CN115333785A - A safety isolation system, vehicle safety control method and related equipment - Google Patents

Abstract

The invention discloses a safety isolation system, a vehicle safety control method and related equipment. The system comprises: the communication protocol module is used for providing an API (application programming interface) interface of a specific protocol for a third-party application, receiving a request instruction sent by the third-party application and determining whether to send the request instruction to the service interface agent module according to a safety verification result of the safety detection module; the safety detection module is used for detecting whether a request instruction sent by a third-party application is safe or not and feeding back a safety verification result to the communication protocol module; and the service interface agent module is used for converting the vehicle service interface into a specific API interface for the third-party application to call. The safety isolation system can ensure that the safety attributes of the vehicle and the privacy data of the user are not leaked, can expand the application scenes of vehicle services and interfaces to the maximum extent, and can assist the ecological sustainable development of automobile software.

Description

A safety isolation system, vehicle safety control method and related equipment

technical field

This specification relates to the field of vehicle safety, and more specifically, the present invention relates to a safety isolation system, a vehicle safety control method and related equipment.

Background technique

At present, the automobile industry is undergoing profound changes. With the development of the "four modernizations" of the automobile industry and the prevalence of emerging technologies such as intelligent network technology, autonomous driving technology, and 5G, more and more ICT (Information Communication Technology) technologies are being used applied to the automotive field. Users are no longer satisfied with the highly homogeneous models on the market, especially high-end users and young users are more and more eager to own a unique car to show their own taste and personality. Separation of software and hardware functions, service-oriented reconstruction of software for SOA (Service-Oriented Architecture, Service-Oriented Architecture) service concept, rapid customization and development of complex software functions and personalized functions through the combined application of different services, Updating vehicle software functions through OTA (Over-the-Air Technology, over-the-air technology) online upgrade method to meet user's individual needs and frequent new ones is the key path to solve the problem of product homogeneity and an important aspect of the automotive industry. development trend. As a result, the automotive software ecosystem will develop towards the mobile application ecosystem, and more and more third-party developers will participate in it, which will affect the safety of automobiles.

At the same time, intelligent networked vehicles are important IoT terminals and vehicles. When the current vehicle services and interfaces are called by third-party applications, if the third party is an illegal intruder, it is very easy to control the vehicle, which seriously affects the safety of the vehicle. Drive safely.

Contents of the invention

A series of concepts in simplified form are introduced in the Summary of the Invention, which will be further detailed in the Detailed Description. The summary of the invention in the present invention does not mean to limit the key features and essential technical features of the claimed technical solution, nor does it mean to try to determine the protection scope of the claimed technical solution.

In the first aspect, the present invention proposes a safety isolation system, the above-mentioned system includes:

The communication protocol module is used to provide an API interface of a specific protocol for the third-party application, receive the request instruction sent by the above-mentioned third-party application, and determine whether to send the above-mentioned request instruction to the service interface proxy module according to the security verification result of the security detection module;

The safety detection module is used to detect whether the request command issued by the third-party application is safe, and feeds back the safety verification result to the above-mentioned communication protocol module;

The service interface agent module is used to convert the vehicle service interface into a specific API interface for the above-mentioned third-party application to call.

Optionally, the above security detection module also includes:

A security authentication component, configured to detect whether the third-party application corresponding to the above request instruction is a trusted application;

The access rights management component is used to determine whether the sender corresponding to the request instruction has corresponding control rights when the above-mentioned third-party application is a trusted application;

The context detection component is configured to detect whether the request instruction exceeds a preset threshold to determine the safety of the request instruction when the above-mentioned control authority meets the preset requirements.

Optionally, the above-mentioned service interface proxy module includes:

The version management component is used to manage the version of the vehicle-side service;

The compatibility management component is used to manage the compatibility between different versions of the above-mentioned car-side services;

The variant management component is used to realize the variant management of the vehicle-side service interface, so as to distinguish the vehicle-side services that can be provided by different vehicle configurations.

Optionally, the communication protocol module above includes:

The protocol conversion component is used to realize the communication protocol conversion between the third-party service and the vehicle-side service;

The API interface component is used to provide API interfaces of specific protocols for third-party applications.

In the second aspect, the present application proposes a vehicle safety control method, which is used in any one of the above-mentioned safety isolation systems in the first aspect, and the method includes:

Receive request messages sent by third-party applications;

Send the above-mentioned request message to the above-mentioned security detection module and obtain a security verification result;

In the case that the above-mentioned security verification result is a security result, the above-mentioned request message is sent to the above-mentioned service interface proxy module to call the corresponding vehicle service.

Optionally, the above method also includes:

Obtain the type of the above-mentioned third-party application when the above-mentioned security verification result is a dangerous result;

In the case that the above-mentioned third-party application type is a vehicle driving application, immediately upload the dangerous result to the cloud;

Remind the user on the vehicle side to enter the manual driving mode.

Optionally, the above method also includes:

In the case that the above-mentioned third-party application type is an auxiliary service application, obtain the number of dangerous results of the above-mentioned third-party application within a preset time;

When the number of dangerous results exceeds a preset threshold, the service provided by the third-party application is cut off.

In the second aspect, the present invention also proposes a vehicle safety control device, including:

a receiving unit, configured to receive a request message sent by a third-party application;

An acquisition unit, configured to send the above-mentioned request message to the above-mentioned security detection module and obtain a security verification result;

The control unit is configured to send the above-mentioned request message to the above-mentioned service interface proxy module to call the corresponding vehicle service when the above-mentioned security verification result is a security result.

In a third aspect, an electronic device includes: a memory, a processor, and a computer program stored in the memory and operable on the processor. The processor is used to execute the computer program stored in the memory to implement the above-mentioned first In one aspect, the steps of any one of the vehicle safety control methods.

In a fourth aspect, the present invention also proposes a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the vehicle safety control method described in any one of the above-mentioned aspects of the first aspect is implemented.

To sum up, the security isolation system of the embodiment of the present application includes: a communication protocol module, which is used to provide a third-party application with an API interface of a specific protocol, receive the request instruction issued by the above-mentioned third-party application, and determine according to the security verification result of the security detection module Whether to send the above-mentioned request command to the service interface proxy module; the security detection module is used to detect whether the request command sent by the third-party application is safe, and feeds back the security verification result to the above-mentioned communication protocol module; the service interface proxy module is used to send the vehicle The service interface is converted into a specific API interface for the above-mentioned third-party application to call. The safety isolation system proposed in this application provides API interfaces of specific protocols for third-party applications through the communication protocol module, which facilitates the connection between third-party applications and the vehicle end, and performs multi-level monitoring of the request information sent by third-party applications through the safety detection module. The security evaluation ensures the legitimacy of the third-party application request entering the vehicle end. The service port of the vehicle end and the third-party service port are converted through the service interface proxy module, which ensures the privacy and security of the service port of the vehicle end, and improves the The security of vehicle-side services is improved. The system proposed in this application can ensure that vehicle safety attributes and user privacy data are not leaked, and can also maximize the application scenarios of vehicle services and interfaces, help the sustainable development of automotive software ecology, and build a new business model for software service products. Finally, a business form similar to a mobile phone application store is formed.

The vehicle safety control method of the present invention, other advantages, objectives and features of the present invention will be partly embodied by the following description, and partly will be understood by those skilled in the art through the research and practice of the present invention.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the description. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

FIG. 1 is a schematic structural diagram of a safety isolation system provided by an embodiment of the present application;

FIG. 2 is a schematic structural diagram of a safety detection module in a safety isolation system provided by an embodiment of the present application;

FIG. 3 is a schematic structural diagram of a service interface proxy module in a security isolation system provided by an embodiment of the present application;

FIG. 4 is a schematic structural diagram of a communication protocol module in a security isolation system provided by an embodiment of the present application;

FIG. 5 is a schematic flow chart of a vehicle safety control method provided in an embodiment of the present application;

FIG. 6 is a schematic flow chart of another vehicle safety control method provided in the embodiment of the present application;

FIG. 7 is a schematic structural diagram of another safety isolation system provided by the embodiment of the present application;

FIG. 8 is a schematic structural diagram of a vehicle safety control device provided in an embodiment of the present application;

FIG. 9 is a schematic structural diagram of a vehicle safety control electronic device provided by an embodiment of the present application.

Detailed ways

The safety isolation system proposed in this application provides API interfaces of specific protocols for third-party applications through the communication protocol module, which facilitates the connection between third-party applications and the vehicle end, and performs multi-level monitoring of the request information sent by third-party applications through the safety detection module. The security evaluation ensures the legitimacy of the third-party application request entering the vehicle end. The service port of the vehicle end and the third-party service port are converted through the service interface proxy module, which ensures the privacy and security of the service port of the vehicle end, and improves the The security of vehicle-side services is improved. The system proposed in this application can ensure that vehicle safety attributes and user privacy data are not leaked, and can also maximize the application scenarios of vehicle services and interfaces, help the sustainable development of automotive software ecology, and build a new business model for software service products. Finally, a business form similar to a mobile phone application store is formed.

The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above drawings are used to distinguish similar objects, and not necessarily Used to describe a specific sequence or sequence. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to the expressly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus. The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all of them.

Please refer to Figure 1, which is a schematic structural diagram of a safety isolation system provided by the embodiment of the present application, which may specifically include:

The communication protocol module 10 is used to provide an API interface of a specific protocol for the third-party application, receive the request instruction sent by the above-mentioned third-party application, and determine whether to send the above-mentioned request instruction to the service interface proxy module according to the security verification result of the security detection module;

The safety detection module 20 is used to detect whether the request command sent by the third-party application is safe, and feeds back the safety verification result to the above-mentioned communication protocol module;

The service interface agent module 30 is used to convert the vehicle service interface into a specific API interface for the above-mentioned third-party application to call.

Exemplarily, the safety isolation system proposed in this application includes a communication protocol module, a safety detection module and a service interface proxy module. The communication protocol module provides specific protocols according to the protocols required by third-party applications. The same vehicle includes multiple services, multiple Such services need to be distributed to different third parties for targeted design, and the services designed by different third parties may be generated based on different protocols. The communication protocol module provides specified third-party applications with APIs that meet their protocol requirements ( Application Programming Interface, application program interface) interface, and at the same time convert the protocol of the third-party application into the protocol type available in the vehicle, so as to realize the requirement that the vehicle end is compatible with the third-party application. After the communication protocol module receives the third-party application request instruction, it sends the request instruction to the security detection module, and the security detection module judges the legitimacy of the third-party application requesting the instruction, such as judging whether the application is legal, whether the application sends Whether the authority of the user meets the requirements, whether the adjustment range corresponding to the request instruction meets the threshold requirements, etc. After the safety detection module detects that the request command is qualified, it will notify the communication protocol module that the request command can be sent to the service interface proxy module. The service interface proxy module has a specific API interface, and the service interface proxy module can implement third-party service interfaces and vehicle-side services. The interface is converted according to the established logic, and only provides specific API interfaces for third-party applications, while the vehicle-side service interface is connected to the corresponding ECU (Electronic Control Unit, Electronic Control Unit) that executes the service on the vehicle side, and is implemented through the service interface agent module. Interface conversion, the service interface on the vehicle side will not be exposed to third-party application manufacturers, which fundamentally improves the safety of the vehicle.

To sum up, the security isolation system proposed in this application provides API interfaces of specific protocols for third-party applications through the communication protocol module, which facilitates the connection between third-party applications and vehicles. Perform multi-level security evaluation to ensure the legitimacy of third-party application requests entering the vehicle side, and convert the vehicle-side service port and third-party service port through the service interface proxy module to ensure the privacy and security of the vehicle-side service port This improves the security of vehicle-side services. The system proposed in this application can ensure that vehicle safety attributes and user privacy data are not leaked, and can also maximize the application scenarios of vehicle services and interfaces, help the sustainable development of automotive software ecology, and build a new business model for software service products. Finally, a business form similar to a mobile phone application store is formed.

In some examples, the above-mentioned safety detection module 20 also includes:

A security authentication component 201, configured to detect whether the third-party application corresponding to the request instruction is a trusted application;

The access rights management component 202 is configured to determine whether the sender corresponding to the request instruction has corresponding control rights when the above-mentioned third-party application is a trusted application;

The context detection component 203 is configured to detect whether the request instruction exceeds a preset threshold to determine the safety of the request instruction when the above-mentioned control authority meets the preset requirements.

Exemplarily, the security detection module includes a security authentication component, an access right management component and a context detection component. When performing security testing, the details are shown in Figure 6:

S610. The communication protocol module sends the request command sent by the third-party application server to the security detection module;

S620. The security authentication component first verifies whether the third-party application is a trusted application, and the trusted application can be managed through a white list, and the trusted application is a known third-party application. If the third-party application is an illegal application, jump to step S670 and execute S680;

S630. If the third-party application is a trusted application, check the request permission of the third-party application. For example, if the third-party application is an entertainment interactive application, that is, to provide entertainment information such as audio-visual images for the vehicle, the request command issued by it Smart is the central control screen, audio and other audio-visual equipment, but it is detected that the application has issued a vehicle lane change request command, and the request command does not match the corresponding authority of the application, then jump to step S670 and execute S680;

S640. If the permissions of the application meet the requirements, perform context message environment detection. Context environment monitoring refers to extracting context environment monitoring rules from aspects such as scenario requirements, function logic, whether changes in key parameters are reasonable, and attack characteristics in combination with business application scenarios. , for security isolation when the context rules are violated. Detect whether the request value corresponding to the request command meets the requirements of the preset value. For example, if the user has set the maximum speed of the vehicle to 120km/h, and the lane change and overtaking application sends a request command of 140km/h, since 140km/h has exceeded 120km/h threshold requirement, now jump to step S670 and execute S680;

S650, judging whether the service request value is reasonable

S660. If the service request is reasonable, that is, the request value corresponding to the request instruction meets the threshold requirement, execute the service corresponding to the request instruction;

S670. Deny the access service corresponding to the request instruction;

S680. Record the fault code, and upload the fault code to the cloud.

To sum up, the security isolation system proposed in the embodiment of this application uses the security authentication component, the access authority management component and the context detection component in the security detection module to check the third-party service request instructions at the three levels of application, authority and request threshold. Safety detection can perform safety screening on the request instructions issued by third-party applications to ensure the safety of vehicles.

In some examples, the service interface proxy module 30 includes:

The version management component 301 is used to manage the version of the vehicle side service;

Compatibility management component 302, configured to manage the compatibility between different versions of the above-mentioned car-side services;

The variant management component 303 is used to realize the variant management of the vehicle-side service interface, so as to distinguish the vehicle-side services that can be provided by different vehicle configurations.

Exemplarily, the service interface proxy module includes a version management component, a compatibility component and a variant management component, the version management component is used to manage the version of the vehicle-side service, and update the version of the vehicle-side service based on the upgraded service provided by the third party, In the process of upgrading the services on the vehicle side and the server side, there may be inconsistencies in the version information of the two types, resulting in incompatible services. The compatibility management component can include the services of the pre-update version and the service of the post-update version to solve compatibility problems. The variant management component is used to realize the variant management of the vehicle-side service interface, so as to distinguish the vehicle-side services that can be provided by different vehicle configurations, and prevent third-party applications from maliciously controlling the vehicle after knowing the vehicle-side interface service interface, causing potential safety hazards to the vehicle.

To sum up, the security isolation system provided by the embodiment of this application can realize the smooth upgrade of the service between the vehicle end and the third-party application end through the service interface proxy module, and at the same time, through the interface conversion between the service of the vehicle end and the service of the third-party application end, avoiding the problem of vehicle service And the interface is directly visible to third-party applications, which improves the safety of the vehicle.

In some examples, the above communication protocol module 10 includes:

A protocol conversion component 101, configured to implement communication protocol conversion between third-party services and vehicle-side services;

The API interface component 102 is configured to provide API interfaces of specific protocols for third-party applications.

Exemplarily, the communication protocol module includes a protocol conversion component and an API interface component. Through the protocol conversion module, the protocol conversion between the vehicle end and the third-party server can be realized, and the API interface group provides the API interface of the corresponding protocol for the third-party service. The three parties are applied to the vehicle side for communication and control.

To sum up, the security isolation system provided by the embodiment of the present application can provide API interfaces of specific protocols for different third-party applications through the communication protocol module, so as to facilitate the communication between the third party and the vehicle.

In the second aspect, as shown in Figure 5, the present application proposes a vehicle safety control method for any one of the above-mentioned safety isolation systems in the first aspect, the method includes:

S510. Receive a request message sent by a third-party application;

Exemplarily, the communication protocol module establishes connections with different third-party applications through the API interface of a specific protocol to realize communication. When the third-party application sends a request message, the communication protocol module first receives it. The request message includes a vehicle travel control request message, a vehicle environment control request message, and the like.

S520. Send the above request message to the above security detection module and obtain a security verification result;

Exemplarily, the communication protocol module sends the received request message to the security detection module, and the security detection module judges the legitimacy of the third-party application requesting the instruction, such as judging whether the application is legal, whether the application is under Whether the authority of the sender meets the requirements, whether the adjustment range corresponding to the request instruction meets the threshold requirements, etc. And feed back the safety verification result to the communication protocol module.

S530. In the case that the above-mentioned safety verification result is a safety result, send the above-mentioned request message to the above-mentioned service interface proxy module to call the corresponding vehicle service.

Exemplarily, after the safety detection module detects that the request instruction is qualified, the notification communication protocol module can send the request instruction to the service interface proxy module. The service interface proxy module has a third-party service interface and a vehicle-side service interface. The service interface proxy module can Realize the conversion between the third-party service interface and the vehicle-side service interface according to the established logic, and only provide the third-party application third-party service interface, while the vehicle-side service interface and the corresponding ECU (Electronic Control Unit, electronic control unit) that executes the service on the vehicle side ) connection, through the service interface proxy module for interface conversion, the service interface on the vehicle side will not be exposed to third-party application manufacturers, which fundamentally improves the safety of the vehicle. As shown in Figure 7, the service interface proxy module converts the vehicle service interface A into interface B for third-party applications to call through the protocol conversion module; the communication protocol conversion module encapsulates interface B into a specific protocol API interface, Among them, interface A is the vehicle-side interface, and interface B is the interface provided for third-party applications.

To sum up, the vehicle safety control method proposed in the embodiment of the present application receives the request command through the communication protocol module, and sends the request command to the safety detection module, and performs multi-level security on the request information sent by the third-party application through the safety detection module. Judgment ensures the legitimacy of third-party application requests entering the vehicle side, and converts the vehicle-side service port and the third-party service port through the service interface proxy module, ensuring the privacy and security of the vehicle-side service port and improving the vehicle-side service port. The security of the service can ensure that the vehicle's security attributes and user privacy data are not leaked, and it can also maximize the application scenarios of vehicle services and interfaces, helping the sustainable development of the automotive software ecosystem.

In some examples, the above methods also include:

Obtain the type of the above-mentioned third-party application when the above-mentioned security verification result is a dangerous result;

In the case that the above-mentioned third-party application type is a vehicle driving application, immediately upload the dangerous result to the cloud;

Remind the user on the vehicle side to enter the manual driving mode.

Exemplarily, when the safety verification result is a dangerous result, the request command issued by the third-party application is a dangerous command, and at this time, the type of the third-party application is identified. If it is identified that the third-party application corresponds to a vehicle driving application , the vehicle’s automatic driving or assisted driving functions are likely to be illegally invaded. If assisted driving is continued at this time, it is likely to cause danger. The driving user should be reminded to enter the manual driving mode immediately to avoid the driver’s dependence on assisted driving.

To sum up, the vehicle safety control method proposed in the embodiment of this application obtains the type of the third-party application when the safety verification result of the request message is a dangerous result, and immediately notifies The user enters the manual driving mode to avoid vehicle safety accidents.

In some examples, the above methods also include:

In the case that the above-mentioned third-party application type is an auxiliary service application, obtain the number of dangerous results of the above-mentioned third-party application within a preset time;

When the number of dangerous results exceeds a preset threshold, the service provided by the third-party application is cut off.

Exemplarily, if the dangerous result is an auxiliary service application, the service service application such as audio-visual entertainment service, air-conditioning automatic temperature adjustment service and other services, such services will not affect the driving safety of the vehicle, and can be given a certain Fault tolerance space, counting the results of the number of dangerous occurrences within the preset time, for example, if there are 5 errors within 10 minutes, if the preset threshold is 4 times, the preset threshold is exceeded, and the third party will be cut off at this time The services provided by the application will not affect the driving experience of the driver.

To sum up, the vehicle safety control method proposed in the embodiment of the present application, in the case that the application corresponding to the request command is an auxiliary service application, determines whether to cut off the service by counting the number of danger occurrences within a preset time, so as to provide a certain fault tolerance space for the auxiliary service , and control it so as not to affect the driving experience of the driver.

In some examples, the third-party application client calls the service through the communication protocol module and the security detection module, and if it passes the security authentication and has the corresponding service access authority, it will monitor according to the pre-extracted context environment monitoring rules. If the service request conforms to the safety monitoring rules, the communication protocol module accesses the vehicle service through the service interface proxy module and executes it; if the service request does not comply with the safety monitoring rules, the communication protocol module refuses to access the vehicle service through the service interface proxy module, and records the corresponding failure code. For example, in hot summer weather, the outdoor temperature is 35°, and the air-conditioning function is turned on while the vehicle is driving. If a third-party application requests to set the temperature inside the car to 20°, which meets the cooling requirements of the business scenario, then respond and execute the service Request; if the third-party application requests to set the temperature inside the car to 32° at this time, which does not meet the cooling requirements of the business scenario, then refuse to call the vehicle air conditioning service and record the fault code.

Please refer to Figure 8, an embodiment of the vehicle safety control device in the embodiment of the present application may include:

A receiving unit 71, configured to receive a request message sent by a third-party application;

An acquisition unit 72, configured to send the aforementioned request message to the aforementioned security detection module and acquire a security verification result;

The control unit 73 is configured to send the above-mentioned request message to the above-mentioned service interface proxy module to call the corresponding vehicle service when the above-mentioned safety verification result is a safety result.

Through the vehicle safety control device provided in this embodiment, by obtaining the working state signal of the vehicle power battery, in the case that the working state signal is a thermal runaway state signal, the speed of the cooling fan of the engine is controlled to be zero, and the air flow speed of the front cabin is reduced. It can effectively prevent the flame propagation speed caused by the fire of the power battery, ensure the escape time of the user, and improve the safety performance of the vehicle.

As shown in Figure 9, the embodiment of the present application also provides an electronic device 800, including a memory 810, a processor 820, and a computer program 811 stored on the memory 820 and operable on the processor, and the processor 820 executes the computer program 811 The steps of any method for realizing the above-mentioned vehicle safety control

Since the electronic equipment introduced in this embodiment is the equipment used to implement a vehicle safety control device in the embodiment of the application, based on the method described in the embodiment of the application, those skilled in the art can understand the The specific implementation of the electronic device and its various variations, so how the electronic device implements the method in the embodiment of the present application will not be described in detail here, as long as those skilled in the art implement the method in the embodiment of the present application. equipment, all belong to the intended protection scope of this application.

In a specific implementation process, when the computer program 311 is executed by the processor, the steps of any method as shown in FIG. 8 are executed.

It should be noted that, in the foregoing embodiments, descriptions of each embodiment have their own emphases, and for parts that are not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowcharts and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded computer, or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce a machine for A device for realizing the functions specified in one or more procedures of a flowchart and/or one or more blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The embodiment of the present application also provides a computer program product, the computer program product includes computer software instructions, and when the computer software instructions are run on the processing device, the processing device executes the process of vehicle safety control in the corresponding embodiment as shown in Figure 8 .

A computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present application will be generated in whole or in part. A computer can be a general purpose computer, special purpose computer, computer network, or other programmable device. Computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, e.g. Coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (such as infrared, wireless, microwave, etc.) transmission to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that can be stored by a computer, or a data storage device such as a server, a data center, etc. integrated with one or more available media. The available media may be magnetic media (eg, floppy disk, hard disk, magnetic tape), optical media (eg, DVD), or semiconductor media (eg, solid state disk (solid state disk, SSD)) and the like.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated. to another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

A unit described as a separate component may or may not be physically separated, and a component displayed as a unit may or may not be a physical unit, that is, it may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods in various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other various media that can store program codes. .

Above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be applied to the foregoing embodiments The technical solutions described in the examples are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the application.

Claims (10)

1. A security barrier system for a vehicle end, comprising:

the communication protocol module is used for providing an API (application programming interface) interface of a specific protocol for a third-party application, receiving a request instruction sent by the third-party application and determining whether to send the request instruction to the service interface agent module according to a safety verification result of the safety detection module;

the safety detection module is used for detecting whether a request instruction sent by a third-party application is safe or not and feeding back a safety verification result to the communication protocol module;

and the service interface agent module is used for converting the vehicle service interface into a specific API (application program interface) interface for the third-party application to call.

2. The system of claim 1, wherein the security detection module further comprises:

the safety certification component is used for detecting whether the third party application corresponding to the request instruction is a trusted application;

the access authority management component is used for judging whether a sender corresponding to the request instruction has corresponding control authority or not under the condition that the third-party application is a trusted application;

and the context environment detection component is used for detecting whether the request instruction exceeds a preset threshold value or not to determine the safety of the request instruction under the condition that the control authority meets a preset requirement.

3. The system of claim 1, wherein the service interface proxy module comprises:

the version management component is used for managing the version of the vehicle-side service;

the compatibility management component is used for managing the compatibility among the vehicle-side services of different versions;

and the modification management component is used for realizing modification management of the vehicle-end service interface so as to distinguish vehicle-end services which can be provided by different vehicle type configurations.

4. The system of claim 1, wherein the communication protocol module comprises:

the protocol conversion component is used for realizing the communication protocol conversion between the third-party service and the vehicle-side service;

and the API interface component is used for providing an API interface of a specific protocol for the third-party application.

5. A vehicle safety control method for the safety isolation system as claimed in any one of claims 1 to 4, comprising:

receiving a request message sent by a third party application;

sending the request message to the security detection module and acquiring a security verification result;

and under the condition that the safety verification result is a safety result, the request message is sent to the service interface agent module to call corresponding vehicle service.

6. The method of claim 5, further comprising:

acquiring the type of the third-party application under the condition that the safety verification result is a dangerous result;

under the condition that the third-party application type is a vehicle running application, immediately uploading a dangerous result to a cloud end;

and reminding a user at the vehicle end to enter a manual driving mode.

7. The method of claim 5, further comprising:

acquiring the number of dangerous results of the third-party application within preset time under the condition that the type of the third-party application is an auxiliary service application;

and cutting off the service provided by the third-party application under the condition that the dangerous result times exceed a preset threshold value.

8. A vehicle safety control device characterized by comprising:

the receiving unit is used for receiving a request message sent by a third-party application;

the acquisition unit is used for sending the request message to the security detection module and acquiring a security verification result;

and the control unit is used for sending the request message to the service interface agent module to call corresponding vehicle service under the condition that the safety verification result is a safety result.

9. An electronic device, comprising: memory and a processor, characterized in that the processor is adapted to carry out the steps of the vehicle safety control method according to any of claims 5-7 when executing a computer program stored in the memory.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that: the computer program, when executed by a processor, implements a vehicle safety control method as claimed in any one of claims 5-7.

Images