WO2025060637A1 - Central gateway controller and data processing method - Google Patents

Abstract

Provided in the embodiments of the present disclosure are a central gateway controller and a data processing method. The central gateway controller comprises a switch chip, the switch chip being provided with a plurality of data transmission interfaces used for being connected to electronic control components of a vehicle. The switch chip comprises a data switching component, a hardware acceleration component and a data processing component. The data switching component is configured to send and receive vehicle-onboard data of the vehicle via the data transmission interfaces; the hardware acceleration component is configured to analyze the vehicle-onboard data to obtain an analysis result; and the data processing component is configured to perform network security detection on the vehicle on the basis of the analysis result of the hardware acceleration component. The present disclosure can complete within the switch chip the analysis and security protection for data of each electronic control component, thereby reducing the computation load of a main control chip, reducing data latency caused by mass data transmission between the switch chip and the main control chip, reducing bandwidth requirements between the switch chip and the main control chip, and ensuring processing of other functional data by the main control chip.

Description

A central gateway controller and data processing method

Cross-references

This disclosure claims the priority of the Chinese patent application filed with the China Patent Office on September 19, 2023, with application number 202311212169.9 and invention name “A Central Gateway Controller and Data Processing Method”, all contents of which are incorporated by reference in this disclosure.

Technical Field

The present disclosure relates to the field of network communication technology, and in particular to a central gateway controller and a data processing method.

Background Art

With the development of vehicle electronic and electrical architecture, the central gateway controller or central intelligent domain controller, as the communication hub in the vehicle network architecture, plays an important role in the routing of the Controller Area Network (CAN)/Local Interconnect Network (LIN)/Ethernet hybrid network. For Ethernet communication routing, the data exchange and forwarding functions need to be completed through the switch chip. In addition to completing data exchange through the switch chip, the central gateway controller also needs to consider data analysis and security protection issues.

The data analysis of the central gateway controller is usually performed on the main control chip. This solution has the following shortcomings: 1) When the switching chip (such as the switch chip) transmits massive data to the main control chip of the central gateway controller, the main control chip will consume a lot of computing resources during the data analysis process, thereby increasing the load of the main control chip. 2) There is a certain delay in data transmission between the switch chip and the main control chip. 3) Data transmission will occupy a large amount of bandwidth, of which most of the data is used for security protection analysis by the main control chip, resulting in less data related to other functions transmitted to the main control chip, affecting the realization of other functions.

Summary of the invention

The purpose of the embodiments of the present disclosure is to provide a central gateway controller and a data processing method to solve the problem in the prior art that a switch chip transmits a large amount of data to a main control chip and increases the main control chip The chip load leads to technical problems such as delay and bandwidth waste.

In order to solve the above technical problems, the embodiments of the present disclosure adopt the following technical solutions:

A central gateway controller includes a switch chip, the switch chip has multiple data transmission interfaces for connecting to electronic control components of a vehicle, the switch chip includes a data exchange component, a hardware acceleration component and a data processing component, the data exchange component is configured to send and receive vehicle-mounted data of the vehicle through the data transmission interface, the hardware acceleration component is configured to analyze the vehicle-mounted data to obtain analysis results; the data processing component is configured to perform network security detection on the vehicle according to the analysis results of the hardware acceleration component.

In some embodiments, the data exchange component is further configured to send the vehicle data to be analyzed to the hardware acceleration component according to preset analysis rules and/or configuration parameters;

The hardware acceleration component is configured to analyze the vehicle data to be analyzed according to a preset deep learning model to obtain an analysis result;

The data processing component is configured to update the data exchange rules of the data exchange component in response to the detected analysis result indicating the existence of a network threat.

In some embodiments, the data exchange component includes an acquisition component configured to acquire the vehicle data to be analyzed based on the data type of the vehicle data, the data type including Transmission Control Protocol (TCP) data and User Datagram Protocol (UDP) data.

In some embodiments, the central gateway controller further includes a memory configured to store the vehicle data received by the data exchange component in response to detecting that the analysis result indicates that no network threat exists.

In some embodiments, the central gateway controller also includes a main control chip connected to the switch chip, and the main control chip and the switch chip are connected via a high-speed serial interface (such as a PCIe interface) or a gigabit media independent interface (RGMII interface).

In some embodiments, the data transmission interface is a physical layer (Physical Layer, referred to as PHY) Ethernet physical interface, and the on-board data is on-board Ethernet data.

In some embodiments, the data transmission interface also includes at least one of a CAN interface, a LIN interface, another CAN interface (such as a CANFD interface), a real-time communication protocol interface (such as a FlexRay interface), and a local area network transmission protocol interface (such as an Ethernet interface).

The disclosed embodiment also provides a data processing method, which is applied to a switch chip of a central gateway controller, wherein the switch chip has a plurality of data for connecting to an electronic control component of a vehicle. The transmission interface comprises:

receiving vehicle-mounted data sent by the electronic control component through a data transmission interface;

Analyze the vehicle data and obtain the analysis results;

Based on the analysis results, the vehicle is tested for network security.

In some embodiments, the method further comprises:

After receiving the vehicle-mounted data sent by the electronic control component, the method further includes: acquiring the vehicle-mounted data to be analyzed according to preset analysis rules and/or configuration parameters;

Analyze the vehicle data and obtain the analysis results, including:

According to the preset deep learning model, the vehicle data to be analyzed is analyzed to obtain the analysis results;

Based on the analysis results, the vehicle is tested for network security, including:

In response to the detected analysis result indicating the existence of a network threat, the data exchange rules of the data exchange component are updated.

In some embodiments, based on the analysis results, a network security check is performed on the vehicle, including: in response to the detected analysis result that no network threat exists, storing the vehicle data received by the data exchange component.

In some embodiments, the method further includes: acquiring the vehicle-mounted data to be analyzed according to a data type of the vehicle-mounted data, wherein the data type includes Transmission Control Protocol TCP data and User Datagram Protocol UDP data.

The central gateway controller and data processing method provided by the embodiments of the present disclosure can complete the analysis and security protection of the data of each electronic control component inside the switch chip by setting a data exchange component, a hardware acceleration component and a data processing component in the switch chip of the central gateway controller, reduce the calculation load of the main control chip, and improve the performance of the central gateway controller; at the same time, by performing data analysis and processing in the switch chip, the data delay caused by a large amount of data transmission between the switch chip and the main control chip can be reduced, the real-time performance of data transmission and processing can be achieved, the response speed of each component of the central gateway controller can be improved, and the bandwidth requirement between the switch chip and the main control chip can be reduced, so as to ensure the main control chip's processing of other functional data.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art description. Obviously, The drawings described below are only some embodiments described in the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

FIG1 is an architecture diagram of a central gateway controller according to an embodiment of the present disclosure;

FIG2 is a flow chart of a data processing method according to an embodiment of the present disclosure;

FIG3 is a flow chart of another data processing method according to an embodiment of the present disclosure;

FIG4 is a schematic diagram of the structure of a processor according to an embodiment of the present disclosure;

FIG5 is a flowchart of a computer program product according to an embodiment of the present disclosure;

FIG6 is a flow chart of a computer-readable storage medium according to an embodiment of the present disclosure;

FIG. 7 is a flow chart of an electronic device according to an embodiment of the present disclosure.

DETAILED DESCRIPTION

Various aspects and features of the present disclosure are described herein with reference to the drawings.

It should be understood that various modifications may be made to the embodiments of the present application. Therefore, the above description should not be considered as limiting, but only as an example of an embodiment. Other modifications within the scope and spirit of the present disclosure will occur to those skilled in the art.

The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the general description of the present disclosure given above and the detailed description of the embodiments given below, serve to explain the principles of the present disclosure.

These and other characteristics of the present disclosure will become apparent from the following description of a preferred form of embodiment given as a non-limiting example, with reference to the attached drawings.

It should also be understood that, although the present disclosure has been described with reference to some specific examples, those skilled in the art will be able to realize many other equivalent forms of the present disclosure that have the features of the claims and are therefore within the scope of protection defined thereby.

The above and other aspects, features and advantages of the present disclosure will become more apparent from the following detailed description when taken in conjunction with the accompanying drawings.

Specific embodiments of the present disclosure are described hereinafter with reference to the accompanying drawings; however, it should be understood that the embodiments claimed are merely examples of the present disclosure, which may be implemented in a variety of ways. Well-known and/or repeated functions and structures are not described in detail to avoid obscuring the present disclosure with unnecessary or redundant details. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but merely serve as a basis and representative basis for the claims to teach those skilled in the art to use substantially any Suitable detailed structures variously use the present disclosure.

This specification may use the phrases "in one embodiment," "in another embodiment," "in yet another embodiment," or "in other embodiments," all of which may refer to one or more of the same or different embodiments according to the present disclosure.

Figure 1 is an architecture diagram of a central gateway controller of an embodiment of the present disclosure. As shown in Figure 1, the first embodiment of the present disclosure provides a central gateway controller 10, including a switch chip 101. The switch chip 101 has multiple data transmission interfaces for connecting to electronic control components of a vehicle. The switch chip 101 includes a data exchange component 100, a hardware acceleration component 200 and a data processing component 300. The data exchange component 100 is configured to send and receive vehicle-mounted data of the vehicle through the data transmission interface. The hardware acceleration component 200 is configured to analyze the vehicle-mounted data to obtain analysis results; the data processing component 300 is configured to perform network security detection on the vehicle according to the analysis results of the hardware acceleration component 200.

Optionally, the central gateway controller 10 is a network device used to manage and control the connection and communication of various network switching devices, and has functions such as being responsible for scheduling data traffic, providing network security and monitoring, and is a key component in the network architecture.

The switch chip 101 is an integrated circuit chip used in network, communication and data center equipment, and is arranged in the central gateway controller 10. The data transmission interface is a physical interface used to connect different devices. For example, the switch chip 101 is connected to the first electronic control component 103, the second electronic control component 104 and the third electronic control component 105 through different data transmission interfaces, and exchanges data. In this embodiment, the switch chip 101 can be connected to different electronic control components of the same vehicle through multiple data transmission interfaces, and can also be connected to electronic control components of different vehicles. The electronic control components may include an engine control component, a brake control component, a battery management control component, etc.

The data exchange component 100 includes an internal logic circuit for sending and receiving data according to a specific data sending and receiving rule, and transmitting the vehicle data from the electronic control component of the vehicle to the central gateway controller 10, or from the central gateway controller 10 to the electronic control component of the vehicle. The hardware acceleration component 200 uses a dedicated hardware circuit to perform special processing and analysis on the vehicle data, so as to perform network security detection more efficiently. For example, the hardware acceleration component 200 can detect data abnormalities such as a sudden increase in data traffic, and transmit the above data abnormalities to the data processing component 300.

The data processing component 300 performs network security detection on the vehicle according to the abnormal state of the above data, and can timely discover potential network security threats such as Trojans or loopholes carried in the vehicle data, and ensure the communication security and information security of the vehicle. For example, it can discover and prevent unauthorized attempts to remotely access the vehicle control system, and avoid the vehicle control system from being attacked, causing the vehicle control system to freeze and become uncontrollable. Control the start and stop of the vehicle, etc.

Among them, the on-board data refers to the vehicle-related data obtained by various sensors during the driving process of the vehicle. The on-board data includes the vehicle's speed data, acceleration data, steering angle data, fuel consumption data, emission data, etc., as well as vehicle location data, road condition data, weather data, traffic status data, etc. The switch chip 101 including the hardware acceleration component 200 and the data processing component 300 can provide network security functions, including security detection, security access control, traffic filtering and firewalls. It can monitor and screen network traffic in real time, detect and prevent potential network security threats, and protect vehicle networks from malicious attacks and data leaks.

In some embodiments, the data transmission interface is a PHY Ethernet physical interface, and the vehicle-mounted data is vehicle-mounted Ethernet data. The PHY Ethernet physical interface is a standard interface for transmitting data in a computer network. It sends data from a computer or other device to another computer or device in the network, and transmits the received data back to the sender. The PHY Ethernet physical interface can transmit data in a wired or wireless manner, and is fast, stable and reliable.

The vehicle Ethernet data includes various sensor data of the vehicle (such as speed data, fuel data, temperature data, etc.), communication data between electronic control components, and audio and video data in the vehicle entertainment system, etc. For example, when the vehicle is driving, the vehicle sensors will collect various vehicle Ethernet data, such as speed data, steering angle data, acceleration data, etc. These vehicle Ethernet data will be transmitted to the switch chip 101 through the vehicle Ethernet physical interface. In addition, the vehicle entertainment system can also receive audio and video data through the PHY Ethernet physical interface, so that passengers can enjoy music, videos and other entertainment content in the car. The PHY Ethernet physical interface and vehicle Ethernet data make the vehicle's data transmission and communication efficient and reliable.

In some embodiments, the central gateway controller 10 further includes a main control chip 102 connected to the switch chip 101 .

In this embodiment, the main control chip 102 can realize other functions in addition to the above-mentioned network security functions such as network security detection and processing. The network security detection function can be implemented in the switch chip 101, which can effectively reduce the data processing pressure of the main control chip 102 and reduce the data bandwidth requirement between the main control chip 102 and the switch chip 101. The vehicle-mounted data corresponding to other functions can be smoothly and completely transmitted to the main control chip 102, ensuring the effective implementation of other functions, thereby ensuring that the entire vehicle-mounted network can communicate effectively.

The central gateway controller 10 provided in the embodiment of the present disclosure can be configured in a switch chip 101 by setting a data exchange component 100, a hardware acceleration component 200 and a data processing component 300. The chip 101 completes the analysis and security protection of the data of each electronic control component, reduces the computing load of the main control chip 102, and improves the performance of the central gateway controller 10; at the same time, by performing data analysis and processing in the switch chip 101, the data delay caused by a large amount of data transmission between the switch chip 101 and the main control chip 102 can be reduced, the real-time performance of data transmission and processing, as well as the response speed of each component of the central gateway controller 10 can be improved, and the bandwidth requirement between the switch chip 101 and the main control chip 102 can be reduced, so as to ensure that the main control chip 102 can process other functional data.

In some embodiments, the data exchange component 100 is further configured to send the vehicle data to be analyzed to the hardware acceleration component 200 according to preset analysis rules and/or configuration parameters.

In this embodiment, the data exchange component 100 can filter and obtain the vehicle data to be analyzed (referred to as the data to be analyzed) from the received vehicle data according to preset analysis rules and/or configuration parameters, and send the data to be analyzed to the hardware acceleration component 200 for analysis.

Optionally, the data exchange component 100 includes an acquisition component configured to acquire the vehicle data to be analyzed according to the data type of the vehicle data, and the data type includes TCP data and UDP data. That is, the above-mentioned preset analysis rule can be the data type.

Among them, TCP is a reliable connection-oriented protocol that provides reliability and flow control mechanisms for data transmission. TCP data is transmitted in byte stream format, and each TCP data packet has a sequence number to ensure that the data arrives at the destination in the correct order. UDP is a connectionless protocol that provides a simple way to transmit data. UDP data is transmitted in datagram format, and each UDP data packet has source port and destination port information, but there is no confirmation mechanism or retransmission mechanism. UDP is suitable for real-time data transmission, such as audio and video streaming.

Specifically, the acquisition component of the data exchange component 100 usually confirms the data type based on the header information of the data packet. The data exchange component 100 checks the protocol field of the data packet to determine whether the data type is TCP data or UDP data. For TCP data, the header of the TCP protocol contains source port and destination port fields, and then the TCP data can be identified through these fields. Usually, the value range of the source port and the destination port is 0-65535, and some known port numbers have been assigned to specific applications. That is, by checking the range of port numbers and the known port number list, it can be confirmed that the data type is TCP data. For UDP data, the header of the UDP protocol also contains source port and destination port fields. By checking the value range of these fields and the known port number list, it can be confirmed that the data type is UDP data.

In this embodiment, the data exchange component 100 can only receive two types of data, TCP data and UDP data, when receiving vehicle data, so as to facilitate the subsequent hardware acceleration component based on more accurate data. 200 and the data processing component 300 perform data processing, so that network security detection can be performed more accurately and at the same time, the data processing efficiency can be improved.

In other embodiments, the preset analysis rules may be rules for identifying specific driving states of the vehicle, such as rules for identifying sudden acceleration, sudden deceleration, sharp turns, speeding, etc., so as to send the data of the special driving state as the data to be analyzed to the hardware acceleration component 200. The preset analysis rules may also be data transmission ports, etc. For example, when the data exchange component 100 receives vehicle-borne data from multiple data transmission ports, the data of the preset data transmission ports may be sent to the hardware acceleration component 200 as the data to be analyzed.

The configuration parameters may be parameters for obtaining the data to be analyzed, such as the vehicle type, the time for obtaining the vehicle data, etc.

The preset analysis rules and configuration parameters can be set and adjusted according to specific vehicle data analysis needs and network security detection needs, so as to better realize vehicle data analysis and network security detection.

Preferably, the hardware acceleration component 200 is configured to analyze the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain an analysis result.

The hardware acceleration component 200 can analyze the data flow, data content, etc. of the data to be analyzed according to a preset deep learning model, and determine whether there is any abnormal flow or abnormal data.

Optionally, the deep learning model may include multiple types, for example, Convolutional Neural Network (CNN), Long Short-Term Memory (LSTM), Generative Adversarial Networks (GAN), etc.

Preferably, the data processing component 300 is configured to update the data exchange rules of the data exchange component 100 in response to the detected analysis result indicating the existence of a network threat.

When the data processing component 300 receives the analysis results from the hardware acceleration component 200, it analyzes the analysis results and detects whether there are network threats therein, wherein the network threats include: remote intrusion, in which the attacker can exploit loopholes or weaknesses in the vehicle data to remotely invade the vehicle's control system, which enables the attacker to manipulate the vehicle's operation, such as controlling braking, acceleration and steering; remote control, in which the attacker can interfere with the vehicle's operation by remotely controlling the vehicle's Internet connection, which can cause the vehicle to lose control or perform operations not controlled by the driver; wireless signal interference, in which the attacker can Use wireless signal interference technology to interfere with the vehicle's communication system (such as the Ethernet transmission system in this embodiment), resulting in the vehicle's communication and control functions being affected; malware and viruses, the network threat mode is that the vehicle system can be infected by malware, viruses or malicious codes carried in the vehicle data, which leads to abnormal vehicle operation, data leakage and other security issues; data privacy issues, the network threat mode is that vehicles connected to the Internet can collect a large amount of vehicle data, including location, driving habits and vehicle status, etc., and attackers can hijack and obtain these vehicle data, infringing on the owner's privacy; lack of updates and vulnerability patches, the network threat mode is that if the vehicle system does not update and patch known vulnerabilities in a timely manner, attackers can use these vulnerabilities to attack. In this embodiment, the data processing component 300 can perform targeted analysis on the abnormal traffic or abnormal data in the analysis results, determine whether the abnormal traffic or abnormal data carries network threats such as malware or viruses, and thus detect whether the vehicle has network security risks. In a specific implementation, the data processing component 300 can also analyze the normal data transmitted by the hardware acceleration component 200. For example, after the hardware acceleration component 200 analyzes the vehicle-mounted data to be analyzed and obtains the upgrade data of the vehicle control system, the data processing component 300 can determine whether the upgrade data is the latest data, and whether the upgrade data carries malware or viruses, etc., so as to detect whether the vehicle is subject to network threats.

The data processing component 300 analyzes the analysis result of the hardware acceleration component 200. After determining that there is a network threat, the data processing component 300 will trigger the operation of updating the data exchange rules of the data exchange component 100. In this way, the data exchange component 100 will update the transmission strategy of the corresponding data, enhance the encryption and authentication mechanism of the data, or limit the data exchange of specific sources, etc., to improve the security of vehicle-mounted data transmission and vehicle communication.

Exemplarily, the data processing component 300 detects abnormal network activity in a data packet sent by the first electronic control component 103 (for example, the analysis result of the hardware acceleration component 200 performing deep learning analysis on the vehicle-mounted data sent by the first electronic control component 103), such as a large number of unknown network connections and frequent port scanning behaviors. Based on these abnormal features, the data processing component 300 determines that there is a network threat and immediately triggers the operation of updating the data exchange rules of the data exchange component 100.

The updated data exchange rules may include: limiting the frequency of data exchange with the first electronic control component 103, adding an encryption mechanism for data transmission to prevent information leakage, etc. In this way, network threats can be detected and data exchange rules can be updated in a timely manner through the switch chip 101. The switch chip 101 can prevent and respond to network threats in a timely and effective manner, thereby protecting the communication data security of the vehicle.

In some embodiments, the central gateway controller 10 further includes a memory configured to respond to If the analysis result detected is that there is no network threat, the vehicle data received by the data exchange component 100 is stored.

Specifically, the memory stores the vehicle data received by the data exchange component 100 when no network risk or security risk is found. The above method can be used as a backup mechanism to save the vehicle data for later use during normal operation.

For example, when a vehicle passes a traffic light, the second electronic control component 104 transmits the collected vehicle data to the switch chip 101. Under normal circumstances, that is, when there is no network attack or risk, the memory of the central gateway controller 10 will store these vehicle data and perform subsequent processing and analysis. These vehicle data can be used for traffic flow monitoring, road condition optimization, and intelligent traffic management.

In some embodiments, the main control chip 102 and the switch chip 101 are connected via a PCIe interface or a RGMII interface.

Among them, the PCIe interface is a high-speed serial interface with very high bandwidth and low latency. The PCIe interface can support multiple channels and high-speed data transmission, allowing the connected devices to quickly transmit large amounts of data. The RGMII interface is a parallel interface for transmitting data. It uses 4-bit or 8-bit data lines for transmission and is synchronized according to a clock signal. The RGMII interface generally supports Gigabit Ethernet (GbE) data transmission rates. These two connection methods can provide high-speed and reliable data transmission, allowing the central gateway controller 10 to effectively control and manage various devices connected to the switch chip 101.

For example, the main control chip 102 is connected to the switch chip 101 through a PCIe interface, and the main control chip 102 can perform fast data transmission and communication with the switch chip 101. The central gateway controller 10 can monitor and control the status and flow of each device connected to the switch chip 101 through the PCIe interface. For example, the data transmission speed between electronic control components can be monitored, and the network bandwidth can be adjusted to ensure the operation efficiency of the data center.

In addition, the central gateway controller 10 can also be connected to other external devices, such as storage devices or firewalls, through the PCIe interface or RGMII interface. Through these interfaces, the main control chip 102 can quickly exchange and communicate data with these devices to achieve comprehensive management and control of the entire network.

In some embodiments, the data transmission interface further includes at least one of a CAN interface, a LIN interface, a CANFD interface, a FlexRay interface, and an Ethernet interface.

In this embodiment, in addition to using the Ethernet interface to transmit Ethernet data, other data can also be transmitted through other types of transmission interfaces to facilitate the transmission of different vehicle-mounted data, thereby utilizing The switch chip 101 processes the transmitted vehicle data.

The CAN interface is a highly reliable and real-time serial bus communication standard used for multi-node communication in the vehicle field. The CAN interface is used to transmit vehicle control information, such as the vehicle's speed, brake status, etc. The CAN interface can achieve real-time data transmission and communication between multiple nodes. The LIN interface is a low-cost, low-rate serial bus communication standard, mainly used for low-rate data transmission in vehicle electronic systems. The LIN interface is usually used to connect in-vehicle electronic modules, such as controlling vehicle doors and windows, seat adjustment and other functions. The CANFD interface is an extended version of the CAN interface that can support higher data transmission rates and larger data loads. The CANFD interface can provide higher data transmission capacity and is suitable for applications that require high-speed data transmission, such as Advanced Driver Assistance Systems (ADAS) and vehicle intelligence. The FlexRay interface is a high-speed, redundant, and real-time serial bus communication standard used for real-time data transmission and communication in vehicle electronic systems. FlexRay interface can be used to control the vehicle's safety system and advanced driver assistance system, such as Anti-lock Braking System (ABS) and Electronic Stability Control (ESC). LAN transmission protocol interface (such as Ethernet interface) is used for data transmission interface. Ethernet interface is widely used in systems such as in-vehicle entertainment system, In-Vehicle Infotainment (IVI) and in-vehicle communication system, and can support high-speed data transmission and applications with high real-time requirements. These data transmission interfaces have their own applications in different systems to meet the different needs of vehicle data transmission and communication.

FIG2 is a flow chart of a data processing method according to an embodiment of the present disclosure. The data processing method is applied to the switch chip 101 of the central gateway controller 10. The switch chip 101 has a plurality of data transmission interfaces for connecting to the electronic control components of the vehicle. As shown in FIG2, the data processing method specifically includes the following steps:

S101: receiving vehicle data sent by the electronic control component through the data transmission interface.

Among them, vehicle-mounted data refers to vehicle-related data obtained by various sensors during driving. Vehicle-mounted data includes vehicle speed data, acceleration data, steering angle data, fuel consumption data, emission data, etc., as well as vehicle location data, road condition data, weather data, traffic status data, etc.

Specifically, there are multiple electronic control components in a vehicle network, such as an engine control component, a brake control component, and a battery management control component. The multiple electronic control components can be different electronic control components of the same vehicle or different electronic control components of different vehicles. The data exchange component 100 of the switch chip 101 in the central gateway controller 10 can communicate with these electronic control components through multiple data transmission interfaces. For example, the switch chip 101 receives the speed data of the engine control component through the data transmission interface. The data exchange component 100 includes an internal logic circuit for sending and receiving data according to a specific data sending and receiving rule, and transmitting the vehicle data from the electronic control component of the vehicle to the central gateway controller 10, or sending the vehicle data from the central gateway controller 10 to the electronic control component of the vehicle.

S102: Analyze the vehicle-mounted data to obtain analysis results.

Specifically, after the data processing component 300 of the switch chip 101 receives the vehicle data sent by the electronic control component through the data transmission interface, the hardware acceleration component 200 of the switch chip 101 can quickly analyze the vehicle data, for example, to detect whether the data flow has a sudden increase or other data abnormality.

S103: Perform network security testing on the vehicle based on the analysis results.

Specifically, the data processing component 300 of the switch chip 101 can perform network security detection based on the analysis results of the hardware acceleration component 200 to determine whether there are network threats such as malware or network viruses, and promptly discover potential network security threats such as Trojans or vulnerabilities carried in the vehicle data, thereby ensuring vehicle communication security and information security.

The data processing method provided by the embodiment of the present disclosure can utilize the switch chip 101 of the central gateway controller 10 to receive the vehicle-mounted data sent by the electronic control component through the data transmission interface, analyze the vehicle-mounted data to obtain the analysis result, and perform network security detection on the vehicle according to the analysis result. The analysis and security protection of the data of each electronic control component can be completed inside the switch chip 101, the computing load of the main control chip 102 can be reduced, and the performance of the central gateway controller 10 can be improved; at the same time, by performing data analysis and processing in the switch chip 101, the data delay caused by a large amount of data transmission between the switch chip 101 and the main control chip 102 can be reduced, the real-time performance of data transmission and processing can be achieved, the response speed of each component of the central gateway controller 10 can be improved, and the bandwidth requirement between the switch chip 101 and the main control chip 102 can be reduced, so as to ensure the processing of other functional data by the main control chip 102.

In some embodiments, after receiving the vehicle-mounted data sent by the electronic control component through the data transmission interface in step S101, the method further includes:

According to preset analysis rules and/or configuration parameters, the vehicle data to be analyzed is obtained.

The data exchange component 100 can filter and obtain the vehicle data to be analyzed (hereinafter referred to as the data to be analyzed) from the received vehicle data according to the preset analysis rules and/or configuration parameters, and The analysis data is sent to the hardware acceleration component 200 for analysis.

Optionally, the data exchange component 100 includes an acquisition component configured to acquire the vehicle data to be analyzed according to the data type of the vehicle data, and the data type includes TCP data and UDP data. That is, the above-mentioned preset analysis rule can be the data type.

When receiving vehicle-mounted data, the data exchange component 100 may only receive two types of data, TCP data and UDP data, so as to facilitate subsequent hardware acceleration component 200 and data processing component 300 to perform data processing based on more accurate data, thereby enabling more accurate network security detection and improving data processing efficiency.

In other embodiments, the preset analysis rules may be rules for identifying specific driving states of the vehicle, such as rules for identifying sudden acceleration, sudden deceleration, sharp turns, speeding, etc., so as to send data of special driving states as data to be analyzed to the hardware acceleration component 200. The preset analysis rules may also be data transmission ports, etc. For example, when the data exchange component 100 receives vehicle-borne data from multiple data transmission ports, the data of the preset data transmission ports may be sent to the hardware acceleration component 200 as data to be analyzed.

The configuration parameters may be parameters for obtaining the data to be analyzed, such as the vehicle type, the time for obtaining the vehicle data, etc.

The preset analysis rules and configuration parameters can be set and adjusted according to specific vehicle data analysis needs and network security detection needs, so as to better realize vehicle data analysis and network security detection.

In some embodiments, in step S102, the vehicle-mounted data is analyzed to obtain analysis results, including:

According to the preset deep learning model, the vehicle-mounted data to be analyzed is analyzed to obtain the analysis results.

The hardware acceleration component 200 can analyze the data flow, data content, etc. of the data to be analyzed according to the preset deep learning model, and determine whether there is abnormal flow or abnormal data, etc. The deep learning model can include various types, such as convolutional neural networks, long short-term memory networks, generative adversarial networks, etc.

In some embodiments, in step S103, based on the analysis results, a network security test is performed on the vehicle, including:

In response to the detected analysis result indicating the existence of a network threat, the data exchange rules of the data exchange component 100 are updated.

After receiving the analysis results from the hardware acceleration component 200, the data processing component 300 can conduct targeted analysis on the abnormal traffic or abnormal data in the analysis results to determine whether the abnormal traffic or abnormal data carries network threats such as malware or viruses, thereby detecting whether the vehicle has network security risks. In a specific implementation, the data processing component 300 can also analyze the normal data transmitted by the hardware acceleration component 200. For example, after the hardware acceleration component 200 analyzes the vehicle-mounted data to be analyzed to obtain the upgrade data of the vehicle control system, the data processing component 300 can determine whether the upgrade data is the latest data, and whether the upgrade data carries malware or viruses, etc., thereby detecting whether the vehicle has network threats.

The data processing component 300 analyzes the analysis result of the hardware acceleration component 200, and after determining that there is a network threat, the data processing component 300 will trigger an update operation on the data exchange rules of the data exchange component 100. In this way, the data exchange component 100 will update the transmission strategy of the corresponding data, enhance the encryption and authentication mechanism of the data, or limit the data exchange of specific sources, etc., to improve the security of vehicle-mounted data transmission and vehicle communication.

Exemplarily, the data processing component 300 detects abnormal network activity in a data packet sent by the first electronic control component 103 (for example, the analysis result of the hardware acceleration component 200 performing deep learning analysis on the vehicle-mounted data sent by the first electronic control component 103), such as a large number of unknown network connections and frequent port scanning behaviors. Based on these abnormal features, the data processing component 300 determines that there is a network threat and immediately triggers the operation of updating the data exchange rules of the data exchange component 100.

The updated data exchange rules may include: limiting the frequency of data exchange with the first electronic control component 103, adding an encryption mechanism for data transmission to prevent information leakage, etc. In this way, network threats can be detected and data exchange rules can be updated in a timely manner through the switch chip 101. The switch chip 101 can prevent and respond to network threats in a timely and effective manner, thereby protecting the communication data security of the vehicle.

The following is a detailed description of the data processing method using a specific application scenario as an example. FIG3 is a flow chart of another data processing method according to an embodiment of the present disclosure. As shown in FIG3 , the specific steps of the data processing method include:

S201: Start;

S202: The data exchange component 100 receives vehicle data from different data transmission ports;

S203: the data exchange component 100 forwards the vehicle-mounted data of the specified protocol to the hardware acceleration component 200 according to the configuration parameters;

S204: The hardware acceleration component 200 performs deep learning analysis on the vehicle-mounted data of the specified protocol;

S205: The hardware acceleration component 200 sends the analysis result of the deep learning model to the data processing component 300;

S206: Determine whether a network risk/threat is detected;

In this embodiment, it can be determined whether a network risk or a network threat is detected. If not, step S202 (storing vehicle data) is executed; if detected, step S207 is executed;

S207: The data processing component 300 updates the data exchange rule;

S208: End.

It should be noted that the central gateway controller 10 provided in the embodiment of the present disclosure corresponds to the data processing method in the above-mentioned embodiment. Based on the above-mentioned central gateway controller 10, technicians in this field can understand the specific implementation method of the data processing method in the embodiment of the present disclosure and its various variations. Any optional options in the embodiment of the central gateway controller 10 are also applicable to the data processing method, which will not be repeated here.

The embodiment of the present disclosure further provides a processor. Figure 4 is a schematic diagram of the structure of a processor in the embodiment of the present disclosure. As shown in Figure 4, the processor 4000 is configured to run a program, wherein the program executes the method in the above embodiment when the processor runs it.

In the embodiment of the present disclosure, the processor 4000 may execute the operating program of the method in the embodiment.

Optionally, the processor 4000 can be configured to perform the following steps: receiving vehicle-mounted data sent by the electronic control component through a data transmission interface; analyzing the vehicle-mounted data to obtain analysis results; and performing network security testing on the vehicle based on the analysis results.

Optionally, the processor 4000 can be configured to perform the following steps: after receiving the in-vehicle data sent by the electronic control component, the method also includes: obtaining the in-vehicle data to be analyzed according to preset analysis rules and/or configuration parameters; analyzing the in-vehicle data to obtain analysis results, including: analyzing the in-vehicle data to be analyzed according to a preset deep learning model to obtain analysis results; performing network security detection on the vehicle based on the analysis results, including: in response to the detected analysis result that there is a network threat, updating the data exchange rules of the data exchange component.

Optionally, the processor 4000 may also be configured to perform the following steps: performing a network security check on the vehicle based on the analysis result, including: in response to the detected analysis result being that no network threat exists, storing the vehicle-mounted data received by the data exchange component.

Optionally, the processor 4000 may also be configured to perform the following steps: obtaining the vehicle data to be analyzed according to the data type of the vehicle data, wherein the data type transmission control protocol includes TCP data and User Datagram Protocol UDP data.

Figure 5 is a flowchart of a computer program product according to an embodiment of the present disclosure. As shown in Figure 5, an embodiment of the present disclosure further provides a computer program product. The computer program product 5000 includes a non-volatile computer-readable storage medium. The non-volatile computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the method provided in the embodiment of the present disclosure is implemented.

The embodiments of the present disclosure also provide a computer program, which implements the method provided in the embodiments of the present disclosure when the computer program is executed by a processor.

Optionally, the computer program described above implements the following steps when executed by a processor: receiving vehicle-mounted data sent by an electronic control component through a data transmission interface; analyzing the vehicle-mounted data to obtain analysis results; and performing network security testing on the vehicle based on the analysis results.

Optionally, the above-mentioned computer program implements the program code of the following steps when executed by the processor: after receiving the on-board data sent by the electronic control component, the method also includes: obtaining the on-board data to be analyzed according to preset analysis rules and/or configuration parameters; analyzing the on-board data to obtain analysis results, including: analyzing the on-board data to be analyzed according to a preset deep learning model to obtain analysis results; performing network security detection on the vehicle according to the analysis results, including: in response to the detected analysis result that there is a network threat, updating the data exchange rules of the data exchange component.

Optionally, the computer program described above implements the following program code when executed by a processor: based on the analysis result, performing a network security check on the vehicle, including: in response to the detected analysis result that no network threat exists, storing the vehicle-mounted data received by the data exchange component.

Optionally, the computer program implements the following program code when executed by the processor: obtaining the vehicle data to be analyzed according to the data type of the vehicle data, wherein the data type transmission control protocol includes TCP data and User Datagram Protocol UDP data.

FIG6 is a flowchart of a computer-readable storage medium according to an embodiment of the present disclosure. As shown in FIG6 , the present disclosure further provides a computer-readable storage medium, wherein the computer-readable medium 6000 stores a computer program, and the steps of the above method are implemented when the computer program is executed by a processor.

The computer-readable storage medium of the embodiments of the present disclosure may adopt any combination of one or more computer-readable media. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or any combination thereof. In the embodiments of the present disclosure, the computer-readable storage medium may be any computer-readable medium that contains or stores a program. The program may be used by or in conjunction with an instruction execution system, apparatus, or device, for example, the memory described above.

FIG7 is a flow chart of an electronic device according to an embodiment of the present disclosure. As shown in FIG7 , an embodiment of the present disclosure further provides an electronic device, wherein the electronic device 7000 includes at least a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps of the above method when executing the computer program in the memory.

In some embodiments, the processor that executes the computer program may be a processing device including one or more general-purpose processing devices, such as a microprocessor, etc. More specifically, the processor may be a complex instruction set computing (CISC) microprocessor, a reduced instruction set computing (RISC) microprocessor, a very long instruction word (VLIW) microprocessor, a processor that runs other instruction sets, or a processor that runs a combination of instruction sets. The processor may also be one or more special-purpose processing devices, such as an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), a digital signal processor (DSP), a system on a chip (SoC), etc.

The memory may be a read-only memory (ROM), a random access memory (RAM), a phase-change random access memory (PRAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), an electrically erasable programmable read-only memory (EEPROM), other types of random access memory (RAM), a flash disk or other form of flash memory, a cache, a register, a static memory, a compact disk read-only memory (CD-ROM), a digital versatile disk (DVD) or other optical storage, a cassette or other magnetic storage device, or any other possible non-transitory medium used to store information or instructions that can be accessed by a computer device.

In this embodiment, the electronic device is preferably a central gateway controller 10 including the above-mentioned switch chip 101, the processor includes a data exchange component 100, a hardware acceleration component 200 and a data processing component 300, and the memory is the memory of the switch chip 101.

Those skilled in the art will appreciate that the electronic device may include more or fewer components, for example, may further include a communication interface, etc., or may combine certain components, or arrange the components differently.

The electronic devices of the embodiments of the present disclosure may include, but are not limited to, fixed terminal devices capable of email transmission such as servers, desktop computers, digital TVs, etc., and mobile terminal devices capable of email transmission such as vehicle-mounted devices (such as vehicle-mounted multimedia devices), handheld devices (such as mobile phones, tablet computers, etc.), wearable devices (such as smart watches, smart bracelets, etc.), etc.

It should be noted that the storage medium mentioned above in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. For example, it may be - but not limited to - an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in the present disclosure (but not limited to) by each other to form a technical solution.

In addition, although each operation is described in a specific order, this should not be understood as requiring these operations to be performed in the specific order shown or in a sequential order. Under certain circumstances, multitasking and parallel processing may be advantageous. Similarly, although some specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Some features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination mode.

Industrial Applicability

The solution provided by the embodiment of the present disclosure may be a central gateway controller, including a switching switch chip, the switch chip having multiple data transmission interfaces for connecting to the electronic control components of the vehicle, the switch chip including a data exchange component, a hardware acceleration component and a data processing component, the data exchange component being configured to receive and send on-board data of the vehicle through the data transmission interface, the hardware acceleration component being configured to analyze the on-board data to obtain an analysis result; the data processing component being configured to perform network security detection on the vehicle according to the analysis result of the hardware acceleration component, thereby solving the technical problem that a large amount of data transmitted from the switch chip to the main control chip increases the load of the main control chip, causing delays and bandwidth waste, and achieving the technical effect that a large amount of data transmitted from the switch chip to the main control chip increases the load of the main control chip without causing delays and bandwidth waste.

Claims (15)

A central gateway controller includes a switching switch chip, the switch chip has multiple data transmission interfaces for connecting to electronic control components of a vehicle, the switch chip includes a data exchange component, a hardware acceleration component and a data processing component, the data exchange component is configured to send and receive vehicle-mounted data of the vehicle through the data transmission interface, the hardware acceleration component is configured to analyze the vehicle-mounted data to obtain an analysis result; the data processing component is configured to perform network security detection on the vehicle according to the analysis result of the hardware acceleration component. The central gateway controller according to claim 1, wherein the data exchange component is further configured to send the vehicle data to be analyzed to the hardware acceleration component according to preset analysis rules and/or configuration parameters; The hardware acceleration component is configured to analyze the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain an analysis result; The data processing component is configured to update the data exchange rules of the data exchange component in response to the detected analysis result indicating the presence of a network threat. The central gateway controller according to claim 2, wherein the data exchange component includes an acquisition component configured to acquire the vehicle data to be analyzed according to a data type of the vehicle data, the data type including transmission control protocol TCP data and user datagram protocol UDP data. The central gateway controller according to claim 1, further comprising a memory, wherein the memory is configured to store the vehicle data received by the data exchange component in response to the analysis result being detected as no network threat existing. The central gateway controller according to claim 1, wherein the central gateway controller also includes a main control chip connected to the switch chip, and the main control chip and the switch chip are connected through a high-speed serial PCIe interface or a gigabit medium independent RGMII interface. The central gateway controller according to claim 1, wherein the data transmission interface is a physical layer PHY Ethernet physical interface, and the in-vehicle data is in-vehicle Ethernet data. The central gateway controller according to claim 1, wherein the data transmission interface further comprises at least one of a controller area network (CAN) interface, a local interconnect network (LIN) interface, another CAN interface (CANFD) interface, a real-time communication protocol (FlexRay) interface, and a local area network transmission protocol (Ethernet) interface. A data processing method is applied to a switch chip of a central gateway controller, wherein the switch chip has a plurality of data transmission interfaces for connecting to an electronic control component of a vehicle, and the method comprises: Receiving the vehicle-mounted data sent by the electronic control component through the data transmission interface; Analyzing the vehicle-mounted data to obtain analysis results; Based on the analysis result, a network security check is performed on the vehicle. The data processing method according to claim 8, wherein, after receiving the vehicle-mounted data sent by the electronic control component, the method further comprises: acquiring the vehicle-mounted data to be analyzed according to preset analysis rules and/or configuration parameters; Analyze the vehicle-mounted data to obtain analysis results, including: Analyze the vehicle-mounted data to be analyzed according to a preset deep learning model to obtain the analysis result; According to the analysis result, the vehicle is subjected to network security detection, including: In response to the detected analysis result indicating the presence of a network threat, the data exchange rule of the data exchange component is updated. According to the data processing method of claim 8, performing network security detection on the vehicle according to the analysis result comprises: In response to the analysis result being detected as no network threat, the vehicle-mounted data received by the data exchange component is stored. The data processing method according to claim 9, further comprising: The in-vehicle data to be analyzed is acquired according to a data type of the in-vehicle data, wherein the data type includes transmission control protocol TCP data and user datagram protocol UDP data. A computer program product, comprising a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 8 to 11 is implemented. A computer program, wherein when the computer program is executed by a processor, the method according to any one of claims 8 to 11 is implemented. A computer-readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, the steps of the method described in any one of claims 8 to 11 are implemented. An electronic device, comprising: one or more processors; and A memory associated with the one or more processors, the memory being used to store program instructions, wherein the program instructions, when read and executed by the one or more processors, execute the steps of the method described in any one of claims 8 to 11.