A protection method and system against version rollback attack

By constructing a comprehensive protection system and utilizing multi-dimensional information and technology to perform multiple verifications on upgrade packages and authorization files, the problem of incomplete protection against version rollback attacks in existing technologies has been solved, thereby improving vehicle security.

CN119996036BActive Publication Date: 2026-05-26XUZHOU XUGONG AUTOMOBILE MFG CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202510259157.4
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2025-03-06
Publication Date
2026-05-26
Estimated Expiration
2045-03-06

AI Technical Summary

Technical Problem

Existing technologies lack a comprehensive protection system against version rollback attacks, making it difficult to effectively resist complex and ever-changing attack scenarios, resulting in insufficient vehicle safety and reliability.

Method used

By integrating multi-dimensional information and technologies such as digital signatures, operation types, timestamps, one-way counters, and vehicle and equipment information, a comprehensive protection system is built to perform multiple verifications on upgrade packages and authorization files, ensuring the legality and security of version rollback.

Benefits of technology

It effectively protects against version rollback attacks, improves the security and reliability of the version rollback mechanism, prevents malicious rollback using vulnerable old versions, and safeguards the vehicle's security and legitimate interests.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119996036B_ABST
    Figure CN119996036B_ABST
Patent Text Reader

Abstract

This invention discloses a protection method and system against version rollback attacks, belonging to the field of automotive information security technology. The method includes: the device sending a version rollback request to the server; the server collecting version rollback information based on the request, and sequentially determining the upgrade package, calculating a first hash value, generating an identity identifier, calculating a first counter value, setting the operation type, obtaining a first timestamp, and assembling a rollback version authorization file structure; signing the rollback version authorization file structure, generating a signature value, and constructing a rollback version authorization file; sending the upgrade package and the rollback version authorization file to the device; the device sequentially performing multiple security checks on the upgrade package and the rollback version authorization file; and executing the version rollback upon successful verification. This invention integrates multi-dimensional information and technology to construct a comprehensive protection system, effectively protecting against version rollback attacks and improving the security and reliability of the version rollback mechanism.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Database version rollback method and device, electronic equipment and storage medium

    CN118312501A

  • Differential rollback upgrading method and apparatus

    WO2016202000A1