A method, system, device and storage medium for upgrading a security chip at a vehicle end

Abstract

The application relates to a method, system, device and storage medium for upgrading a vehicle-end security chip, comprising the following steps: obtaining a related program part of an Applet; integrating the related program part of the Applet into a program of a micro control unit by using the related program part of the Applet; based on the result of integrating the related program part of the Applet into the program of the micro control unit, writing the Applet program into a security chip at the vehicle end in the form of APDU instructions by using the program of the micro control unit; and based on the writing result, realizing application upgrading without real-time data interaction by using a Shareable Interface. The application writes the Applet program into the security chip at the vehicle end in the form of APDU instructions by using the program of the micro control unit, thereby reducing real-time data communication, and helping to overcome the problem that the security chip at the vehicle end cannot be applied to an actual production environment due to too much data interaction and data transmission during the upgrading process, which causes the upgrading time of the security chip at the vehicle end to be too long and the success rate to be too low.

Description

Technical Field

[0001] This application relates to the fields of vehicle communication, computer software, and communication technology, and in particular to a method, system, device, and storage medium for upgrading a vehicle-side security chip. Background Technology

[0002] With the development of new energy vehicles and the upgrading of traditional vehicles, information security in automobiles is receiving increasing attention. Consequently, more and more car manufacturers and models are installing security chips. After installing security chips, there is a need to manage the applications within them, such as installing new applications and upgrading existing ones. Since the program management of security chips must meet the requirements of the GP specification, TSM services are generally needed to manage the programs within the security chip. This requires a significant amount of data interaction with the server. The interaction volume for installing a single program is typically around 20-70KB (applet data transmission is generally between 15K-65K, and personalized data is between 1-3K). This amount of real-time communication is excessive for vehicles, especially in more traditional models (vehicles typically use a CAN bus for internal communication, which can only send 8 bytes at a time and is unstable, requiring many retransmissions). This results in excessively long installation or upgrade times for applets and a low success rate, making them unsuitable for practical production environments.

[0003] In existing technologies, the excessive amount of data interaction and data transmission during the upgrade process of vehicle-side security chips results in excessively long upgrade times and low success rates, making them unsuitable for application in actual production environments. Summary of the Invention

[0004] To at least partially overcome the problem in related technologies that the upgrade process of vehicle-side security chips is too time-consuming and has a low success rate due to excessive data interaction and data transmission, making them unsuitable for application in actual production environments, this application provides a method, system, device, and storage medium for upgrading vehicle-side security chips.

[0005] The proposed solution is as follows:

[0006] This application provides a method for upgrading a vehicle-side security chip, the method comprising:

[0007] Obtain the relevant program parts of the Applet;

[0008] The relevant program parts of the Applet are integrated into the program of the microcontroller unit using the relevant program parts of the Applet.

[0009] Based on the results of integrating the relevant program of the Applet into the program of the microcontroller unit, the relevant program of the Applet is written into the vehicle's security chip in the form of APDU instructions through the program of the microcontroller unit.

[0010] Based on the results of the writing, application upgrades can be implemented through the Shareable Interface without requiring real-time data interaction.

[0011] Furthermore, the relevant program components for obtaining the Applet include:

[0012] Based on the SCP11 protocol, send directly written APDU instruction sets to the vehicle's security chip;

[0013] The APDU instruction set is accepted, packaged into an Applet data packet, and the relevant program part of the Applet is obtained.

[0014] Furthermore, the APDU instruction set includes:

[0015] Offline authentication for security domains, downloading CAP packages for Applet applications, and creating Applet instances.

[0016] Furthermore, the integration of the relevant program portion based on the Applet into the program of the microcontroller unit, and the subsequent writing of the Applet program into the vehicle's security chip via APDU instructions through the microcontroller unit's program, includes:

[0017] S1. Based on the result of the program of integrating the relevant program part of the Applet into the microcontroller unit, the startup program of the APDU instruction set under the preset Applet data packet is triggered;

[0018] S2. Execute the APDU instruction set and write the Applet program into the vehicle's security chip in the form of APDU instructions through the microcontroller program.

[0019] Furthermore, the application upgrade based on the write result, achieved through a Shareable Interface without requiring real-time data interaction, includes:

[0020] Based on the writing result, the data is personalized through the Shareable mechanism, and the current version of the vehicle's security chip is determined. If the version of the vehicle's security chip is the latest version, the status of the vehicle's security chip is updated to unpersonalized; otherwise, the status of the vehicle's security chip is updated to terminated, and the old version of the Applet can no longer be selected.

[0021] Furthermore, the application upgrade based on the write result, achieved through a Shareable Interface without requiring real-time data interaction, also includes:

[0022] Obtain the unique identifier of the relevant program portion of the Applet;

[0023] A version number field is added using the unique identifier of the relevant program part of the Applet;

[0024] By utilizing the version number field and storing the relevant program parts of the unified Applet across multiple versions, personalized data is generated based on the Shareable mechanism, enabling the relevant program parts of the new version of the Applet to read data from the relevant program parts of the old version of the Applet.

[0025] Secondly, this application provides a system for upgrading a vehicle-side security chip, the system comprising:

[0026] The acquisition module is used to obtain the relevant program parts of the Applet;

[0027] An integration module is used to integrate the relevant program parts of the Applet into the program of the microcontroller unit using the relevant program parts of the Applet;

[0028] The execution module is used to write the relevant program of the Applet into the vehicle's security chip in the form of APDU instructions based on the program result of the relevant program part of the Applet being integrated into the microcontroller.

[0029] The upgrade module is used to upgrade applications without real-time data interaction based on the results of the write operation through a Shareable Interface.

[0030] Furthermore, the system also includes:

[0031] The microcontroller upgrade module is used to upgrade the microcontroller program based on the results of the relevant program parts of the Applet being integrated into the microcontroller program, either via OTA or offline via an on-board diagnostic tool.

[0032] Thirdly, this application provides a device for upgrading a vehicle-side security chip, the device comprising:

[0033] Memory, on which executable programs are stored;

[0034] A processor for executing the executable program in the memory to implement the steps of any of the methods described above.

[0035] Fourthly, this application provides a computer-readable storage medium storing computer instructions for causing a computer to perform the steps of any of the methods described above.

[0036] The technical solution provided in this application may include the following beneficial effects:

[0037] This application obtains the relevant program portion of an Applet; integrates the relevant program portion of the Applet into the program of a microcontroller unit; based on the result of integrating the relevant program portion of the Applet into the program of the microcontroller unit, writes the Applet program into the vehicle's security chip using APDU instructions through the program of the microcontroller unit; based on the result of the writing, application upgrades without real-time data interaction are achieved through a Shareable Interface.

[0038] This application helps to overcome the problem that the upgrade process of vehicle-side security chips is too long and the success rate is too low due to excessive data interaction and data transmission, making them unsuitable for application in actual production environments.

[0039] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and do not limit this application. Attached Figure Description

[0040] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0041] Figure 1 This is a flowchart of a method for upgrading a vehicle-side security chip according to an embodiment of this application;

[0042] Figure 2 This is a system composition diagram of a vehicle-side security chip upgrade according to another embodiment of this application;

[0043] Figure 3 This is a diagram illustrating the device composition for upgrading a vehicle-side security chip, provided in another embodiment of this application. Detailed Implementation

[0044] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0045] Example 1

[0046] Please see Figure 1 , Figure 1 This is a flowchart of a method for upgrading a vehicle-side security chip according to an embodiment of this application. The method includes:

[0047] S1. Obtain the relevant program parts of the Applet;

[0048] S2. Using the relevant program portion of the Applet, integrate the relevant program portion of the Applet into the program of the microcontroller unit;

[0049] S3. Based on the result of integrating the relevant program of the Applet into the program of the microcontroller unit, the relevant program of the Applet is written into the vehicle's security chip in the form of APDU instructions through the program of the microcontroller unit;

[0050] S4. Based on the results of the writing, application upgrades without real-time data interaction are achieved through the Shareable Interface.

[0051] As described in step S1, in this embodiment of the application, the relevant program part for obtaining the Applet includes:

[0052] Based on the SCP11 protocol, send directly written APDU instruction sets to the vehicle's security chip;

[0053] The APDU instruction set is accepted, packaged into an Applet data packet, and the relevant program part of the Applet is obtained.

[0054] Specifically, the TSM uses the SCP11 protocol of the GP specification to generate an APDU instruction set that can be directly written to the SE and creates an Applet data packet. This data packet is then provided to the MCU (Microcontroller Unit) program. The MCU program packages the Applet data packet as part of its program or as data at a fixed address into an MCU upgrade package. The APDU instruction set includes the following:

[0055] Offline security domain authentication is achieved through a certificate interaction mechanism (as defined in SCP11).

[0056] Download the CAP package for Applet applications;

[0057] Applet instance creation;

[0058] (Optional) Delete the old applet.

[0059] As described in step S3, in one embodiment, the result of integrating the relevant program portion based on the Applet into the program of the microcontroller unit, and writing the Applet program into the vehicle's security chip via APDU instructions through the program of the microcontroller unit, includes:

[0060] S31. Based on the result of the program of integrating the relevant program part of the Applet into the microcontroller unit, the startup program of the APDU instruction set under the preset Applet data packet is triggered;

[0061] S32. Execute the APDU instruction set and write the Applet program into the vehicle's security chip in the form of APDU instructions through the microcontroller program.

[0062] In practice, an APDU execution program is pre-installed in the MCU. After the MCU restarts, it triggers the execution of APDU instructions, sending the APDU instructions sequentially to the SE. Because the MCU and SE are on the same circuit board, the success rate is extremely high. After the MCU completes the execution, the result is recorded to avoid repeated execution.

[0063] It should be noted that upgrading the MCU program via OTA or offline via an on-board diagnostic tool has a relatively high success rate due to the maturity of this mechanism.

[0064] As described in step S4, in this embodiment of the application, the application upgrade based on the writing result, achieved through ShareableInterface, without requiring real-time data interaction, includes:

[0065] S41. Based on the writing result, personalize the data through the Shareable mechanism and determine the current version of the vehicle's security chip. If the version of the vehicle's security chip is the latest version, update the status of the vehicle's security chip to unpersonalized; otherwise, update the status of the vehicle's security chip to terminated, and the old version of the Applet can no longer be selected.

[0066] S42. The application upgrade based on the write result, implemented through a Shareable Interface without real-time data interaction, further includes:

[0067] Obtain the unique identifier of the relevant program portion of the Applet;

[0068] A version number field is added using the unique identifier of the relevant program part of the Applet;

[0069] By utilizing the version number field and storing the relevant program parts of the unified Applet across multiple versions, personalized data is generated based on the Shareable mechanism, enabling the relevant program parts of the new version of the Applet to read data from the relevant program parts of the old version of the Applet.

[0070] In practice, supporting the Shareable Interface allows all personalized data to be read from older versions of the Applet after the application is installed, via the Shareable mechanism. For details, please refer to:

[0071] If the data cannot be read, it is considered that the application has been newly installed. The application status should be as follows: After the data of the old version of the application is read, its application status should be changed to terminated, and the old version of the Applet can no longer be selected; the new application should have the ability to be compatible with multiple old version data (based on the version number).

[0072] It should be noted that a version number should be added to the Applet name:

[0073] Specifically, the last two bytes of the Applet AID are changed to the version number field, such as: B000000333534E42FF00xxxx. The last two bytes are the version number of the Applet, which can range from 0000 to FFFF. The Applet AID is a unique identifier for the relevant program part of the Applet.

[0074] The advantage of doing this is that multiple versions of the same applet can be stored in the same security chip, allowing a new version applet to read data from an older version applet.

[0075] In this embodiment of the application, the program portion of the Applet is integrated into the program of the MCU (or a certain Flash space) through the vehicle's MCU upgrade mechanism. The Applet program portion is downloaded to the MCU first along with the MCU upgrade.

[0076] The Applet program is written into the SE (Security Chip) via APDU instructions through the MCU program, thereby reducing real-time data communication;

[0077] This allows for application upgrades that do not require real-time data interaction by combining the Shareable Interface of Applet's Java Card.

[0078] In practice, for new application installations, after the above general steps are completed, the application is still in an unpersonalized state. At this time, personalized data should be sent to the server-side TSM through real-time communication. The communication data is only 1-3K, which can greatly improve the success rate of application installation and greatly reduce the execution time.

[0079] It should be noted that this application significantly reduces the communication cost of SE content management (to less than one-tenth of the original communication data volume), making the application scope of SE chips wider.

[0080] It enables fully offline Applet upgrades, achieving a near 100% success rate. Applet upgrades can be performed with minimal impact on business operations, with actual interruption time within 1-2 seconds, making them virtually imperceptible to users. This effectively improves the success rate of installing or upgrading Applets in automotive SE chips (and the success rate of upgrading mini-programs running on security chips) in environments with very poor in-vehicle communication performance and stability.

[0081] Example 2

[0082] Please see Figure 2 , Figure 2 This is a system composition diagram of a vehicle-side security chip upgrade according to another embodiment of this application. The system includes:

[0083] Module 101 is used to obtain the relevant program parts of the Applet;

[0084] Integration module 102 is used to integrate the relevant program parts of the Applet into the program of the microcontroller unit using the relevant program parts of the Applet;

[0085] The execution module 103 is used to write the relevant program of the Applet into the vehicle's security chip in the form of APDU instructions based on the result of the program of the microcontroller unit integrating the relevant program part of the Applet.

[0086] Upgrade module 104 is used to upgrade applications without real-time data interaction based on the writing results through Shareable Interface.

[0087] Specifically, the system also includes:

[0088] The microcontroller upgrade module 105 is used to upgrade the microcontroller program based on the results of the integration of the relevant program parts of the Applet into the microcontroller program, either via OTA or offline via an on-board diagnostic tool.

[0089] Example 3

[0090] Please see Figure 3 , Figure 3 This is a diagram illustrating the device composition for upgrading a vehicle-side security chip according to another embodiment of this application. The device includes:

[0091] Memory 31, on which an executable program is stored;

[0092] Processor 32 is configured to execute the executable program in the memory 31 to implement the steps of any of the methods described above.

[0093] Furthermore, this application provides a computer-readable storage medium storing computer instructions for causing a computer to perform the steps of any of the methods described above. The storage medium may be a magnetic disk, optical disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk drive (HDD), or solid-state drive (SSD), etc.; the storage medium may also include combinations of the above types of memory.

[0094] It is understood that the same or similar parts in the above embodiments can be referred to each other, and the contents not described in detail in some embodiments can be referred to the same or similar contents in other embodiments.

[0095] It should be noted that in the description of this application, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance. Furthermore, in the description of this application, unless otherwise stated, "a plurality of" means at least two.

[0096] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the function involved, as will be understood by those skilled in the art to which embodiments of this application pertain.

[0097] It should be understood that various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0098] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0099] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0100] The storage media mentioned above can be read-only memory, disk, or optical disk, etc.

[0101] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0102] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A method for upgrading a vehicle-side security chip, characterized in that, The method includes: Obtain the relevant program parts of the Applet; The relevant program parts of the Applet are integrated into the program of the microcontroller unit using the relevant program parts of the Applet. Based on the results of integrating the relevant program of the Applet into the program of the microcontroller unit, the relevant program of the Applet is written into the vehicle's security chip in the form of APDU instructions through the program of the microcontroller unit. Based on the results of the write operation, application upgrades can be implemented through a Shareable Interface without requiring real-time data interaction. The application upgrade based on the write result, implemented through a Shareable Interface, that does not require real-time data interaction includes: Based on the writing results, the data is personalized using the Shareable mechanism, and the current version of the vehicle's security chip is determined. If the vehicle's security chip is the latest version, its status is updated to unpersonalized; otherwise, its status is updated to terminated, and older versions of Applets can no longer be selected. The application upgrade based on the write result, implemented through a Shareable Interface, that does not require real-time data interaction, further includes: Obtain the unique identifier of the relevant program portion of the Applet; A version number field is added using the unique identifier of the relevant program part of the Applet; By utilizing the version number field and storing the relevant program parts of the unified Applet across multiple versions, personalized data is generated based on the Shareable mechanism, enabling the relevant program parts of the new version of the Applet to read data from the relevant program parts of the old version of the Applet.

2. The method according to claim 1, characterized in that, The relevant program parts for obtaining the Applet include: Based on the SCP11 protocol, send directly written APDU instruction sets to the vehicle's security chip; The APDU instruction set is accepted, packaged into an Applet data packet, and the relevant program part of the Applet is obtained.

3. The method according to claim 2, characterized in that, The APDU instruction set includes: Offline authentication for security domains, downloading CAP packages for Applet applications, and creating Applet instances.

4. The method according to claim 1, characterized in that, The result of integrating the relevant program based on the Applet into the program of the microcontroller unit, and writing the Applet program into the vehicle's security chip via APDU instructions through the program of the microcontroller unit, includes: S1. Based on the result of the program integrating the relevant program part of the Applet into the microcontroller unit, the startup program of the APDU instruction set under the preset Applet data packet is triggered; S2. Execute the APDU instruction set and write the Applet program into the vehicle's security chip in the form of APDU instructions through the microcontroller program.

5. A system for upgrading a vehicle-side security chip, applied to the method for upgrading a vehicle-side security chip as described in any one of claims 1-4, characterized in that, The system includes: The acquisition module is used to obtain the relevant program parts of the Applet; An integration module is used to integrate the relevant program parts of the Applet into the program of the microcontroller unit using the relevant program parts of the Applet; The execution module is used to write the relevant program of the Applet into the vehicle's security chip in the form of APDU instructions based on the program result of the program of the microcontroller unit based on the relevant program part of the Applet. The upgrade module is used to upgrade applications without real-time data interaction based on the results of the write operation through a Shareable Interface.

6. The system according to claim 5, characterized in that, The system also includes: The microcontroller upgrade module is used to upgrade the microcontroller program based on the results of the integration of the relevant program parts of the Applet into the microcontroller program, either via OTA or offline via an on-board diagnostic tool.

7. A device for upgrading a vehicle-side security chip, characterized in that, The device includes: Memory, on which executable programs are stored; A processor for executing the executable program in the memory to implement the steps of the method according to any one of claims 1-4.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing a computer to perform the steps of the method according to any one of claims 1-4.

Images