Vehicle encryption system and method

Abstract

The present application provides a vehicle encryption system and method. The vehicle encryption system includes a working host computer and a vehicle microprocessor. The working host computer generates multiple first encryption information corresponding to the encryption task and multiple second encryption information corresponding to the encryption task based on the target encryption information of each of the multiple encryption tasks acquired, and then obtains the target encryption information of the corresponding encryption task based on at least the multiple first encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task transmitted by the preprocessing module of the vehicle microprocessor, and saves the target encryption information of each encryption task into the key management module. It is ensured that a security authentication mechanism is established in the vehicle microprocessor to ensure the security of the operation of the vehicle microprocessor.

Description

Technical Field

[0001] The present application relates to the field of vehicle safety technology, and in particular, to a vehicle encryption system and method. Background Art

[0002] With the further introduction of information security policies, the requirements for vehicle information security are becoming more and more stringent, and related demands are increasing. The secure boot of the vehicle microprocessor (Microcontroller Unit, MCU) is an important part of information security. Secure boot (secure boot) ensures that the software started is trustworthy, safe, and has not been tampered with.

[0003] At present, some in-vehicle MCUs use built-in hardware security modules (HSM modules for short) to manage security keys.

[0004] However, there are still some MCUs that cannot meet security management requirements through HSM modules.

[0005] Therefore, the present application provides a vehicle encryption method to solve the above technical problems. Summary of the invention

[0006] The purpose of this application is to provide a vehicle encryption system and method that can solve at least one of the above-mentioned technical problems. The specific solution is as follows:

[0007] According to a specific implementation of the present application, in a first aspect, the present application provides a vehicle encryption system, including:

[0008] A working host computer is configured to generate a plurality of first encryption information corresponding to the encryption task and a plurality of second encryption information corresponding to the encryption task based on the acquired target encryption information of each of the plurality of encryption tasks, wherein the plurality of first encryption information of each encryption task is obtained by applying at least the corresponding target encryption information to a plurality of first algorithms for encryption, and the plurality of second encryption information of each encryption task is obtained by applying the corresponding target encryption information to a plurality of second algorithms for encryption;

[0009] The vehicle microprocessor includes a preprocessing module and a key management module. The preprocessing module is configured to obtain target encryption information of the corresponding encryption task based on at least multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task in the key management module.

[0010] Optionally, the preprocessing module is configured to obtain target encryption information of the corresponding encryption task based on at least the multiple first encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task to the key management module, including:

[0011] Decrypting the plurality of first encrypted information of each encrypted task acquired by the plurality of first algorithms to obtain at least the encrypted information to be reviewed corresponding to the encrypted task;

[0012] Encrypting the awaiting-review encryption information of each encryption task by using multiple second algorithms to obtain multiple third encryption information corresponding to the encryption task;

[0013] When the plurality of third encrypted information of each encryption task and the plurality of second encrypted information of the corresponding encryption task meet the same preset condition, the plurality of awaiting-review encrypted information are respectively saved as target encrypted information in the key management module.

[0014] Optionally, the preprocessing module is further configured to upload loading success information when the multiple third encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task meet the same preset conditions.

[0015] Optionally, the preprocessing module is further configured to: after saving the multiple pieces of awaiting-review encrypted information as target encrypted information respectively in the key management module, set a startup flag in the key management module.

[0016] Optionally, the preprocessing module is also configured to: when the third encryption information of any encryption task and the second encryption information corresponding to any encryption task do not meet the preset same conditions, upload the loading failure information, trigger the superior host computer to re-download multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task.

[0017] Optionally, the multiple encryption tasks include: a main authority task, a boot loader authority task, a boot loader authentication task, and an application authority task;

[0018] The multiple target encrypted information include: an authorization key applied to the main authority task, a boot loader key applied to the boot loader authority task, a first message authentication code of the boot loader applied to the boot loader authentication task, and an application key applied to the application authority task.

[0019] Optionally, the working host computer is further configured to: generate a second message authentication code of the application based on the acquired application secret key and application file;

[0020] The vehicle microprocessor further includes a flash memory, and the vehicle microprocessor is further configured to save the second message authentication code transmitted downstream into the flash memory.

[0021] Optionally, the working host computer is configured to generate a plurality of first encryption information corresponding to the encryption task and a plurality of second encryption information corresponding to the encryption task based on the acquired target encryption information of each of the plurality of encryption tasks, respectively, including at least:

[0022] Get the bootloader file;

[0023] The first message authentication code is generated based on the boot loader key and the boot loader file.

[0024] Optionally, the system further comprises a production host computer;

[0025] The production host computer is respectively connected to the working host computer and the preprocessing module for communication, and is configured to transmit multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task transmitted from the working host computer to the preprocessing module.

[0026] According to a specific implementation of the present application, in a second aspect, the present application provides a vehicle encryption method, including:

[0027] During the execution of the root of trust, obtaining a boot loader key for a boot loader permission task stored in a key management module;

[0028] Applying the bootloader key to a preset first encryption algorithm to obtain a first algorithm result;

[0029] When it is determined that the first algorithm result meets a preset first trust condition, starting a boot loader;

[0030] During the execution of the bootloader, obtaining the application key applied to the application permission task stored in the key management module;

[0031] Applying the application secret key to a preset second encryption algorithm to obtain a second algorithm result;

[0032] When it is determined that the second algorithm result meets the preset second trust condition, the application is started.

[0033] Optionally, when it is determined that the first algorithm result satisfies a preset first trust condition, starting a boot loader includes:

[0034] When it is determined that the second algorithm result satisfies the preset second trust condition, obtaining a first message authentication code of the boot loader program and the boot loader program stored in the key management module and applied to the boot loader program authentication task;

[0035] Applying the boot loader to a preset third encryption algorithm to obtain a third message authentication code;

[0036] When the third message authentication code is equal to the first message authentication code, a boot loader is started.

[0037] Optionally, when it is determined that the second algorithm result satisfies a preset second trust condition, starting the application program includes:

[0038] When it is determined that the second algorithm result satisfies the preset second trust condition, obtaining a second message authentication code and the application program stored in the flash memory;

[0039] Applying the application to a preset fourth encryption algorithm to obtain a fourth message authentication code;

[0040] When the fourth message authentication code is equal to the second message authentication code, an application is started.

[0041] Optionally, the method further includes:

[0042] In response to an update request or a deletion request transmitted from a host computer, obtaining an authorization key applied to the master authority task stored in a key management module;

[0043] Applying the authorization key to a preset fifth encryption algorithm to obtain a third algorithm result;

[0044] When it is determined that the third algorithm result meets the preset third trust condition, the host computer is authorized to update or delete the target encryption information in the key management module.

[0045] Compared with the prior art, the above solution of the embodiment of the present application has at least the following beneficial effects:

[0046] The present application provides a vehicle encryption system and method. The vehicle encryption system includes a working host computer and a vehicle microprocessor. The working host computer generates multiple first encryption information corresponding to the encryption task and multiple second encryption information corresponding to the encryption task based on the target encryption information of each of the multiple encryption tasks acquired, and then obtains the target encryption information of the corresponding encryption task based on at least the multiple first encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task transmitted by the preprocessing module of the vehicle microprocessor, and saves the target encryption information of each encryption task into the key management module. It is ensured that a security authentication mechanism is established in the vehicle microprocessor to ensure the security of the operation of the vehicle microprocessor. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 A schematic diagram of a vehicle encryption system according to an embodiment of the present application is shown;

[0048] Figure 2 A schematic diagram of an application startup process of a vehicle microprocessor according to an embodiment of the present application is shown;

[0049] Figure 3 Another schematic diagram of a vehicle encryption system according to an embodiment of the present application is shown;

[0050] Figure 4 A flow chart of a vehicle encryption method according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0052] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings, and "multiple" generally includes at least two.

[0053] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0054] It should be understood that although the terms first, second, third, etc. may be used to describe in the embodiments of the present application, these descriptions should not be limited to these terms. These terms are only used to distinguish the descriptions. For example, without departing from the scope of the embodiments of the present application, the first may also be referred to as the second, and similarly, the second may also be referred to as the first.

[0055] As used herein, the words "if" and "if" may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0056] It should also be noted that the term "includes", "comprising" or any other variation thereof is intended to cover non-exclusive inclusion, so that a commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprising a ..." do not exclude the existence of other identical elements in the commodity or device including the elements.

[0057] It should be particularly noted that any symbols and / or numbers in the specification that are not marked in the accompanying drawings are not drawing marks.

[0058] The optional embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0059] The embodiment provided in this application is an embodiment of a vehicle encryption system.

[0060] Combine the following Figure 1 The embodiments of the present application are described in detail.

[0061] An embodiment of the present application provides a vehicle encryption system, including a working host computer and a vehicle microprocessor.

[0062] In the embodiment of the present application, a vehicle microprocessor without an HSM module establishes a security authentication method similar to the HSM module in the vehicle microprocessor through a working host computer. That is, the target encryption information of each of the multiple encryption tasks required for security authentication is saved in the key management module of the vehicle microprocessor through the working host computer. When the vehicle microprocessor is started, the target encryption information of each encryption task in the key management module is used to perform security authentication on the information at each stage of the vehicle microprocessor to ensure the security of the operation of the vehicle microprocessor.

[0063] The working host computer is configured to generate a plurality of first encryption information corresponding to the encryption task and a plurality of second encryption information corresponding to the encryption task based on the acquired target encryption information of each of the plurality of encryption tasks.

[0064] In some specific embodiments, the multiple encryption tasks include: a main authority task, a boot loader authority task, a boot loader authentication task, and an application authority task. The multiple target encryption information includes: an authorization key applied to the main authority task, a boot loader secret key applied to the boot loader authority task, a first message authentication code of the boot loader applied to the boot loader authentication task, and an application secret key applied to the application authority task.

[0065] When the target encryption information of each of the multiple encryption tasks stored in the key management module needs to be deleted or updated, the main authority task is executed, and the authorization key is applied to the authorization decryption algorithm to determine whether the executor has the execution authority. When the authorization key matches the authorization decryption algorithm, it is determined that the executor has the execution authority; when the authorization key does not match the authorization decryption algorithm, it is determined that the executor does not have the execution authority.

[0066] Message Authentication Code (MAC) is a short piece of information generated by a specific algorithm to check the integrity of a message and to verify identity. It can be used to check whether the content of a message has been changed during the message transmission process, regardless of whether the change is caused by accident or intentional attack. It can also be used as a source of identity verification to confirm the source of the message.

[0067] like Figure 2 As shown, the startup process of the vehicle microprocessor includes the following steps: the first step is to start the trusted root after power-on; the second step is to start the boot loader; and the third step is that the boot loader starts the application.

[0068] In the vehicle encryption system, before the boot loader is started in the second step, the boot loader permission task is executed. The boot loader key is first applied to the loading decryption algorithm to determine whether the executor has the boot loader startup permission. When the boot loader key matches the loading decryption algorithm, it is determined that the executor has the boot loader startup permission; when the boot loader key does not match the loading decryption algorithm, it is determined that the executor does not have the boot loader startup permission. Before the boot loader is started, the boot loader authentication task can also be performed. The integrity of the boot loader can be verified by the first message authentication code of the boot loader stored in the key management module and the symmetric key block encryption algorithm to ensure that the boot loader is not tampered with. For example, the symmetric key block encryption algorithm is the AES-128 encryption algorithm.

[0069] Before the application is started in the third step, the application permission task is executed. The application key is first applied to the application decryption algorithm to determine whether the executor has the permission to start the application. When the application key matches the application decryption algorithm, it is determined that the executor has the permission to start the application; when the application key does not match the application decryption algorithm, it is determined that the executor does not have the permission to start the application. Before the application is started, the application authentication task can also be executed to verify the integrity of the application through the second message authentication code of the application stored in the flash memory and the symmetric key block encryption algorithm to ensure that the application is not tampered with. For example, the symmetric key block encryption algorithm is the AES-128 encryption algorithm.

[0070] Among them, the multiple first encryption information of each encryption task is obtained by applying at least the corresponding target encryption information to multiple first algorithms for encryption, and the multiple second encryption information of each encryption task is obtained by applying the corresponding target encryption information to multiple second algorithms for encryption.

[0071] For example, the multiple first algorithms of each encryption task include: M1 algorithm, M2 algorithm and M3 algorithm; the multiple second algorithms of each encryption task include M4 algorithm and M5 algorithm; the target encryption information of each encryption task generates multiple first encryption information of M1-M3 algorithms; the target encryption information of each encryption task generates multiple second encryption information of M4-M5 algorithms; since the M1-M5 algorithms are irreversible, the security of the encryption algorithms is guaranteed.

[0072] The vehicle microprocessor includes a preprocessing module and a key management module. The preprocessing module is configured to obtain target encryption information of the corresponding encryption task based on at least multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task in the key management module.

[0073] In the embodiment of the present application, the preprocessing module in the vehicle microprocessor can communicate with the upper computer that transmits information, and is also connected to the key management module. The preprocessing module saves the decrypted target encryption information of each encryption task to the key management module.

[0074] The key management module refers to an inaccessible area in the dedicated EEPROM. It improves the security of multiple target encryption information stored in the key management module.

[0075] In some specific embodiments, the preprocessing module is configured to obtain target encryption information of the corresponding encryption task based on at least multiple first encryption information of each encryption task transmitted and multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task in the key management module, including: decrypting the multiple first encryption information of each encryption task obtained by the multiple first algorithms to at least obtain the awaiting-review encryption information of the corresponding encryption task; encrypting the awaiting-review encryption information of each encryption task by multiple second algorithms to obtain multiple third encryption information of the corresponding encryption task; when the multiple third encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task meet the same preset conditions, saving the multiple awaiting-review encryption information as target encryption information in the key management module respectively.

[0076] In order to prevent the target encrypted information from being destroyed before being saved, the decrypted information in this specific embodiment is used as the pending encrypted information. The reliability of the pending encrypted information is verified, and the pending encrypted information is saved as the target encrypted information only when the pending encrypted information is reliable, thereby ensuring the security and reliability of the target encrypted information saved in the key management module.

[0077] For example, multiple first encrypted information of each encryption task are decrypted by M1, M2 and M3 algorithms to obtain at least the awaiting encryption information of the corresponding encryption task; the awaiting encryption information of each encryption task is encrypted by M4 and M5 algorithms to obtain multiple third encrypted information of the corresponding encryption task; corresponding to each encryption task, when the third encrypted information obtained by the M4 algorithm is the same as the second encrypted information obtained by the M4 algorithm, and the third encrypted information obtained by the M5 algorithm is the same as the second encrypted information obtained by the M5 algorithm, the awaiting encryption information of the corresponding encryption task is determined to be the target encryption information, which can be saved in the key management module.

[0078] In some specific embodiments, the preprocessing module is further configured to upload the loading success information when the multiple third encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task meet the same preset conditions.

[0079] In this specific embodiment, when the preset same conditions are met, the upper computer that is transmitting the data is notified that the loading is successful.

[0080] In some specific embodiments, the pre-processing module is further configured to: after saving the plurality of awaiting-review encrypted information as target encrypted information respectively in the key management module, set a startup flag in the key management module.

[0081] In this specific embodiment, after the target encryption information is saved in the key management module, a startup identifier is set in the key management module so that the vehicle microprocessor uses the target encryption information in the key management module to authenticate security through the startup identifier.

[0082] In some specific embodiments, the preprocessing module is also configured to: when the third encryption information of any encryption task and the second encryption information corresponding to any encryption task do not meet the preset same conditions, upload the loading failure information, trigger the upper computer to re-download multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task.

[0083] In this specific embodiment, when the preset identical condition is not met, the upper computer that is transmitting the information down will be notified of the loading failure, and the upper computer that is transmitting the information down will transmit the multiple first encrypted information of each encryption task and the multiple second encrypted information of the corresponding encryption task again, until the vehicle microprocessor can save the target encrypted information of each encryption task to the key management module, thereby ensuring the establishment of a security mechanism in the vehicle microprocessor.

[0084] In some specific embodiments, the working host computer is further configured to generate a second message authentication code of the application based on the obtained application secret key and application file.

[0085] The vehicle microprocessor further includes a flash memory, and the vehicle microprocessor is further configured to save the second message authentication code transmitted downstream into the flash memory.

[0086] In this specific embodiment, the second message authentication code is stored in the flash memory of the vehicle microprocessor, so that when the application in the vehicle microprocessor is updated, the second message authentication code in the flash memory is updated. The integrity of the application file can be verified by the second message authentication code to avoid arbitrary tampering of the application file.

[0087] In some specific embodiments, the working host computer is configured to generate multiple first encryption information corresponding to the encryption task and multiple second encryption information corresponding to the encryption task based on the target encryption information of each of the multiple encryption tasks obtained, at least including: obtaining the boot loader file; generating the first message authentication code based on the boot loader key and the boot loader file.

[0088] In this specific embodiment, the first message authentication code is generated by the boot loader key and the boot loader file. The integrity of the boot loader file can be verified by the first message authentication code to avoid arbitrary tampering of the boot loader file.

[0089] In some specific embodiments, the system further comprises a production host computer, such as Figure 3 shown.

[0090] The production host computer is respectively connected to the working host computer and the preprocessing module for communication, and is configured to transmit multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task transmitted from the working host computer to the preprocessing module.

[0091] In this specific embodiment, when the manufacturer produces automobiles, if the security mechanism is built in batches for the vehicle microprocessors on the assembly line, a production host computer is set between the working host computer and the vehicle microprocessor. The working host computer transmits multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task to the production host computer, and then the production host computer transmits multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task to the preprocessing module of the working host computer. The production host computer ensures the work of loading the target encryption information to the key management module of the vehicle microprocessor.

[0092] The vehicle encryption system of the embodiment of the present application includes a working host computer and a vehicle microprocessor. The working host computer generates multiple first encryption information and multiple second encryption information of the corresponding encryption task based on the target encryption information of each of the multiple encryption tasks obtained, and then obtains the target encryption information of the corresponding encryption task based on at least the multiple first encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task transmitted by the preprocessing module of the vehicle microprocessor, and saves the target encryption information of each encryption task into the key management module. It is ensured that a security authentication mechanism is established in the vehicle microprocessor to ensure the security of the operation of the vehicle microprocessor.

[0093] The present application also provides a method embodiment that is based on the above embodiment. The explanation based on the same name meaning is the same as that of the above embodiment, and has the same technical effect as the above embodiment, which will not be repeated here.

[0094] like Figure 4 As shown, the present application provides a vehicle encryption method, which is applied to a vehicle microprocessor in the system as described above, comprising:

[0095] Step S401, during the execution of the trusted root, obtaining a boot loader key applied to a boot loader permission task stored in a key management module;

[0096] Step S402, applying the boot loader key to a preset first encryption algorithm to obtain a first algorithm result;

[0097] Step S403, when it is determined that the first algorithm result meets the preset first trust condition, starting the boot loader;

[0098] Step S404, during the execution of the boot loader, obtaining the application key applied to the application permission task stored in the key management module;

[0099] Step S405, applying the application key to a preset second encryption algorithm to obtain a second algorithm result;

[0100] Step S406: when it is determined that the second algorithm result meets the preset second trust condition, start the application.

[0101] Optionally, when it is determined that the first algorithm result satisfies a preset first trust condition, starting a boot loader includes:

[0102] Step S403-1, when it is determined that the second algorithm result meets the preset second trust condition, obtaining a first message authentication code of the boot loader program and the boot loader program stored in the key management module and applied to the boot loader program authentication task;

[0103] Step S403-2, applying the boot loader to a preset third encryption algorithm to obtain a third message authentication code;

[0104] Step S403-3: when the third message authentication code is equal to the first message authentication code, start the boot loader.

[0105] Optionally, when it is determined that the second algorithm result satisfies a preset second trust condition, starting the application program includes:

[0106] Step S406-1, when it is determined that the second algorithm result meets the preset second trust condition, obtaining a second message authentication code of the application and the application stored in the flash memory;

[0107] Step S406-2, applying the application to a preset fourth encryption algorithm to obtain a fourth message authentication code;

[0108] Step S406-3: when the fourth message authentication code is equal to the second message authentication code, start the application.

[0109] Optionally, the method further includes:

[0110] Step S411, in response to an update request or a deletion request transmitted from a host computer, obtaining an authorization key applied to the master authority task stored in a key management module;

[0111] Step S412, applying the authorization key to a preset fifth encryption algorithm to obtain a third algorithm result;

[0112] Step S413: when it is determined that the third algorithm result meets the preset third trust condition, authorize the host computer to update or delete the target encryption information in the key management module.

[0113] The embodiment of the present application performs security protection on the operation process of the vehicle microprocessor through the target encryption information of each of the multiple encryption tasks stored in the key management module, thereby ensuring the security of the operation of the vehicle microprocessor.

[0114] This embodiment provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method steps described in the above embodiment.

[0115] An embodiment of the present application provides a non-volatile computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions can execute the method steps described in the above embodiment.

[0116] Finally, it should be noted that: the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0117] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A vehicle encryption system, characterized in that: include: A working host computer is configured to generate a plurality of first encryption information corresponding to the encryption task and a plurality of second encryption information corresponding to the encryption task based on the acquired target encryption information of each of the plurality of encryption tasks, wherein the plurality of first encryption information of each encryption task is obtained by applying at least the corresponding target encryption information to a plurality of first algorithms for encryption, and the plurality of second encryption information of each encryption task is obtained by applying the corresponding target encryption information to a plurality of second algorithms for encryption; The plurality of encryption tasks include: a main authority task, a bootloader authority task, a bootloader authentication task, and an application authority task; The plurality of target encrypted information includes: an authorization key applied to the master authority task, a boot loader key applied to the boot loader authority task, a first message authentication code of the boot loader applied to the boot loader authentication task, and an application key applied to the application authority task; A vehicle microprocessor includes a preprocessing module and a key management module, wherein the preprocessing module is configured to: obtain target encryption information of a corresponding encryption task based at least on multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task in the key management module; wherein the vehicle microprocessor does not have an HSM module; and when the vehicle microprocessor is started, the vehicle microprocessor performs security authentication on information at each stage in the vehicle microprocessor through the target encryption information of each of the multiple encryption tasks in the key management module.

2. The system according to claim 1, characterized in that The preprocessing module is configured to obtain target encryption information of the corresponding encryption task based on at least the multiple first encryption information of each encryption task and the multiple second encryption information of the corresponding encryption task, and save the target encryption information of each encryption task to the key management module, including: Decrypting the plurality of first encrypted information of each encrypted task acquired by the plurality of first algorithms to obtain at least the encrypted information to be reviewed corresponding to the encrypted task; Encrypting the awaiting-review encryption information of each encryption task by using multiple second algorithms to obtain multiple third encryption information corresponding to the encryption task; When the plurality of third encrypted information of each encryption task and the plurality of second encrypted information of the corresponding encryption task meet the same preset condition, the plurality of awaiting-review encrypted information are respectively saved as target encrypted information in the key management module.

3. The system according to claim 2, characterized in that The preprocessing module is further configured to upload the loading success information when the plurality of third encryption information of each encryption task and the plurality of second encryption information of the corresponding encryption task meet the same preset condition.

4. The system according to claim 2, characterized in that The pre-processing module is further configured to: after saving the plurality of awaiting-review encrypted information as target encrypted information respectively in the key management module, set a start flag in the key management module.

5. The system according to claim 2, characterized in that The preprocessing module is also configured to: when the third encryption information of any encryption task and the second encryption information corresponding to any encryption task do not meet the preset same conditions, upload the loading failure information, trigger the upper computer to re-download multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task.

6. The system according to claim 1, characterized in that The working host computer is also configured to: generate a second message authentication code of the application based on the acquired application secret key and application file; The vehicle microprocessor further includes a flash memory, and the vehicle microprocessor is further configured to save the second message authentication code transmitted downstream into the flash memory.

7. The system according to claim 1, characterized in that The working host computer is configured to generate a plurality of first encryption information corresponding to the encryption task and a plurality of second encryption information corresponding to the encryption task based on the target encryption information of each of the plurality of encryption tasks obtained, and at least includes: Get the bootloader file; The first message authentication code is generated based on the boot loader key and the boot loader file.

8. The system according to claim 1, characterized in that The system also includes a production host computer; The production host computer is respectively connected to the working host computer and the preprocessing module for communication, and is configured to transmit multiple first encryption information of each encryption task and multiple second encryption information of the corresponding encryption task transmitted from the working host computer to the preprocessing module.

9. A vehicle encryption method, applied to a vehicle microprocessor in the system of claim 6, characterized in that: include: During the execution of the root of trust, obtaining a boot loader key for a boot loader permission task stored in a key management module; Applying the bootloader key to a preset first encryption algorithm to obtain a first algorithm result; When it is determined that the first algorithm result meets a preset first trust condition, starting a boot loader; During the execution of the bootloader, obtaining the application key applied to the application permission task stored in the key management module; Applying the application secret key to a preset second encryption algorithm to obtain a second algorithm result; When it is determined that the second algorithm result meets the preset second trust condition, the application is started.

Images