CN108073156B - A kind of the security algorithm management method and system of vehicle electronic control unit - Google Patents

Abstract

The present invention provides the security algorithm management method and system of a kind of vehicle electronic control unit, wherein security algorithm management method includes: to be retrieved as the respectively arranged mutually different constant value of multiple target electronic control units, and generate the open security algorithm of the multiple target electronic control unit, wherein, the key value of the open security algorithm is that intermediate variable adds seed, and the intermediate variable is obtained by being calculated the corresponding constant value of target electronic control unit using internal security algorithm；The multiple target electronic control unit is respectively configured in the open security algorithm, and sets the corresponding constant value of the target electronic control unit for the value of the diagnostic data identifier of each target electronic control unit.The open security algorithm that each supplier obtains in the embodiment of the present invention is different, realizes confidentiality；Main engine plants' diagnostic device can obtain the open security algorithm of all suppliers by internal security algorithm simultaneously, convenient for management, be easily used.

Description

A safety algorithm management method and system for an automotive electronic control unit

technical field

The invention relates to the technical field of automobiles, in particular to a safety algorithm management method and system of an automobile electronic control unit.

Background technique

The security algorithm of the automotive electronic control unit (ECU) is an important way to protect the internal information of the automotive ECU. With this security algorithm, the relevant information of the ECU can be modified or configured. The specific algorithm of the security algorithm is an important and confidential content. The algorithm is controlled by the OEM.

However, within the automotive industry, the same ECU may be supplied by multiple suppliers. When controlling the safety algorithm of multiple suppliers, OEMs are often faced with a contradictory situation: if supplier A and supplier B If the same security algorithm is released, it is difficult to guarantee the confidentiality of the security algorithm, that is, multiple suppliers know the security algorithm of the other party's ECU; if different security algorithms are released to supplier A and supplier B, although the confidentiality can be guaranteed, but It has brought a lot of trouble to the management and control of the OEM, and the OEM will be confused when managing the security algorithm. What's more troublesome is that if the supplier is added after the development of the diagnostic equipment is completed, all the software of the diagnostic equipment needs to be updated and maintained for a long time, and the workload is very heavy.

Contents of the invention

The technical problem to be solved by the present invention is to provide a safety algorithm management method and system for automotive electronic control units, which not only ensures the confidentiality of the safety algorithms between the target electronic control units of each supplier, but also facilitates the management of each supplier by the OEM. Security algorithm of the target electronic control unit.

In order to solve the above-mentioned technical problems, the present invention provides a safety algorithm management method of an automotive electronic control unit, comprising:

Obtain mutually different constant values respectively set for a plurality of target electronic control units, and generate a public security algorithm of the multiple target electronic control units, wherein the key value of the public security algorithm is an intermediate variable plus a seed value, the intermediate variable is obtained by calculating the constant value corresponding to the target electronic control unit using an internal security algorithm;

The public security algorithm is respectively configured to the plurality of target electronic control units, and the value of the diagnostic data identifier of each target electronic control unit is set as a constant value corresponding to the target electronic control unit.

Wherein, the intermediate variables obtained by calculating the constant value corresponding to the target electronic control unit using the internal security algorithm are all different.

Wherein, the security algorithm management method also includes:

Obtain its corresponding constant value and seed value from the target electronic control unit through a diagnostic device; and calculate the constant value using the internal security algorithm to obtain an intermediate variable; and identify the intermediate variable and the seed value according to the The public security algorithm of the target ECU.

Wherein, the method of obtaining the constant value is: sending a diagnosis command to the target electronic control unit through a diagnostic device, and obtaining it from the target electronic control unit through feedback.

Wherein, the acquisition method of the seed value is: the diagnosis device sends a request seed instruction to the target electronic control unit, and obtains it through feedback from the target electronic control unit.

The present invention also provides a safety algorithm management system of an automotive electronic control unit, comprising:

An algorithm generating module, configured to obtain mutually different constant values set for multiple target electronic control units, and generate public security algorithms of the multiple target electronic control units, wherein the key value of the public security algorithm Adding a seed value to the intermediate variable, the intermediate variable is obtained by calculating the constant value corresponding to the target electronic control unit using an internal security algorithm;

An algorithm configuration module, configured to respectively configure the public security algorithm to the plurality of target electronic control units, and set the value of the diagnostic data identifier of each target electronic control unit as the value corresponding to the target electronic control unit constant value.

Wherein, the intermediate variables obtained by calculating the constant value corresponding to the target electronic control unit using the internal security algorithm are all different.

Wherein, the security algorithm management system also includes:

The diagnostic equipment is used to obtain the corresponding constant value and seed value from the target electronic control unit, calculate the constant value using the internal security algorithm to obtain an intermediate variable, and then obtain the intermediate variable according to the intermediate variable and the seed value A published security algorithm of the target electronic control unit is identified.

Wherein, the acquisition method of the constant value is: the diagnosis instruction is sent to the target electronic control unit by the diagnostic equipment, and obtained from the target electronic control unit through feedback.

Wherein, the acquisition method of the seed value is: the diagnosis device sends a request seed instruction to the target electronic control unit, and obtains it from the target electronic control unit.

The beneficial effects of the embodiments of the present invention are: through the double encryption of the public security algorithm and the internal security algorithm, for suppliers, the public security algorithms obtained by each supplier are different, which realizes confidentiality; for the diagnostic equipment of the main engine factory, it can Obtain public security algorithms of all suppliers through internal security algorithms, which is easy to manage and easy to use.

Detailed ways

The following descriptions of the various embodiments are intended to illustrate specific embodiments in which the present invention may be practiced.

Embodiment 1 of the present invention provides a safety algorithm management method of an automotive electronic control unit, including:

Obtain mutually different constant values respectively set for a plurality of target electronic control units, and generate a public security algorithm of the multiple target electronic control units, wherein the key value of the public security algorithm is an intermediate variable plus a seed value, the intermediate variable is obtained by calculating the constant value corresponding to the target electronic control unit using an internal security algorithm;

The public security algorithm is respectively configured to the plurality of target electronic control units, and the value of the diagnostic data identifier of each target electronic control unit is set as a constant value corresponding to the target electronic control unit.

Specifically, in this embodiment, the constant value is designed as const, and the constant value can be read from the ECU through a diagnostic command, and the diagnostic data identifier (DID) is 0x02FF as an example.

For supplier A, set the constant value of its target ECU const_A=0xABCDEF12; for supplier B, set the constant value of its target ECU const_B=0x12345678. Correspondingly, the diagnostic DID of the target ECU of vendor A is set to DID 0x02FF=0xABCDEF12, and the diagnostic DID of the target ECU of vendor B is set to DID 0x02FF=0x12345678. It can be understood that the aforementioned constant values set for the target ECUs of supplier A and supplier B are only examples, and can be set to any value in practical applications.

Since the constant values set for each target ECU are different, the internal security algorithm will not be provided to the supplier, and the intermediate variables obtained by calculating the constant value corresponding to each target ECU using the internal security algorithm are different. Therefore, it will be provided The key values of the public security algorithms for the target ECUs of each supplier are also different, which makes the public security algorithms of the target ECUs of each supplier different, achieving the purpose of confidentiality.

The internal security algorithm is mastered by the OEM and will not be provided to various suppliers. As mentioned above, the key value of the public security algorithm generated for multiple target ECUs needs to be an intermediate variable obtained by calculating the constant value corresponding to each target ECU using the internal security algorithm. Therefore, in fact, the public security algorithm is based on the internal security Arithmetic derived.

The effect of setting the value of the diagnostic data identifier of each target ECU to its corresponding constant value is that the diagnostic equipment of the host factory reads the value of its diagnostic data identifier from the target ECU through a diagnostic command, which is equivalent to The constant value of the target ECU is obtained from the diagnostic equipment of the OEM. As mentioned above, the intermediate variable of the open security algorithm of the target ECU can be obtained by calculating the constant value using the internal security algorithm, and the seed value of the open security algorithm of the target ECU can be sent to the target ECU by requesting the seed instruction, and then Obtained from the feedback of the target ECU, in this way, the public security algorithm of the target ECU can be recognized by the diagnostic equipment of the OEM, and then the next unlocking operation can be performed. When the target ECU provided by different suppliers is connected, the diagnostic equipment of the OEM can automatically identify it as mentioned above. This realizes that although the public security algorithms configured to each target ECU are different, the uniqueness of the security algorithm can be guaranteed on the diagnostic equipment, and the diagnostic equipment can call the same security algorithm for each target ECU without the need to identify Which supplier provided the ECU.

Of course, the constant value set for the target ECU of each supplier is designed to be readable, so that the after-sales diagnostic equipment can read it, so the supplier can also read it, that is, the supplier can know the specific constant value of its target ECU, but the supply The quotient does not know the constant value to the internal security algorithm of the intermediate variable temp.

Hereinafter, it will be described in detail in conjunction with the foregoing examples. The internal security algorithm can be designed as its key value Key=temp+seed, where the intermediate variable temp = const × 3. It can be understood that the calculation of the intermediate variable here is only an example for the convenience of description, and the actual internal security algorithm is designed to be very complex. The intermediate variable temp is calculated through the above internal security algorithm, where the intermediate variable temp_A=const_A×3=0x0369CD36 is used for the public security algorithm of supplier A’s ECU, and the intermediate variable temp_B= for the public security algorithm of supplier B’s ECU const_B×3=0x39D369B6.

The key value Key of the public security algorithm provided to the target ECU of supplier A=0x0369CD36+seed, its diagnostic data identifier DID 0x02FF=0xABCDEF12, the key value Key of the public security algorithm provided to the target ECU of supplier B =0x39D369B6+seed, whose diagnostic data identifier DID 0x02FF=0x12345678. In this way, the public security algorithm obtained by the target ECU of supplier A and the target ECU of supplier B is different, and the purpose of confidentiality is achieved, and the algorithm (that is, the internal security algorithm) from its constant value to the intermediate variable temp (that is, the internal security algorithm) of each supplier They don't know, and they can't deduce it in reverse.

Taking the target ECU access provided by supplier A as an example, the diagnostic equipment of the OEM sends a request seed command, and the ECU feeds back a seed value (seed) after receiving the request seed command, and the seed value is a random value; Similarly, the diagnostic equipment of the OEM sends a diagnostic command to the ECU, and the ECU should return the value of its DID (0x02FF=0xABCDEF12), and then the diagnostic equipment puts the value of the DID into the internal security algorithm for calculation, and the key value Key=( 0xABCDEF12×3)+seed, the public security algorithm of provider A is obtained: key value Key=0x0369CD36+seed. With this algorithm, the OEM's diagnostic equipment can unlock Supplier A's ECU.

It should also be noted that for the target ECU, if a new supplier is added later, such as supplier C, a constant value const_C=0x22222222 is also set for it, and its diagnostic DID is set to DID 0x02FF=0x22222222, and the public security algorithm The intermediate variable temp=const_C×3=0x66666666, then the diagnostic equipment of the OEM can know the public security algorithm of the ECU of supplier C after obtaining the values of seed and DID through the diagnostic command, without changing the diagnostic equipment software.

Corresponding to Embodiment 1 of the present invention, Embodiment 2 of the present invention provides a safety algorithm management system for an automotive electronic control unit, including:

An algorithm generating module, configured to obtain mutually different constant values set for multiple target electronic control units, and generate public security algorithms of the multiple target electronic control units, wherein the key value of the public security algorithm Adding a seed value to the intermediate variable, the intermediate variable is obtained by calculating the constant value corresponding to the target electronic control unit using an internal security algorithm;

An algorithm configuration module, configured to respectively configure the public security algorithm to the plurality of target electronic control units, and set the value of the diagnostic data identifier of each target electronic control unit as the value corresponding to the target electronic control unit constant value.

Wherein, the intermediate variables obtained by calculating the constant value corresponding to the target electronic control unit using the internal security algorithm are all different.

Wherein, the security algorithm management system also includes:

The diagnostic equipment is used to obtain the corresponding constant value and seed value from the target electronic control unit, calculate the constant value using the internal security algorithm to obtain an intermediate variable, and then obtain the intermediate variable according to the intermediate variable and the seed value A published security algorithm of the target electronic control unit is identified.

Wherein, the acquisition method of the constant value is: the diagnosis instruction is sent to the target electronic control unit by the diagnostic equipment, and obtained from the target electronic control unit through feedback.

Wherein, the acquisition method of the seed value is: the diagnosis device sends a request seed instruction to the target electronic control unit, and obtains it from the target electronic control unit.

It can be seen from the above description that the beneficial effects of the embodiments of the present invention are: through the double encryption of the public security algorithm and the internal security algorithm, for suppliers, the public security algorithms obtained by each supplier are different, which realizes confidentiality; As far as the equipment is concerned, the public security algorithms of all suppliers can be obtained through the internal security algorithm, which is easy to manage and easy to use.

The above disclosures are only preferred embodiments of the present invention, and certainly cannot limit the scope of rights of the present invention. Therefore, equivalent changes made according to the claims of the present invention still fall within the scope of the present invention.

Claims (9)

1. A safety algorithm management method for an automotive electronic control unit, comprising: Obtain mutually different constant values respectively set for a plurality of target electronic control units, and generate public security algorithms of the multiple target electronic control units, wherein the key value of the public security algorithm of each target electronic control unit is The intermediate variable plus the seed value, the intermediate variable corresponding to the public security algorithm of each target electronic control unit is obtained by calculating the constant value corresponding to the target electronic control unit using the internal security algorithm; the public security algorithm of each target electronic control unit The corresponding intermediate variables are all different; configuring the generated public security algorithms of the plurality of target electronic control units to the plurality of target electronic control units respectively, and setting the value of the diagnostic data identifier of each target electronic control unit as the value of the target electronic control unit The constant value corresponding to the cell. 2. The security algorithm management method according to claim 1, further comprising: Obtain its corresponding constant value and seed value from the target electronic control unit through a diagnostic device; and calculate the constant value using the internal security algorithm to obtain an intermediate variable; and identify the intermediate variable and the seed value according to the The public security algorithm of the target ECU. 3. The security algorithm management method according to claim 2, characterized in that, the acquisition method of the constant value is: sending a diagnostic instruction to the target electronic control unit through a diagnostic device, and obtaining from the feedback of the target electronic control unit . 4. The security algorithm management method according to claim 2, characterized in that the acquisition of the seed value is: sending a request seed instruction to the target electronic control unit through a diagnostic device, and feedback from the target electronic control unit get. 5. A safety algorithm management system for an automotive electronic control unit, characterized in that it comprises: An algorithm generating module, configured to acquire mutually different constant values respectively set for multiple target electronic control units, and generate the public security algorithms of the multiple target electronic control units, wherein the public security algorithms of each target electronic control unit The key value of the algorithm is an intermediate variable plus a seed value, and the intermediate variable corresponding to the public security algorithm of each target electronic control unit is obtained by calculating the constant value corresponding to the target electronic control unit using an internal security algorithm; each target electronic control unit The intermediate variables corresponding to the open security algorithms of the control unit are all different; An algorithm configuration module, configured to respectively configure the generated public security algorithms of the plurality of target electronic control units to the plurality of target electronic control units, and set the value of the diagnostic data identifier of each target electronic control unit is the constant value corresponding to the target ECU. 6. The safety algorithm management system according to claim 5, wherein the intermediate variables obtained by calculating the constant value corresponding to the target electronic control unit using the internal safety algorithm are all different. 7. The security algorithm management system according to claim 5, further comprising: The diagnostic equipment is used to obtain the corresponding constant value and seed value from the target electronic control unit, calculate the constant value using the internal security algorithm to obtain an intermediate variable, and then obtain the intermediate variable according to the intermediate variable and the seed value A published security algorithm of the target electronic control unit is identified. 8. The security algorithm management system according to claim 7, characterized in that, the acquisition method of the constant value is: sending a diagnostic instruction to the target electronic control unit through the diagnostic device, and receiving a diagnostic command from the target electronic control unit Feedback is obtained. 9. The security algorithm management system according to claim 7, characterized in that, the acquisition method of the seed value is: sending a request seed instruction to the target electronic control unit through the diagnostic device, and receiving a request from the target electronic control unit Unit feedback is obtained.