Detection system for information security of vehicle-mounted OTA upgrade server

Abstract

The invention discloses a detection system for information security of a vehicle-mounted OTA upgrade server, and belongs to the field of information security of the Internet of Vehicles. The system is based on an OTA risk assessment model, focuses on control of vulnerabilities of a server side and encryption and signature of an upgrade package, secure storage of the upgrade package, signature verification and decryption of the upgrade package, and provides a professional server penetration test by cooperating with an OEM clearly defined information security protection architecture and an upgrade process and the like to verify that a software update package is to be protected in OTA upgrade, so that the software update package is prevented from being tampered before the update process is started; the used update processes are protected from being damaged, and comprise development processes of system update programs or firmware; and the authenticity and integrity of the software update package are protected to prevent the software update package from being damaged, and an effective verification method is provided for firmware data security and CDN server information security in the OTA upgrading process.

Description

technical field [0001] The invention relates to the field of vehicle information security, in particular to a detection system for verifying data security of a cloud server during a vehicle OTA remote upgrade process. Background technique [0002] With the development of science and technology, cars are no longer just a means of transportation. At present, the automobile industry is in the era of scientific and technological innovation, and the Internet of Vehicles technology has emerged in response to the situation. The communication between vehicles makes the relationship between people and vehicles closer. Car owners can locate, access and control the car through remote services; Technology) Vehicle software can be remotely upgraded, allowing consumers to experience a more intelligent and convenient car experience, and at the same time, it also provides repairing defects for automobile companies to solve potential problems such as automotive software failures, software r...

AI Technical Summary

Problems solved by technology

But everything has two sides. Although OTA has brought convenient service experience and performance improvement to intelligent networked vehicles, OTA will also bring new problems.

In 2015, two hackers in the United States remotely hacked a certain brand of car equipped with OTA function, controlled all functions of the vehicle, and even forced it to make an emergency stop on the highway, causing serious safety problems

At the same time, in the process of OTA implementation, there are problems such as concealing consumers and high-risk security loopholes caused by upgrades, which has brought a severe test to the safety management of automobile OTA.

Images