US 12,603,866 B2Granted

Security architecture and system for central gateway, and storage medium

AssigneeBeijing National New Energy Vehicle Technology Innovation Co. Ltd

InventorsQiuxia Li, Chengyin Yuan

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure relates to the technical field of intelligent gateway security, in particular to a security architecture and system for a central gateway, and a storage medium. The security architecture includes an application security layer, a data security layer, a network security layer, a node security layer, an identity and authentication management layer, and a security operation and maintenance layer; wherein the application security layer is used to ensure the security of application software; the data security layer is used to ensure the security of data passing through a central gateway; the security of in-vehicle and out-vehicle network communication of the central gateway is ensured by the network security layer; the node security layer is a support carrier for the application security layer, the data security layer, and the network security layer; and the identity and authentication management layer and the security operation and maintenance layer are both applied to the application security layer, the data security layer, the network security layer, and the node security layer. The central gateway is not only a simple data exchange center, but also has data and computing power, and provides common functions of a sharing service, central management, central control, and the like for a complete vehicle; and the central gateway in the present disclosure has double-layer protection of local data security and data transmission security.

Claims16

Dependent claims

A security system for a central gateway, comprising an application security layer, a data security layer, a network security layer, a node security layer, an identity and authentication management layer, and a security operation and maintenance layer;

wherein the application security layer is configured to ensure security of application software;
after the security of the application software is determined, the data security layer is used to ensure security of data passing through the central gateway;
after it is confirmed that the data is secure, security of in-vehicle and out-vehicle network communication of the central gateway is ensured by the network security layer;
the node security layer is a support carrier for the application security layer, the data security layer, and the network security layer;
and the identity and authentication management layer and the security operation and maintenance layer are both applied to the application security layer, the data security layer, the network security layer, and the node security layer,
wherein the application security layer comprises software embodied on a non-transitory computer-readable storage medium for implementing the following steps:
managing, via an access control module, application and access permissions of the application software;
encrypting, via an application encryption module, the application software;
detecting, via an intrusion detection module, intrusion data information of the application software;
diagnosing, via a security diagnosis module, the security of the application software;
auditing, via an application security audit module, the security of the application software;
hardening and patching, via a software hardening and patching module, the application software;
managing, via a security configuration management module, a security configuration of the application software;
and
providing, via a WEB application firewall module, a firewall for a WEB application.

12 more elements

A method for ensuring security of application software running on a central gateway, comprising an application security layer, a data security layer, a network security layer, a node security layer, an identity and authentication management layer, and a security operation and maintenance layer, the method comprising:

after the security of the application software is determined, ensuring, via the data security layer, security of data passing through the central gateway;
after the data security layer confirms that the data is secure, ensuring, via the network security layer, security of in-vehicle and out-vehicle network communication of the central gateway, wherein the node security layer is a support carrier for the application security layer, the data security layer, and the network security layer, and the identity and authentication management layer and the security operation and maintenance layer are both applied to the application security layer, the data security layer, the network security layer, and the node security layer;
managing, via an access control module, application and access permissions of the application software;
encrypting, via an application encryption module, the application software;
detecting, via an intrusion detection module, intrusion data information of the application software;
diagnosing, via a security diagnosis module, the security of the application software;
auditing, via an application security audit module, the security of the application software;
hardening and patching, via a software hardening and patching module, the application software;
managing, via a security configuration management module, a security configuration of the application software;
and
providing, via a WEB application firewall module, a firewall for a WEB application.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/706,110Filed 11 Aug 2022
Priority: CN 202111638901.X29 Dec 2021
Published: US 2024/0422132 A119 Dec 2024
Granted: 14 Apr 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
H04L 63/029
For separating internal from external traffic, e.g. firewalls: firewall traversal, e.g. tunnelling or, creating pinholes
H04L 9/40
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: network security protocols
H04L 12/66
Data switching networks: arrangements for connecting between networks having differing types of switching systems, e.g. gateways

Family

US 2024/0422132 A1Pre-grant publication · published 19 Dec 2024
US 12,603,866 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key