only by temporarily cutting off information interaction between part of the electronic control system and T-BOX. It has high feasibility.

④ The present invention can retain the connection of other system functions when isolating some important electronic control systems, such as radio functions, navigation functions, etc., which can guarantee the driving experience of the vehicle while ensuring safety.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Figure 1 is a flowchart of the T-BOX information security protection mechanism based on vehicle characteristic security levels.

detailed description

The specific embodiment of the present invention will be described further below, and Fig. 1 is the T-BOX information safety protection mechanism flow chart based on vehicle characteristic safety level of the present invention, step 1: first will import to T-BOX in the present invention and divide according to vehicle type vehicle safety level. The division of vehicle safety levels is based on the kinetic energy of the vehicle calculated from the vehicle characteristics, so the numerical range of the vehicle characteristics must be set first. The range of vehicle characteristics of each type of vehicle is different, and the present invention takes the most common sedan as an example. The highway top speed limit of my country's car is 120 kilometers per hour, so the scope of the vehicle speed is fixed at 0km/h to 120km/h by the present invention; It is about 66kg, so the total number of people in the car is 5×66kg=330kg, the load of other items inside the car and the load of the trunk usually do not exceed 100kg, and the weight of the car body generally does not exceed 2T, which is 2000kg, so the whole The maximum car weight is 2430kg, so according to the formula It can be calculated that the highest kinetic energy of the sedan when driving is about 1350MJ. According to the calculated kinetic energy range (0-1350MJ), the present invention formulates a six-level vehicle characteristic safety level:

Security Level Kinetic range first security level 0～270MJ second security level 270～540MJ third security level 540～810MJ fourth security level 810～1080MJ fifth security level 1080～1350MJ Sixth Security Level 1350～∞MJ

Step 2: In the present invention, T-BOX needs to acquire the two vehicle characteristics of vehicle driving speed and vehicle load. The speed of the vehicle can be obtained by the speedometer of the car, and the load of the vehicle can be obtained by the pressure sensor located on the axle. When T-BOX gets the data of these two vehicle characteristics, it will use the preset algorithm according to the kinetic energy formula Calculate the kinetic energy characteristics of the current vehicle, and then determine which level of the vehicle safety characteristics this kinetic energy characteristic value belongs to in step 1.

Step 3: T-BOX has determined which safety level the vehicle is in at this time through judgment, and then T-BOX will send an isolation start message to the corresponding electronic control system according to the safety level. The Isolation Start message will be passed on the CAN bus. The functional isolation corresponding to the security level is shown in the table below.

Among them, the state of the vehicle in the first safety level is the level with the lowest safety risk. At this time, the vehicle may be stopped or driving at a very low speed. In this case, the possibility of a driving accident is relatively small or even if an accident occurs also won't

Security Level Kinetic range functional isolation first security level 0～270MJ not isolated second security level 270～540MJ Passive safety control systems such as seat belts and airbags third security level 540～810MJ Brake anti-lock, drive anti-skid and other active safety control systems fourth security level 810～1080MJ Body control system and transmission control system fifth security level 1080～1350MJ Electric power steering, lane keeping assist system and other auxiliary control systems Sixth Security Level 1350～∞MJ All control systems except those not related to safety

Threat to the safety of people in the car, so the electronic control system can not be isolated. The second safety level is higher than the first level of safety vehicles. At this time, if an accident occurs, the life safety of the people in the car may be threatened. Therefore, some passive safety systems that guarantee the life safety of the people in the car should be put into isolation. scope. When the vehicle is at the third safety level, if an accident occurs, the passive safety system alone may not be able to completely protect the safety of the occupants of the vehicle. At this time, it is necessary to prevent vehicle accidents, so it is necessary to ensure the normal operation of the active safety system, so in The third safety is to isolate the active safety control system functions such as brake anti-lock brake and drive anti-skid. The risk factor of the fourth security level increases again. At this time, if the body control system and the transmission control system are invaded, the driving safety will be threatened, so these two functions are isolated. The fifth safety level is the most dangerous safety level under the condition of complying with traffic laws. At this time, the vehicle speed is fast and the load is heavy, and it is easy to be affected and cause the vehicle to lose control. Therefore, the fifth safety level needs to isolate some auxiliary control systems of the vehicle. Prevent attackers from breaking through these systems to affect driving stability and cause accidents. When the car is at the sixth safety level, the driver has violated the law, and there must be overloading or speeding. At this time, the car is in the most dangerous working condition, and any small impact may lead to serious consequences, so all possible All systems that affect driving safety are isolated to ensure driving safety to the greatest extent.

Step 4: All electronic control system ECUs connected to the CAN bus will receive the isolation message sent by T-BOX, but in order to achieve the effect of only controlling the corresponding electronic control system, only the corresponding electronic control system ECU will be attached to the message identifiable identifier. When the ECU receives an isolated message, it will check the identifier in the message, and if it cannot be identified, it will ignore the isolated message. The ECU that can identify the isolated message will control the electronic control system where it is located to enter the isolated state. In this state, the ECU of the electronic control system will ignore all system external messages except the isolation end message corresponding to the identifier. After receiving an identifiable quarantine end message, it will exit the quarantine state.

In the present invention, the task of introducing the vehicle characteristic safety level into the T-BOX in step 1 is performed only once, and then steps 2, 3 and 4 are repeated to achieve the effect of T-BOX uninterrupted control of the entire vehicle electronic control system.

In particular, the above division of data and security levels is only an embodiment of the present invention, and has not been verified by very accurate calculation and simulation. The invention provides a scheme idea, and the formulation of the security level can be accurately formulated according to the security requirements by researching a more reasonable algorithm.

In addition to speed and load, the vehicle characteristics in the present invention can also consider the impact of other weak factors on driving safety, comprehensively consider the impact of other factors except kinetic energy on driving safety, and develop a new algorithm model to formulate more reasonably Vehicle Feature Safety Level

The method of the present invention is simple and easy to implement. Information protection is carried out in terms of driving safety, so that the life safety of drivers is guaranteed at the information level for the first time, which enriches the existing automobile safety guarantee system and has far-reaching implications for future research in the field of automobile information security. It has guiding significance, and can be followed up to study new security level establishment algorithms, security level construction methods, etc., with strong follow-up developability and broad research prospects.

Claims (3)

1. a kind of T-BOX protecting information safety methods based on vehicle feature safe class, it is characterised in that including following step Suddenly：

Step 1：According to Vehicle Speed and the scope of the range computation car load kinetic energy of car load, and vehicle peace is divided with this Congruent level simultaneously imports T-BOX；

Step 2：T-BOX obtains the numerical value of Vehicle Speed and car load the two vehicle features, then according to the two The numerical computations of vehicle feature judge which safe class current motoring condition is in；

Step 3：T-BOX judges which electronic control system isolation should be implemented to according to current motoring condition safe class Protection, and corresponding isolation beginning message is sent to these electronic control systems, isolation starts message will be uploaded in CAN Pass；

Step 4：Electronic control system ECU receives isolation message and enters corresponding isolation, and step 1 to T-BOX imports car The task Exactly-once of characteristic safe class, then step 2, step 3, step 4 is repeated.

2. the T-BOX protecting information safety methods of vehicle feature safe class are based on according to claim 1, and its feature exists In by the running status implementation information security protection according to automobile, considering between physical characteristic and information security characteristic Association, reduce information of vehicles security risk.

3. the T-BOX protecting information safety methods of vehicle feature safe class are based on according to claim 1, and its feature exists Can all receive the isolation message that T-BOX is sent in, step 4 electronic control system ECU, but in order to reach only control it is right The effect of electronic control system is answered, the identifier that only corresponding electronic control system ECU could be recognized can be added in message, when ECU receives isolation message, the identifier that can be checked in message, if None- identified, then will ignore this isolation message, can be with The ECU of identification isolation message will control its electronic control system being located and enter isolation, in this case the Electronic Control The ECU of system will ignore all its exterior messages in addition to the corresponding isolation end message of identifier, receive discernible Isolation end message will move out isolation.