Disclosure of Invention
In view of this, the invention provides a hydrogen energy vehicle network system capable of effectively ensuring vehicle information security.
The invention provides a hydrogen energy automobile whole vehicle network system, which comprises a gateway controller, an automobile brake module, an automobile management module and a vehicle-mounted automatic diagnosis system, wherein the gateway controller comprises a first CAN network, a second CAN network, a third CAN network, a fourth CAN network, a first gateway encryption module and a second gateway encryption module, the input end of the first gateway encryption module is electrically connected with the first CAN network, the output end of the first gateway encryption module is electrically connected with the third CAN network, the input end of the second gateway encryption module is electrically connected with the second CAN network, the output end of the second gateway encryption module is electrically connected with the fourth CAN network, a CAN-H pin of the automobile brake module is electrically connected with an H pin of the first CAN network, a CAN-L pin of the automobile brake module is electrically connected with an L pin of the first CAN network, a CAN-H pin of the automobile management module is electrically connected with an H pin of the second CAN network, the vehicle-mounted automatic diagnosis system comprises a sixth CAN network and a seventh CAN network, wherein an H pin of the sixth CAN network is electrically connected with an H pin of the third CAN network, an L pin of the sixth CAN network is electrically connected with an L pin of the third CAN network, an H pin of the seventh CAN network is electrically connected with an H pin of the fourth CAN network, an L pin of the seventh CAN network is electrically connected with an L pin of the fourth CAN network, electric signal information sent by the vehicle brake module is transmitted to the first CAN network, encrypted by the first gateway encryption module and transmitted to the vehicle-mounted automatic diagnosis system, and electric signal information sent by the vehicle management module is transmitted to the second CAN network, encrypted by the second gateway encryption module and transmitted to the vehicle-mounted automatic diagnosis system.
Further, the automobile braking module comprises a vehicle control unit, a motor controller, a high-voltage distribution box, a hydrogen bottle controller, a fuel battery controller, a battery management controller, an electronic parking braking system and an electric power steering system, CAN-H pins of the vehicle control unit, the motor controller, the high-voltage distribution box, the hydrogen bottle controller, the fuel battery controller, the battery management controller, the electronic parking braking system and the electric power steering system are all electrically connected with an H pin of a first CAN network, and CAN-L pins of the vehicle control unit, the motor controller, the high-voltage distribution box, the hydrogen bottle controller, the fuel battery controller, the battery management controller, the electronic parking braking system and the electric power steering system are all electrically connected with an L pin of the first CAN network.
Furthermore, the automobile management module comprises an automobile T-BOX, a 360-degree panoramic parking auxiliary system, an electronic instrument, an automobile information entertainment system, an air conditioner, a thermal management controller and an automobile body control module, CAN-H pins of the automobile T-BOX, the 360-degree panoramic parking auxiliary system, the electronic instrument, the automobile information entertainment system, the air conditioner, the thermal management controller and the automobile body control module are all electrically connected with an H pin of a second CAN network, and CAN-L pins of the automobile T-BOX, the 360-degree panoramic parking auxiliary system, the electronic instrument, the automobile information entertainment system, the air conditioner, the thermal management controller and the automobile body control module are all electrically connected with an L pin of the second CAN network.
Furthermore, the whole hydrogen energy automobile network system further comprises an automobile communication module and a communication conversion module, wherein the automobile communication module is electrically connected with the communication conversion module, the gateway controller further comprises a fifth CAN network, a CAN-H pin of the communication conversion module is electrically connected with an H pin of the fifth CAN network, and a CAN-L pin of the communication conversion module is electrically connected with an L pin of the fifth CAN network; and the fifth CAN network is electrically connected with the input end of the first gateway encryption module and the input end of the second gateway encryption module.
Furthermore, the vehicle control unit, the vehicle-mounted T-BOX, the communication conversion module, the third CAN network and the fourth CAN network which are respectively positioned at the network starting end are all provided with first terminal resistors, and the first CAN network, the second CAN network, the fifth CAN network, the sixth CAN network and the seventh CAN network which are respectively positioned at the network terminals are all provided with second terminal resistors.
Further, the resistance values of the first termination resistor and the second termination resistor are 120 Ω.
In the technical scheme provided by the invention, the principle of CAN communication is as follows: the messages transmitted in the CAN bus consist of 7 parts per frame. The CAN protocol supports two message formats, the only difference is that the lengths of Identifiers (IDs) are different, the standard format is 11 bits, and the extended format is 29 bits. In the standard format, the start bit of the message is called start of frame (SOF), followed by an arbitration field consisting of an 11-bit identifier and a remote request to send bit (RTR). The RTR bit indicates whether it is a data frame or a request frame, in which there are no data bytes. The control field includes an identifier extension bit (IDE) indicating whether it is in a standard format or an extended format. It also includes a reserved bit (ro) for future extended use. Its last four bytes are used to indicate the length of data in the data field (DLC). The data field ranges from 0 to 8 bytes, followed by a Cyclic Redundancy Check (CRC) to detect data errors. The acknowledgement field (ACK) includes an acknowledgement bit and an acknowledgement delimiter. Both bits sent by the sending station are recessive levels (logic 1), and the receiving station that correctly receives the message sends a master level (logic 0) to cover it. In this way, the sending station can ensure that at least one station in the network can correctly receive the message. The end of the message is marked by the end of the frame. There is a short interval between two adjacent messages, and if there is no station to access the bus at this time, the bus will be idle.
In the technical scheme provided by the invention, the first terminal resistor and the second terminal resistor are arranged to eliminate signal reflection in the communication cable, and in the communication process, the signal reflection is caused by two reasons: impedance discontinuity and impedance mismatch. Impedance discontinuities where a signal suddenly encounters little or no cable impedance at the end of a transmission line causes a reflection of the signal. The principle of this signal reflection is similar to the reflection of light from one medium into another. In order to eliminate this reflection, a termination resistor of the same magnitude as the characteristic impedance of the cable must be connected across the end of the cable to make the impedance of the cable continuous. Since the transmission of signals over the cable is bidirectional, a termination resistor of the same size can be connected across the other end of the communication cable. Another cause of signal reflection is impedance mismatch between the data transceiver and the transmission cable. The reflection caused by the reason is mainly reflected in that the whole network data is disordered when the communication line is in an idle mode. In order to improve the topological capability of a network node, two ends of a CAN bus need to be connected with 120 omega terminal resistors for suppressing reflection, which play a very important role in matching bus impedance, and if the resistors are neglected, the anti-interference performance and reliability of digital communication are greatly reduced, even the communication cannot be carried out.
In the technical scheme provided by the invention, the algorithms of the first gateway encryption module and the second gateway encryption module are designed according to the uniqueness of CAN communication and the network architecture of the whole vehicle, and have very high encryption, wherein the encryption algorithm encrypts two parts according to the uniqueness of the CAN communication: a first part: communication ID; a second part: data is communicated. According to the network architecture of the whole vehicle, the corresponding ECU is separately coded with a unique number, and the ECU address number is as follows: 0xab, wherein ab is a hexadecimal number;
encryption algorithm of communication ID: ID is 0xXYZ, wherein X is less than or equal to 7, Y and Z are hexadecimal numbers, and the encrypted ID = communication ID + ECU address number-0X 10
Encryption algorithm of communication Data:
according to the CAN communication principle, the data in the CAN message has 8 bytes, one byte has 8 bits, the front four bits are high bytes, and the rear four bits are low bytes; the data encryption algorithm is thus as follows:
for the 1 st byte and the 8 th byte, the high bytes of the 1 st byte and the 8 th byte are exchanged;
for the 2 nd byte and the 7 th byte, the low bytes of the 2 nd byte and the 7 th byte are exchanged;
for bytes 3 and 6, byte 3 data + ECU address number, byte 6 data-ECU address number;
for the 4 th byte and the 5 th byte, the 4 th byte data is processed by XOR operation with a constant, i.e. data4^0XFF, and the 5 th byte data is processed by XOR operation with a constant, i.e. data5^0 XAA.
The advantages of the encryption algorithm are: encryption is divided into two parts, so that the complexity of encryption is ensured, and the dimensionality of encryption is improved; meanwhile, the address number of the ECU is added into the encryption algorithm of the communication ID and the encryption algorithm of the communication Data, so that the algorithms are tightly connected with the network architecture, different encryption structures can be provided for different network architectures, and the encryption effect and the portability of the algorithms are ensured; the same algorithm can be transplanted to different network architectures, and the confidentiality of the algorithm is not influenced. The encryption algorithm aiming at the communication Data of the Data adopts more than four encryption algorithms, so that the Data cracking difficulty and cracking time are greatly increased, and the Data encryption effect is greatly improved.
The technical scheme provided by the invention has the beneficial effects that:
1. the whole vehicle network architecture provided by the invention is reliable, safe, simple and practical, and can well realize the vehicle function;
2. the invention carries out comprehensive encryption and processing on all relevant information of the whole vehicle through the gateway controller, thereby greatly reducing the workload and the cost of encryption;
3. the technical scheme of the invention does not increase any hardware use cost, and CAN directly realize the network encryption function based on the existing hydrogen energy automobile CAN communication network;
4. the network encryption system has strong portability and is suitable for all hydrogen energy automobiles based on CAN communication;
5. the network system provided by the invention is provided with the communication conversion module, so that different communication modes CAN be converted into CAN communication, and the applicability of the system is improved;
6. according to the invention, two encryption modules are designed to encrypt two contents respectively, so that the difficulty of cracking is increased, and the system information security is improved;
7. the network system is designed aiming at CAN communication, and the communication characteristic of the CAN communication is fully utilized;
8. the network system of the invention adopts different encryption algorithms for the data content, thereby greatly increasing the difficulty and the time for cracking the algorithms and effectively ensuring the encryption effect of the data.
9. The invention adopts the encryption algorithm to be associated with the whole vehicle network architecture, still has higher confidentiality and strong universality after transplantation, and increases the encryption dimension of the encryption algorithm.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be further described with reference to the accompanying drawings.
Referring to fig. 1, an embodiment of the present invention provides a complete hydrogen energy vehicle network system, which includes a gateway controller (GW) 1, a vehicle brake module 2, a vehicle management module 3, a vehicle-mounted automatic diagnosis system (OBD) 4, a vehicle communication module 5, a communication conversion module 6, and an external gateway decryption module 7.
The gateway controller 1 comprises a first CAN network 11, a second CAN network 12, a third CAN network 13, a fourth CAN network 14, a fifth CAN network 15, a first gateway encryption module 16 and a second gateway encryption module 17, wherein the input end of the first gateway encryption module 16 is electrically connected with the first CAN network 11 and the fifth CAN network 15, the output end of the first gateway encryption module 16 is electrically connected with the third CAN network 13, the input end of the second gateway encryption module 17 is electrically connected with the second CAN network 12 and the fifth CAN network 15, and the output end of the second gateway encryption module 17 is electrically connected with the fourth CAN network 14.
The automobile brake module 2 includes a Vehicle Control Unit (VCU) 21, a Motor Controller (MCU) 22, a high voltage distribution box (PDU) 23, a hydrogen cylinder controller (HCU) 24, a fuel cell controller (FCU) 25, a battery management controller (BMS) 26, an electronic parking brake system (EPB) 27, and an electric power steering system (EPS) 28, CAN-H pins of a vehicle control unit 21, a motor controller 22, a high-voltage distribution box 23, a hydrogen cylinder controller 24, a fuel cell controller 25, a battery management controller 26, an electronic parking brake system 27 and an electric power steering system 28 are all electrically connected with an H pin of a first CAN network 11, the CAN-L pins of the vehicle control unit 21, the motor controller 22, the high-voltage distribution box 23, the hydrogen cylinder controller 24, the fuel cell controller 25, the battery management controller 26, the electronic parking brake system 27 and the electric power steering system 28 are all electrically connected with the L pin of the first CAN network 11.
The automobile management module 3 comprises an on-board T-BOX31, a 360-degree panoramic parking assist system (AVM) 32, an electronic Instrument (IC) 33, an on-board infotainment system (IVI) 34, an Air Conditioner (AC) 35, a thermal management controller (HMC) 36 and a Body Control Module (BCM) 37, CAN-H pins of the on-board T-BOX31, the 360-degree panoramic parking assist system 32, the electronic instrument 33, the on-board infotainment system 34, the air conditioner 35, the thermal management controller 36 and the body control module 37 are all electrically connected with an H pin of the second CAN network 12, and CAN-L pins of the on-board T-BOX31, the 360-degree panoramic parking assist system 32, the electronic instrument 33, the on-board infotainment system 34, the air conditioner 35, the thermal management controller 36 and the body control module 37 are all electrically connected with an L pin of the second CAN network 12.
The vehicle-mounted automatic diagnosis system 4 comprises a sixth CAN network 41 and a seventh CAN network 42, wherein a pin H of the sixth CAN network 41 is electrically connected with a pin H of the third CAN network 13, a pin L of the sixth CAN network 41 is electrically connected with a pin L of the third CAN network 13, a pin H of the seventh CAN network 42 is electrically connected with a pin H of the fourth CAN network 14, and a pin L of the seventh CAN network 42 is electrically connected with a pin L of the fourth CAN network 14.
The automobile communication module 5 is electrically connected with the communication conversion module 6, a CAN-H pin of the communication conversion module 6 is electrically connected with an H pin of the fifth CAN network 15, and a CAN-L pin of the communication conversion module 6 is electrically connected with an L pin of the fifth CAN network 15.
The external gateway decryption module 7 is electrically connected with the vehicle-mounted automatic diagnosis system 4.
In this embodiment, the vehicle control unit 21, the vehicle-mounted T-BOX31, the communication conversion module 6, the third CAN network 13, and the fourth CAN network 14, which are located at the network start end, are all provided with the first terminal resistor 8, the first CAN network 11, the second CAN network 12, the fifth CAN network 15, the sixth CAN network 41, and the seventh CAN network 42, which are located at the network terminals, are all provided with the second terminal resistor 9, and the resistance values of the first terminal resistor 8 and the second terminal resistor 9 are 120 Ω.
The working principle of the whole hydrogen energy automobile network system provided by the embodiment is as follows:
the method comprises the following steps that a vehicle control unit 21, a motor controller 22, a high-voltage distribution box 23, a hydrogen cylinder controller 24, a fuel battery controller 25, a battery management controller 26, an electronic parking brake system 27 and an electric power steering system 28 respectively send electric signal information to a first CAN network 11, and meanwhile the vehicle control unit 21, the motor controller 22, the high-voltage distribution box 23, the hydrogen cylinder controller 24, the fuel battery controller 25, the battery management controller 26, the electronic parking brake system 27 and the electric power steering system 28 acquire gateway information from the first CAN network 11 and forward the gateway information to relevant information in the first CAN network 11; after being encrypted by the first gateway encryption module 16, the relevant information in the first CAN network 11 is sent to the third CAN network 13;
the vehicle-mounted T-BOX31, the 360-degree panoramic parking assist system 32, the electronic instrument 33, the vehicle-mounted infotainment system 34, the air conditioner 35, the thermal management controller 36 and the vehicle body control module 37 respectively send electric signal information to the second CAN network 12, and meanwhile, the vehicle-mounted T-BOX31, the 360-degree panoramic parking assist system 32, the electronic instrument 33, the vehicle-mounted infotainment system 34, the air conditioner 35, the thermal management controller 36 and the vehicle body control module 37 acquire gateway information from the second CAN network 12 and forward the gateway information to relevant information in the second CAN network 12; after being encrypted by the second gateway encryption module 17, the relevant information in the second CAN network 12 is sent to the fourth CAN network 14;
the automobile communication module 5 sends a communication signal to the communication conversion module 6, the communication conversion module 6 carries out communication conversion on communication signal information and then sends the communication signal information to the fifth CAN network 15, meanwhile, the communication conversion module 6 acquires gateway information from the fifth CAN network 15 and forwards the gateway information to relevant information in the fifth CAN network 15, and the relevant information in the fifth CAN network 15 is encrypted by the first gateway encryption module 16 and the second gateway encryption module 17 respectively and then sent to the third CAN network 13 and the fourth CAN network 14;
after the processing, the information in the whole network system of the hydrogen energy automobile is encrypted by the gateway controller 1 and then transmitted to the vehicle-mounted automatic diagnosis system 4; if the vehicle-mounted automatic diagnosis system 4 is to acquire the relevant data with readability, the relevant data must be processed by the external gateway decryption module 7 and then transmitted to the external device 10, so that the readability information can be acquired. If the data is directly read from the on-board automatic diagnosis system 4, the data is a disordered pile of data.
The above mentioned parts are not related to the prior art.
In this document, the terms front, back, upper and lower are used to define the components in the drawings and the positions of the components relative to each other, and are used for clarity and convenience of the technical solution. It is to be understood that the use of the directional terms should not be taken to limit the scope of the claims.
The features of the embodiments and embodiments described herein above may be combined with each other without conflict.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that fall within the spirit and principle of the present invention are intended to be included therein.