CN108454410B - Fuel cell diagnosis access method - Google Patents

Abstract

The invention relates to the technical field of vehicle controller diagnosis, in particular to a diagnosis access method of a fuel cell, which comprises the following steps: initiating a diagnosis; sending a checking instruction to a controller to be diagnosed to perform first-level safety checking; after the first-level safety check is passed, acquiring a production serial number of the controller and a seed code of the current operation cycle; obtaining a syndrome code and a safety level according to the production serial number; calculating according to the syndrome code and the security level to obtain a continuous array; calculating according to the continuous array and the seed code to obtain a secret key; sending the key to the controller for a second level of security verification; and detecting whether the second-level safety check is passed, and if so, diagnosing the controller. The invention ensures the information safety of the fuel cell.

Description

Fuel cell diagnosis access method

Technical Field

The invention relates to the technical field of vehicle controller diagnosis, in particular to a diagnosis access method of a fuel cell.

Background

The hydrogen fuel cell is a novel cell which generates electric energy through the electrochemical action of hydrogen and oxygen, the energy conversion efficiency can reach 60-70%, and the actual use efficiency is about 2 times that of a common internal combustion engine. The chemical reaction process of the fuel cell can not generate harmful products, so that the fuel cell is a 'zero emission and zero pollution' carrying tool in the real sense, and is the inevitable direction of a new energy clean power automobile in the future. The diagnosis access operation of the upper computer of the controller executed by the fuel cell system is to adopt a diagnosis access means for verification so as to ensure that the information of the fuel cell cannot be operated, monitored and read at will and ensure the information safety of the fuel cell.

At present, the diagnosis access check of the whole vehicle adopts a fixed algorithm and operator, for example, the transmitter controller obtains the operator by using the frame number and the transmitter number, and all the whole vehicle modules in the vehicles of the same model adopt the same access check, but the safety of the modules of the fuel cell system is reduced by adopting the mode.

Disclosure of Invention

In order to solve the technical safety problem of each module of a fuel cell system, the invention provides a fuel cell diagnosis access method to prevent a fuel cell from being damaged, tampered and monitored, thereby ensuring the information safety of the fuel cell.

In order to achieve the purpose, the invention provides the following technical scheme:

a fuel cell diagnostic access method, the method comprising:

initiating a diagnosis;

sending a checking instruction to a controller to be diagnosed to perform first-level safety checking;

after the first-level safety check is passed, acquiring a production serial number of the controller and a seed code of the current operation cycle;

obtaining a syndrome code and a safety level according to the production serial number;

calculating according to the syndrome code and the security level to obtain a continuous array;

calculating according to the continuous array and the seed code to obtain a secret key;

sending the key to the controller for a second level of security verification;

and detecting whether the second-level safety check is passed, and if so, diagnosing the controller.

Preferably, the method further comprises:

before the production serial number of the controller and the seed code of the current operation cycle are obtained, a fixed code is sent to the controller to detect whether the controller meets a locking condition;

and if not, acquiring the seed code of the current operation period of the controller.

Preferably, the lockout condition is any one or more of:

the vehicle speed is greater than or equal to a set vehicle speed;

the vehicle door is in a locked state;

the vehicle is in a test condition.

Preferably, the obtaining of the syndrome code and the security level according to the production serial number includes:

obtaining the model of the controller according to the production serial number;

obtaining the safety level according to the model of the controller;

and obtaining the syndrome code by taking a set position behind the production serial number.

Preferably, the obtaining of the syndrome code and the security level according to the production serial number further includes:

and when the length of the production serial number is smaller than the set position, adding a zero value before the production serial number to obtain the syndrome code of the set position.

Preferably, the method further comprises:

setting the number of cycles after starting diagnosis;

the calculating to obtain the continuous array according to the syndrome code and the security level comprises:

when the security level is one, the continuous array is equal to the syndrome code and the security level;

when the security level is not equal to one, the consecutive array is equal to the syndrome code (the security level-1) the number of cycles.

Preferably, the calculating a key according to the consecutive array and the seed code includes:

and summing the continuous array and the seed code and then inverting to obtain the key.

Preferably, the method further comprises:

initializing a first counter after setting the number of cycles;

when the second-level security check fails, adding one to the first counter;

judging whether the first counter reaches a first set value or not;

if not, continuously sending a checking instruction to the controller to be diagnosed to carry out first-level safety checking.

Preferably, the method further comprises:

after the first counter is initialized, a second counter is initialized;

when the first-level security check fails, adding one to the second counter;

judging whether the second counter reaches a second set value or not; if so, it is determined that the fuel cell cannot be accessed.

Preferably, the lock condition further includes:

the first counter reaches a first set value or the second counter reaches a second set value.

The invention has the beneficial effects that:

the fuel cell diagnosis access method provided by the invention is characterized in that after diagnosis is started, a check instruction is sent to a controller to be diagnosed so as to carry out first-stage safety check; after the first-stage safety check is passed, acquiring a seed code of the current operation cycle of the controller; acquiring a production serial number of the controller; obtaining a syndrome code and a safety level according to the production serial number; calculating according to the syndrome code and the security level to obtain a continuous array; calculating according to the continuous array and the seed code to obtain a secret key; sending the key to the controller for a second level of security verification; and detecting whether the second-level safety check is passed, and if so, diagnosing the controller. The invention prevents the fuel cell from being damaged, tampered and monitored, and ensures the information security of the fuel cell.

Drawings

Fig. 1 is a first flowchart of a fuel cell diagnostic access method according to an embodiment of the present invention.

Fig. 2 is a second flowchart of a fuel cell diagnostic access method according to an embodiment of the present invention.

Fig. 3 is a third flowchart of a fuel cell diagnostic access method according to an embodiment of the present invention.

Fig. 4 is a fourth flowchart of a fuel cell diagnostic access method according to an embodiment of the present invention.

Detailed Description

So that those skilled in the art can further understand the features and technical contents of the present invention, the following detailed description of the embodiments of the present invention is provided in conjunction with the accompanying drawings and the embodiments.

Fig. 1 shows a first flowchart of a fuel cell diagnostic access method according to an embodiment of the present invention, which includes the following steps:

step 100: the diagnostics are initiated.

Step 101: and sending a checking instruction to the controller to be diagnosed to perform first-level safety checking.

It should be noted that, the format of the check instruction may be: id: XXX instructions 72xx, for example, send to the stack controller in the fuel cell a verification instruction of: 061:720301. And the upper computer sends a 061: 720301 application to the electric pile controller for access verification.

Step 102: detecting whether the first-level security check passes; if yes, go to step 103; otherwise, step 110 is performed.

Step 103: and acquiring the production serial number of the controller and the seed code of the current operation period.

Step 104: and obtaining a syndrome code and a safety level according to the production serial number.

Specifically, the obtaining of the syndrome code and the security level according to the production serial number includes: obtaining the model of the controller according to the production serial number; obtaining the safety level according to the model of the controller; and obtaining the syndrome code by taking a set position behind the production serial number. It should be noted that each controller in the fuel cell is provided with a production serial number, and each controller is provided with different safety levels according to the importance degree, and the model of the current controller can be obtained through the production serial number, and the safety level of the current controller can be obtained according to the model of the controller. Further, the production serial number includes: manufacturer name, production batch, offline date and time, etc. Specifically, the setting bit may be determined according to different fuel cell calibrations, for example, 6 bits. For example, if the part serial number is 001122334455, the syndrome code is [0x00, 0x11, 0x22, 0x33, 0x44, 0x55 ].

Step 105: and calculating to obtain a continuous array according to the syndrome code and the security level.

Step 106: and calculating to obtain a secret key according to the continuous array and the seed code.

Specifically, calculating the key according to the continuous array and the seed code includes: and summing the continuous array and the seed code and then inverting to obtain the key. For example, the continuous array is: 0x89, 0x5C, 0xE8, 0x09, 0x99, 0xC 0; the seed code is: 0x17, 0x32, 0x00, 0xE6, 0x26, 0x 05; the key is then: 0x5F, 0x71, 0x17, 0x10, 0x40, 0x 3A.

Step 107: and sending the key to the controller for second-level security verification.

Step 108: detecting whether the second-level security check passes; if yes, go to step 109; otherwise, the step 101 is executed.

Step 109: diagnosing the controller.

It should be noted that, the present invention is an embodiment of an access method before diagnosing a controller to be diagnosed, but the present application is not limited to the access method before diagnosing, and may also be an access method for accessing, monitoring, and the like, for example, an access method before accessing a controller to be accessed is performed by an upper computer or a bus reading device; the external communication monitoring equipment carries out an access method before monitoring a controller to be accessed. Further, the present application is not limited to the fuel cell controller, and may be all vehicle controllers disposed on a vehicle bus on the vehicle.

Step 110: and exiting the diagnosis.

According to the fuel cell diagnosis access method provided by the embodiment of the invention, after diagnosis is started, the controller to be diagnosed is subjected to the first-stage safety check, after the first-stage safety check is passed, the production serial number of the controller and the seed code of the current operation cycle are obtained, the secret key is calculated according to the production serial number and the seed code so as to carry out the second-stage safety check, and the controller is diagnosed after the second-stage safety check is passed.

If the controller in the fuel cell is in the locked state, the fuel cell cannot be accessed, and in order to better guarantee the information security of the fuel cell, as shown in fig. 2, a second flowchart of a fuel cell access method according to an embodiment of the present invention is shown, and includes the following steps:

step 200: the diagnostics are initiated.

Step 201: and sending a checking instruction to the controller to be diagnosed to perform first-level safety checking.

Step 202: detecting whether the first-level security check passes; if yes, go to step 203; otherwise, step 211 is executed.

Step 203: sending a fixed code to the controller to detect whether the controller satisfies a lock condition; if yes, go to step 211; otherwise, step 204 is performed.

For example, the upper computer sends 24F 18A 000000 to the controller, and if FF FF FF FF FF FF returned by the controller is obtained, it is determined that the controller is in an unlocked state, that is, the controller does not satisfy the locking condition, in this example, the fixed code is: 24F 18A 000000, the upper computer determines whether the controller meets the locking condition through a code returned by the controller.

Specifically, the lock-out condition is any one or more of:

1) the vehicle speed is greater than or equal to a set vehicle speed; specifically, the set vehicle speed can be determined by calibration according to different types of vehicles, for example, the set vehicle speed is 5 km/h. When the vehicle speed is set, the vehicle is in a running state, and when the vehicle is in the running state, the external bus reading device or the upper computer or the external communication monitoring device cannot diagnose the fuel cell system in the vehicle, which belongs to the condition of diagnosis forbidding.

2) The vehicle door is in a locked state; specifically, an external bus reading device or an upper computer or an external communication monitoring device may obtain a specific state of the vehicle door from the vehicle body controller through the CAN bus, for example, the vehicle door is in a locked state, or the vehicle door is in an open state; when the vehicle door is in a locked state, the external bus reading device or the upper computer or the external communication monitoring device cannot diagnose the fuel cell system in the vehicle, and the diagnosis is forbidden.

3) The vehicle is in a test condition. Specifically, when the vehicle is in a test state, the fuel cell system in the vehicle cannot be diagnosed in order to prevent the external bus reading device or the upper computer or the external communication monitoring device from tampering or influencing the test data, which is a diagnosis prohibition situation.

Step 204: and acquiring the production serial number of the controller and the seed code of the current operation period.

Step 205: and obtaining a syndrome code and a safety level according to the production serial number.

Specifically, the obtaining of the syndrome code and the security level according to the production serial number includes: obtaining the model of the controller according to the production serial number; obtaining the safety level according to the model of the controller; and obtaining the syndrome code by taking a set position behind the production serial number. It should be noted that each controller in the fuel cell is provided with a production serial number, and each controller is provided with different safety levels according to the importance degree, and the model of the current controller can be obtained through the production serial number, and the safety level of the current controller can be obtained according to the model of the controller. Further, the production serial number includes: manufacturer name, production batch, offline date and time, etc. Specifically, the setting bit may be determined according to different fuel cell calibrations, for example, 6 bits. For example, if the part serial number is 001122334455, the syndrome code is [0x00, 0x11, 0x22, 0x33, 0x44, 0x55 ].

Furthermore, in another embodiment of the present invention, when the length of the production serial number is smaller than the set bit, a zero value may be added before the production serial number to obtain the syndrome code of the set bit. Examples are as follows: if the part serial number is 112233, the syndrome code is [0x00, 0x00, 0x00, 0x11, 0x22, 0x33 ].

Step 206: and calculating to obtain a continuous array according to the syndrome code and the security level.

Step 207: and calculating to obtain a secret key according to the continuous array and the seed code.

Step 208: and sending the key to the controller for second-level security verification.

Step 209: detecting whether the second-level security check passes; if yes, go to step 210; otherwise, return to execute step 201.

Step 210: diagnosing the controller.

Step 211: and exiting the diagnosis.

The fuel cell diagnosis access method provided by the embodiment of the invention carries out first-stage safety check with a controller to be diagnosed, detects whether the controller meets a locking condition after the first-stage safety check is passed, and exits from diagnosis if the controller meets the locking condition; otherwise, continuing to perform the second-level safety check until the second-level safety check is passed, and diagnosing the operation.

Because the invention adopts different check grades, in order to realize that the same algorithm is adopted in different check grades, different continuous arrays are adopted in different check grades, thereby ensuring the complexity of the second-level safety check, as shown in fig. 3, the invention is a third flow chart of the fuel cell access method of the embodiment, and the third flow chart comprises the following steps:

step 300: the diagnostics are initiated and the number of cycles is set.

It should be noted that the number of cycles can be determined by calibration according to different fuel cell systems, for example, the number of cycles is 6.

Step 301: and sending a checking instruction to the controller to be diagnosed to perform first-level safety checking.

Step 302: detecting whether the first-level security check passes; if yes, go to step 303; otherwise, step 312 is performed.

Step 303: sending a fixed code to the controller to detect whether the controller satisfies a lock condition; if so, go to step 312; otherwise, step 304 is performed.

Step 304: and acquiring the production serial number of the controller and the seed code of the current operation period.

Step 305: and obtaining a syndrome code and a safety level according to the production serial number.

Step 306: detecting whether the security level is one; if yes, go to step 307; otherwise, step 313 is performed.

Step 307: the continuous array is equal to the syndrome code by the security level.

Step 308: and calculating to obtain a secret key according to the continuous array and the seed code.

Step 309: and sending the key to the controller for second-level security verification.

Step 310: detecting whether the second-level security check passes; if yes, go to step 311; otherwise, return to execute step 301.

Step 311: diagnosing the controller.

Step 312: and exiting the diagnosis.

Step 313: the consecutive array is equal to the syndrome code (the security level-1) the number of cycles, and step 308 is performed.

In the embodiment of the present invention, the multiplication by the number of cycles represents that the execution cycle is shifted to the left by the number of cycles, and when the number of cycles is 6, the multiplication by the number of cycles represents that the execution cycle is shifted to the left by 6.

In the fuel cell diagnostic access method provided in the embodiment of the present invention, the continuous array is a basic parameter for performing the second-level safety check, and for a controller with only one check level or with multiple check levels, the continuous array may be defined as: the syndrome code indicates the security level; for controllers employing multiple levels of verification, the continuous array may be positioned as: the syndrome code (the security level-1) the number of cycles; the invention can realize that the same algorithm is adopted in different check levels and different continuous arrays are adopted in different check levels, thereby ensuring the information safety of the submodule of the fuel cell system and ensuring the safety and effectiveness in diagnosis.

In order to realize the effectiveness of the process of diagnosing access, fig. 4 shows a fourth flowchart of diagnosing access to a fuel cell according to an embodiment of the present invention, which includes the following steps:

step 400: starting diagnosis, setting the number of cycles, and initializing the first counter and the second counter.

Step 401: and sending a checking instruction to the controller to be diagnosed to perform first-level safety checking.

Step 402: detecting whether the first-level security check passes; if yes, go to step 403; otherwise, step 417 is performed.

Step 403: sending a fixed code to the controller to detect whether the controller satisfies a lock condition; if so, go to step 412; otherwise, step 404 is performed.

In particular, the lockout condition may be any one or more of:

1) the vehicle speed is greater than or equal to a set vehicle speed.

2) The door is in a locked state.

3) The vehicle is in a test condition.

4) The first counter reaches a first set value.

5) The second counter reaches a second set value.

Step 404: and acquiring the production serial number of the controller and the seed code of the current operation period.

Step 405: and obtaining a syndrome code and a safety level according to the production serial number.

Step 406: detecting whether the security level is one; if yes, go to step 407; otherwise, step 413 is performed.

Step 407: the continuous array is equal to the syndrome code by the security level.

Step 408: and calculating to obtain a secret key according to the continuous array and the seed code.

Step 409: and sending the key to the controller for second-level security verification.

Step 410: detecting whether the second-level security check passes; if yes, go to step 411; otherwise, step 414 is performed.

Step 411: diagnosing the controller.

Step 412: and exiting the diagnosis.

Step 413: the continuous array is equal to the syndrome code (the security level-1) the number of cycles, and step 408 is performed.

Step 414: step 415 is performed by incrementing the first counter by 1.

Step 415: judging whether the first counter reaches a first set value or not; if so, go to step 416; otherwise, return to execute step 401.

Step 416: determining that the fuel cell cannot be accessed, step 412 is performed.

Step 417: step 418 is performed by incrementing the second counter by 1.

Step 418: judging whether the second counter reaches a second set value or not; if so, go to step 416; otherwise, step 401 is performed.

It should be noted that the first set value and the second set value may be determined by calibration according to different fuel cells, and the first set value and the second set value may be equal to or unequal to each other, for example, the first set value and the second set value are both 8.

According to the fuel cell diagnosis access method provided by the embodiment of the invention, when the first-level safety check does not pass the first set value times or the second-level safety check does not pass the second set value times, the fuel cell cannot be accessed, so that the steps of diagnosis access are saved, the effectiveness of diagnosis access is improved, and the safety effectiveness during diagnosis can be ensured.

The following describes, by way of example, a key calculation method according to the present invention with reference to the above flowchart:

the first embodiment is as follows: the following method is adopted for access verification of a stack controller in the fuel cell system:

the upper computer sends a verification command 061: 720301 to the cell stack controller to apply for access verification, and reads that the syndrome codes are 0x00, 0x11, 0x22, 0x33, 0x44 and 0x 55.

The safety level of the pile controller is 1 level. The consecutive array is: 0x00, 0x11, 0x22, 0x33, 0x44, 0x 55; the seed code is: 0x00, 0x11, 0x22, 0x33, 0x44, 0x 55; then: 0x00+0x00, 0x11+0x11, 0x22+0x22, 0x33+0x33, 0x44+0x44, 0x55+0x55 ═ 0x00, 0x22, 0x44, 0x66, 0x88, 0xAA ═ 000000000000, 00100010, 01000100, 01100110, 10001000, 01010101010, the key is: 11111111, 11011101, 10111011, 10011001, 01110111, 01010101 ═ 0xFF, 0xDD, 0xBB, 0x99, 0x77, 0x 55.

Example two: the following method is adopted for access verification of the air compressor controller in the fuel cell system:

the upper computer sends a verification command 057: 720303 to the air compressor controller for applying access verification, and the read syndrome codes are 0x62, 0x17, 0x3A, 0x42, 0x66 and 0x 30.

The safety level of the air compressor controller is 2, and the checking cycle number is 6; the consecutive array is: 0x89, 0x5C, 0xE8, 0x09, 0x99, 0xC 0; the seed code is: 0x17, 0x32, 0x00, 0xE6, 0x26, 0x 05; then: [0x89, 0x5C, 0xE8, 0x09, 0x99, 0xC0] + [0x17, 0x32, 0x00, 0xE6, 0x26, 0x05] ═ 0xA0, 0x8E, 0xE8, 0xEF, 0xBF, 0xC5] ═ 10100000, 10001110, 11101000, 11101111, 10111111, 11000101, and the key is: 01011111, 01110001, 00010111, 00010000, 01000000, 00111010 ═ 0x5F, 0x71, 0x17, 0x10, 0x40, 0x 3A.

The foregoing detailed description of the embodiments of the present invention has been presented for purposes of illustration and description, and is intended to be exemplary only of the systems and methods for understanding the present invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.

Claims (9)

1. A fuel cell diagnostic access method, the method comprising:

initiating a diagnosis;

sending a verification instruction with a set format to a controller to be diagnosed to apply for access verification, wherein the controller performs first-level safety verification according to the verification instruction;

after the first-level safety check is passed, acquiring a production serial number of the controller and a seed code of the current operation cycle;

obtaining a syndrome code and a safety level according to the production serial number;

calculating to obtain a continuous array according to the syndrome code and the security level, wherein the calculation comprises the following steps: when the security level is one, the continuous array is equal to the syndrome code and the security level; when the security level is not equal to one, the consecutive array is equal to the syndrome code (the security level-1) cycle number;

summing the continuous array and the seed code and then negating to obtain a secret key;

sending the secret key to the controller, and carrying out second-level security verification by the controller according to the secret key;

and detecting whether the second-level safety check is passed, and if so, diagnosing the controller.

2. The fuel cell diagnostic access method of claim 1, further comprising:

before the production serial number of the controller and the seed code of the current operation cycle are obtained, a fixed code is sent to the controller to detect whether the controller meets a locking condition;

and if not, acquiring the seed code of the current operation period of the controller.

3. The fuel cell diagnostic access method of claim 2, wherein the lockout condition is any one or more of:

the vehicle speed is greater than or equal to a set vehicle speed;

the vehicle door is in a locked state;

the vehicle is in a test condition.

4. The fuel cell diagnostic access method of claim 3, wherein said deriving a syndrome code, a security level based on said production serial number comprises:

obtaining the model of the controller according to the production serial number;

obtaining the safety level according to the model of the controller;

and obtaining the syndrome code by taking a set position behind the production serial number.

5. The fuel cell diagnostic access method of claim 4, wherein said deriving a syndrome code, a security level based on said production serial number further comprises:

and when the length of the production serial number is smaller than the set position, adding a zero value before the production serial number to obtain the syndrome code of the set position.

6. The fuel cell diagnostic access method of claim 5, further comprising:

after initiation of the diagnosis, the number of cycles is set.

7. The fuel cell diagnostic access method of claim 6, further comprising:

initializing a first counter after setting the number of cycles;

when the second-level security check fails, adding one to the first counter;

judging whether the first counter reaches a first set value or not;

if not, continuously sending a checking instruction to the controller to be diagnosed to carry out first-level safety checking.

8. The fuel cell diagnostic access method of claim 7, further comprising:

after the first counter is initialized, a second counter is initialized;

when the first-level security check fails, adding one to the second counter;

judging whether the second counter reaches a second set value or not; if so, it is determined that the fuel cell cannot be accessed.

9. The fuel cell diagnostic access method of claim 8, wherein the locked condition further comprises:

the first counter reaches a first set value or the second counter reaches a second set value.

Images