Vehicle OTA encrypted upgrade methods, devices, electronic equipment and storage media

Abstract

This application relates to an encrypted upgrade method, apparatus, electronic device, and storage medium for vehicle OTA (Over-The-Air) updates. The method includes: receiving an OTA upgrade request from an OTA cloud server; obtaining OTA upgrade information based on authentication information; controlling the vehicle to enter OTA upgrade mode based on the OTA upgrade information; and issuing an upgrade package key based on a preset key; encrypting the software upgrade package using the upgrade package key to obtain an encrypted upgrade package; decrypting the encrypted upgrade package using the upgrade package key to obtain the plaintext upgrade package; and upgrading the vehicle's software based on the plaintext upgrade package. This application's embodiments ensure that only key distribution occurs between the cloud platform and the vehicle, without issuing upgrade packages, reducing the pressure on the cloud and changing the current method of the cloud directly sending upgrade packages to the vehicle. This eliminates the need for sending multiple upgrade packages, and the OTA upgrade package data is traceable, with the upgrade content being tamper-proof and transparent.

Description

Technical Field

[0001] This application relates to the field of automotive electronics application technology, and in particular to a method, device, electronic device and storage medium for encrypted OTA upgrades of vehicles. Background Technology

[0002] With the development of the Internet of Things (IoT), smart terminals such as smart homes and smart vehicles, as well as the intelligentization of traditional devices, are the future development trend. Over-the-Air (OTA) technology upgrades are designed to solve the system upgrade and optimization problems of smart terminals. OTA upgrades mainly refer to a method of remotely managing and updating the firmware of terminal devices through an air interface. OTA upgrades can update the device's operating system, system configuration, and other aspects.

[0003] In related technologies, OTA encrypted upgrades are mostly based on the distribution of symmetric keys using public and private keys and the direct sending of the upgrade package to the vehicle. The vehicle then receives the package and upgrades the software. For key distribution, the cloud sends a symmetric key encrypted with the public key to the vehicle, and the symmetric key is encrypted using the vehicle's public key. For sending the upgrade package, the cloud sends a software upgrade package encrypted with the symmetric key to the vehicle.

[0004] However, due to a lack of consideration for the security of upgrade packages in related technologies, upgrade packages are prone to malicious tampering during transmission, or the structure of upgrade packages may be incomplete during network transmission, making it impossible to verify the accuracy of the upgrade packages. This urgently needs to be improved. Summary of the Invention

[0005] This application provides a method, apparatus, electronic device, and storage medium for encrypted OTA upgrades of vehicles, in order to solve the problems in related technologies, such as the lack of consideration for the security of upgrade packages, which leads to the easy malicious tampering of upgrade packages during transmission, or the incomplete structure of upgrade packages transmitted over the network, making it impossible to verify the accuracy of the upgrade packages.

[0006] The first aspect of this application provides a method for encrypted OTA upgrades of a vehicle, comprising the following steps: receiving an OTA upgrade request sent by an OTA cloud server; determining the vehicle's identity authentication information based on the OTA upgrade request; obtaining OTA upgrade information based on the identity authentication information; controlling the vehicle to enter OTA upgrade mode based on the OTA upgrade information; obtaining a software upgrade package based on the OTA upgrade mode; and issuing an upgrade package key based on a preset key; encrypting the software upgrade package using the upgrade package key to obtain an encrypted upgrade package; decrypting the encrypted upgrade package using the upgrade package key to obtain plaintext upgrade package; and upgrading the vehicle's software based on the plaintext upgrade package.

[0007] Optionally, in one embodiment of this application, before receiving the over-the-air (OTA) upgrade request sent by the OTA cloud server, the method further includes: detecting the vehicle's status information; determining whether the vehicle OTA meets preset upgrade conditions based on the status information; and allowing the receiving of the OTA upgrade request if the vehicle OTA meets the preset upgrade conditions.

[0008] Optionally, in one embodiment of this application, determining the vehicle's identity authentication information based on the OTA upgrade request includes: obtaining the vehicle's identity authentication information based on at least one of user registration information and identity authentication information, according to the OTA upgrade request.

[0009] Optionally, in one embodiment of this application, the step of issuing the upgrade package key according to the preset key includes: calling the vehicle's preset key; encrypting the upgrade package key according to the preset key to obtain the encrypted upgrade package key, and issuing the encrypted upgrade package key to the OTA cloud server and the vehicle.

[0010] Optionally, in one embodiment of this application, the step of issuing the upgrade package key according to the preset key further includes: calling the preset key of the vehicle; decrypting the preset key to obtain the identity information of the vehicle; verifying the identity information to obtain verified identity information, and issuing the verified identity information to the upgrade package key of the vehicle.

[0011] A second aspect of this application provides an encrypted OTA upgrade device for a vehicle, comprising: a receiving module, configured to receive an OTA upgrade request sent by an OTA cloud server, determine the vehicle's identity authentication information based on the OTA upgrade request, and obtain OTA upgrade information based on the identity authentication information; a control module, configured to control the vehicle to enter an OTA upgrade mode based on the OTA upgrade information, obtain a software upgrade package based on the OTA upgrade mode, and issue an upgrade package key based on a preset key; and an upgrade module, configured to encrypt the software upgrade package using the upgrade package key to obtain an encrypted upgrade package, decrypt the encrypted upgrade package using the upgrade package key to obtain plaintext upgrade package, and upgrade the vehicle's software based on the plaintext upgrade package.

[0012] Optionally, in one embodiment of this application, it further includes: a detection module, configured to detect the vehicle's status information before receiving an over-the-air (OTA) upgrade request sent by an OTA cloud server; a judgment module, configured to determine whether the vehicle OTA meets preset upgrade conditions based on the status information; and an allow receiving module, configured to allow receiving the OTA upgrade request if the vehicle OTA meets the preset upgrade conditions.

[0013] Optionally, in one embodiment of this application, the receiving module includes: a confirmation unit, configured to obtain the vehicle's identity authentication information based on at least one of user registration information and identity authentication information, according to the OTA upgrade request.

[0014] Optionally, in one embodiment of this application, the control module includes: a first invocation unit, used to invoke a preset key of the vehicle; and an encryption unit, used to encrypt the upgrade package key according to the preset key to obtain an encrypted upgrade package key, and to send the encrypted upgrade package key to the OTA cloud server and the vehicle.

[0015] Optionally, in one embodiment of this application, the control module further includes: a second invocation unit, used to invoke the vehicle's preset key; a decryption unit, used to decrypt the preset key to obtain the vehicle's identity information; and a verification unit, used to verify the identity information, obtain verified identity information, and send the verified identity information to the vehicle's upgrade package key.

[0016] A third aspect of this application provides an electronic device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the vehicle OTA encrypted upgrade method as described in the above embodiments.

[0017] A fourth aspect of this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described encrypted OTA upgrade method for vehicles.

[0018] This application's embodiments ensure that only key distribution occurs between the cloud platform and the vehicle, without issuing upgrade packages. This reduces the pressure on the cloud and changes the current method of the cloud directly sending upgrade packages to the vehicle. It eliminates the need for sending multiple upgrade packages, and the OTA upgrade package data is traceable, with tamper-proof and transparent upgrade content. This, to a certain extent, prevents unintended tampering with certain important vehicle information via OTA. Therefore, it solves the problems in related technologies where the lack of consideration for upgrade package security leads to malicious tampering during transmission, or incomplete upgrade package structure during network transmission, making it impossible to verify the accuracy of the upgrade package.

[0019] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0020] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein:

[0021] Figure 1 This is a flowchart of a vehicle OTA (Over-The-Air) encryption upgrade method provided according to an embodiment of this application;

[0022] Figure 2 This is a functional diagram of the overall architecture of a vehicle OTA encrypted upgrade method according to an embodiment of this application;

[0023] Figure 3 This is a schematic diagram of a vehicle OTA encryption upgrade device provided according to an embodiment of this application;

[0024] Figure 4 This is a schematic diagram of the structure of an electronic device provided according to an embodiment of this application. Detailed Implementation

[0025] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0026] The following description, with reference to the accompanying drawings, outlines an encrypted OTA upgrade method, apparatus, electronic device, and storage medium for vehicles according to embodiments of this application. Addressing the issues raised in the background section regarding the lack of security considerations for upgrade packages, which leads to malicious tampering during transmission or incomplete upgrade package structures during network transmission, making it impossible to verify the accuracy of the upgrade package, this application provides an encrypted OTA upgrade method for vehicles. This method ensures that only key distribution occurs between the cloud platform and the vehicle, without distributing the upgrade package. This reduces the pressure on the cloud and changes the current practice of the cloud directly sending upgrade packages to the vehicle, eliminating the need for multiple upgrade package transmissions. Furthermore, the OTA upgrade package data is traceable, and the upgrade content is tamper-proof and transparent, thus preventing unintended tampering with important vehicle information via OTA. Therefore, this method solves the problems in the related technologies where the lack of security considerations for upgrade packages leads to malicious tampering during transmission or incomplete upgrade package structures during network transmission, making it impossible to verify the accuracy of the upgrade package.

[0027] Specifically, Figure 1 This is a flowchart illustrating a vehicle OTA encryption upgrade method provided in an embodiment of this application.

[0028] like Figure 1 As shown, the encrypted upgrade method for this vehicle's OTA includes the following steps:

[0029] In step S101, an over-the-air (OTA) upgrade request sent by the OTA cloud server is received, the vehicle's identity authentication information is determined based on the OTA upgrade request, and the OTA upgrade information is obtained based on the identity authentication information.

[0030] It is understood that the OTA cloud server in this application embodiment is the OTA management platform; the OTA in this application embodiment is the over-the-air download technology, that is, under the premise of network, it can automatically download upgrade packages for remote upgrade.

[0031] In actual implementation, the embodiment of this application can first have the vehicle submit an upgrade request to the cloud-based OTA management platform, that is, the OTA cloud server requests a software upgrade. The vehicle receives the OTA upgrade request sent by the OTA cloud server using over-the-air (OTA) technology. After receiving the request, the cloud-based OTA cloud server returns the vehicle's identity verification requirements, that is, it forwards the information to the quantum key management center. The vehicle uses a preset key to encrypt its own identity information and uploads it to the blockchain. The quantum key management center accesses the blockchain to view the vehicle's identity authentication record, determines the vehicle's identity authentication information based on the OTA upgrade request, and obtains the OTA upgrade information based on the identity authentication information.

[0032] This application embodiment can determine the vehicle's identity authentication information based on the OTA upgrade request, and obtain OTA upgrade information based on the identity authentication information, ensuring subsequent effective confirmation of whether to perform the upgrade.

[0033] Optionally, in one embodiment of this application, before receiving the over-the-air (OTA) upgrade request sent by the OTA cloud server, the method further includes: detecting the vehicle's status information; determining whether the vehicle's OTA meets preset upgrade conditions based on the status information; and allowing the receiving of the OTA upgrade request if the vehicle's OTA meets the preset upgrade conditions.

[0034] It is understood that the preset upgrade conditions in the embodiments of this application can be that the vehicle status meets the prerequisites and strategy requirements in the task.

[0035] In actual implementation, the embodiments of this application can receive OTA upgrade requests from the vehicle on the cloud OTA management platform. Before the upgrade begins, the current status of the vehicle is checked, and the vehicle status is judged based on the status information to determine whether the preconditions and policy requirements in the task are met. After confirming the identity of the vehicle, the quantum key management center replies to the OTA management platform to confirm whether the upgrade can be performed. If the vehicle OTA meets certain upgrade conditions, the over-the-air (OTA) upgrade request is allowed to be received.

[0036] Among them, such as Figure 2 As shown, the cloud-based OTA management platform in this embodiment consists of four functional modules: upgrade strategy, key center, upgrade package creation, and upgrade package monitoring.

[0037] (1) Upgrade strategy: Before the upgrade begins, this module checks the current status of the vehicle to determine whether the vehicle status meets the prerequisites and strategy requirements of the task. If it does not meet the requirements, the upgrade will be delayed.

[0038] (2) Key Center: This module is mainly responsible for storing preset keys and upgrade package keys, decrypting upgrade package keys, and encrypting upgrade packages.

[0039] (3) Upgrade package creation: This module is mainly responsible for creating upgrade packages.

[0040] (4) Upgrade package monitoring: This module is responsible for recording the status of the task during the upgrade process. For upgrade tasks in operation, it is necessary to count the number of vehicles successfully upgraded and the success rate.

[0041] This application embodiment allows receiving OTA upgrade requests via over-the-air (OTA) technology when the vehicle OTA meets certain upgrade conditions. This provides a basis for reducing the pressure on the cloud by distributing only keys between the cloud platform and the vehicle without issuing upgrade packages.

[0042] It should be noted that the preset upgrade conditions can be set by those skilled in the art according to the actual situation, and no specific restrictions are imposed here.

[0043] Optionally, in one embodiment of this application, determining the vehicle's identity authentication information based on the OTA upgrade request includes: obtaining the vehicle's identity authentication information based on at least one of user registration information and identity authentication information, according to the OTA upgrade request.

[0044] It is understood that, in this embodiment of the application, identity authentication can be performed between the vehicle and the blockchain before applying for a software upgrade, and the vehicle's ID information can be encrypted and uploaded to the blockchain using a pre-set key.

[0045] In actual implementation, the blockchain function in this application embodiment includes querying user registration and identity verification information. Based on OTA upgrade requests, it obtains vehicle identity verification information such as vehicle identification code according to user registration information and identity verification information, thereby providing support for the vehicle to access the blockchain to obtain upgrade packages and perform software upgrades.

[0046] In this context, blockchain can be viewed as an information-sharing platform that establishes trust between untrusted entities. All user access authentication information is recorded on a public blockchain network. Blockchain is a distributed database responsible for storing information used for vehicle authentication. This vehicle authentication information is embedded as a transaction into the blockchain, and any blockchain node can access this vehicle authentication information.

[0047] In step S102, the vehicle is controlled to enter the OTA upgrade mode according to the OTA upgrade information, and the software upgrade package is obtained according to the OTA upgrade mode, and the upgrade package key is issued according to the preset key.

[0048] It is understood that the OTA upgrade mode in this application embodiment can be the corresponding upgrade strategy selected for the upgrade.

[0049] As one possible implementation, in this embodiment of the application, after confirming the OTA upgrade information, the OTA management platform controls the vehicle to enter the OTA upgrade mode based on the vehicle information, and creates a software upgrade package for this upgrade according to the OTA upgrade mode. The quantum key management platform issues the symmetric key by "encrypting the symmetric key with a pre-set key". The aforementioned symmetric key is the upgrade package key, which ensures the security of the upgrade package key issuance process.

[0050] The quantum key management platform consists of four modules: key generation, key store, key distribution, and lifecycle management. Utilizing quantum key injection and distribution technology based on fundamental principles of quantum physics, it provides a novel key distribution method that no longer relies on mathematical computational complexity. Storing the quantum key in a secure encryption chip enables mobile terminals to possess "one-time pad" quantum security, protecting end-to-end communication security. Quantum keys effectively solve the problem of obtaining symmetric keys; after obtaining the key, each encryption device can use various algorithms to encrypt data.

[0051] (1) Key generation: This module is mainly responsible for generating quantum keys. In theory, the process of generating quantum keys is absolutely secure. The generated quantum keys are called upgrade package keys.

[0052] (2) Key store: This module stores the preset keys for the cloud OTA management platform and all vehicles.

[0053] (3) Key distribution: When it is necessary to distribute the upgrade package key, the quantum key management platform calls the preset key of the vehicle to be upgraded to encrypt the upgrade package key, and then distributes it to the cloud OTA management platform and the vehicle.

[0054] (4) Lifecycle management: mainly responsible for the backup and destruction of keys and the monitoring of the quantum key lifecycle.

[0055] This application embodiment can control the vehicle to enter OTA upgrade mode based on OTA upgrade information, obtain the software upgrade package according to the OTA upgrade mode, and issue the upgrade package key according to the preset key. This ensures that only key distribution occurs between the cloud platform and the vehicle, without issuing the upgrade package, reducing the pressure on the cloud and changing the current method of the cloud directly sending the upgrade package to the vehicle, eliminating the need for sending multiple upgrade packages. The software upgrade package is placed in the blockchain, requiring only one upload, and then the vehicle accesses the blockchain to obtain the upgrade package and perform the software upgrade.

[0056] Optionally, in one embodiment of this application, the process of issuing the upgrade package key according to a preset key includes: calling the vehicle's preset key; encrypting the upgrade package key according to the preset key to obtain an encrypted upgrade package key, and issuing the encrypted upgrade package key to the OTA cloud server and the vehicle.

[0057] It is understood that in this embodiment of the application, each vehicle and the OTA management platform are filled with a pre-set key at the factory, and the quantum key management platform has backups of the pre-set keys of the cloud OTA management platform and all vehicles.

[0058] In actual implementation, such as Figure 2As shown, in this embodiment of the application, when a vehicle needs a software upgrade, it submits identity authentication information to the blockchain. The quantum key management platform accesses the blockchain and calls a preset key to decrypt the vehicle's identity information. After confirming the identity, the quantum key management platform generates an upgrade package key. Then, the quantum key management platform calls the preset key of the vehicle that needs to be upgraded and the preset key of the cloud OTA management platform to encrypt the upgrade package key, and then sends it to the cloud OTA management platform and the vehicle to obtain the encrypted upgrade package key. The encrypted upgrade package key is then sent to the OTA cloud server and the vehicle.

[0059] This application embodiment can use a cloud-based OTA management platform to encrypt the software upgrade package with an upgrade package key, and upload the encrypted upgrade package to the blockchain, thereby further changing the current method of directly sending upgrade packages from the cloud to the vehicle, eliminating the need to send multiple upgrade packages.

[0060] Optionally, in one embodiment of this application, the process of issuing the upgrade package key based on the preset key further includes: calling the vehicle's preset key; decrypting the preset key to obtain the vehicle's identity information; verifying the identity information to obtain verified identity information, and issuing the verified identity information to the vehicle's upgrade package key.

[0061] It is understood that, in this embodiment of the application, after obtaining the encrypted upgrade package key, the vehicle end decrypts it using its own preset key to obtain the upgrade package key.

[0062] In actual implementation, this application embodiment can call the vehicle's preset key, decrypt the preset key to obtain the vehicle's identity information, verify the identity information, obtain the verified identity information, and send the verified identity information to the vehicle's upgrade package key. This further changes the current method of directly sending upgrade packages from the cloud to the vehicle. Instead of sending upgrade packages multiple times, the software upgrade package is placed in the blockchain. It only needs to be uploaded once, and then the vehicle accesses the blockchain to obtain the upgrade package and perform the software upgrade.

[0063] In step S103, the software upgrade package is encrypted using the upgrade package key to obtain the encrypted upgrade package. The encrypted upgrade package is then decrypted using the upgrade package key to obtain the plaintext upgrade package. The vehicle's software is then upgraded based on the plaintext upgrade package.

[0064] In actual implementation, the embodiments of this application can use the upgrade package key to encrypt the software upgrade package to obtain the encrypted upgrade package. The vehicle accesses the blockchain to download the upgrade package encrypted with the upgrade package key. The vehicle calls the upgrade package key to decrypt the upgrade package to obtain the plaintext of the upgrade package. Finally, the vehicle calls the upgrade program to upgrade the vehicle's software.

[0065] The vehicle OTA management module in this embodiment includes six functional modules: vehicle key management, service request, identity authentication, upgrade package acquisition, upgrade package restoration, and flashing upgrade.

[0066] (1) Vehicle-side key management: This module is mainly responsible for storing the vehicle-side preset key and upgrade package key, decrypting the upgrade package key, and decrypting the upgrade package.

[0067] (2) Business Request: When the vehicle's software needs to be upgraded, the vehicle first submits an upgrade request to the cloud OTA management platform.

[0068] (3) Identity authentication: After receiving the request, the cloud-based OTA management platform returns the identity authentication requirements to the vehicle.

[0069] (4) Upgrade package acquisition: The vehicle accesses the blockchain and downloads the upgrade package encrypted with the upgrade package key.

[0070] (5) Upgrade package restoration: Use the upgrade package key to decrypt the upgrade package and obtain the plaintext of the upgrade package.

[0071] (6) Flashing and upgrading: The vehicle terminal calls the upgrade program to upgrade the vehicle's software.

[0072] This application embodiment allows the vehicle to access the blockchain, download the encrypted upgrade package, and decrypt it using the upgrade package key to obtain the plaintext of the upgrade package. Then, the vehicle's software is upgraded, thereby ensuring that the OTA upgrade package data is traceable, the upgrade content is tamper-proof and transparent, and to a certain extent, avoiding unintended use of OTA to tamper with certain important information of the vehicle.

[0073] The encrypted OTA upgrade method for vehicles proposed in this application ensures that only key distribution occurs between the cloud platform and the vehicle, without sending upgrade packages. This reduces the pressure on the cloud and changes the current method of the cloud directly sending upgrade packages to the vehicle. It eliminates the need for sending multiple upgrade packages, and the OTA upgrade package data is traceable, with tamper-proof and transparent upgrade content. This, to a certain extent, prevents unintended tampering with important vehicle information via OTA. Therefore, it solves the problems in related technologies where the lack of consideration for upgrade package security leads to malicious tampering during transmission, or incomplete upgrade package structure during network transmission, making it impossible to verify the accuracy of the upgrade package.

[0074] Next, referring to the accompanying drawings, a vehicle OTA encryption upgrade device according to an embodiment of this application is described.

[0075] Figure 3 This is a schematic diagram of the structure of the vehicle OTA encryption upgrade device according to an embodiment of this application.

[0076] like Figure 3As shown, the vehicle OTA encryption upgrade device 10 includes: a receiving module 100, a control module 200, and an upgrade module 300.

[0077] Specifically, the receiving module 100 is used to receive the over-the-air (OTA) upgrade request sent by the OTA cloud server, determine the vehicle's identity authentication information based on the OTA upgrade request, and obtain the OTA upgrade information based on the identity authentication information.

[0078] The control module 200 is used to control the vehicle to enter the OTA upgrade mode according to the OTA upgrade information, obtain the software upgrade package according to the OTA upgrade mode, and issue the upgrade package key according to the preset key.

[0079] The upgrade module 300 is used to encrypt the software upgrade package using the upgrade package key to obtain the encrypted upgrade package, decrypt the encrypted upgrade package using the upgrade package key to obtain the plaintext upgrade package, and upgrade the vehicle's software based on the plaintext upgrade package.

[0080] Optionally, in one embodiment of this application, the vehicle OTA encryption upgrade device 10 further includes: a detection module, a judgment module, and an allow receiving module.

[0081] The detection module is used to detect the vehicle's status information before receiving the over-the-air (OTA) upgrade request sent by the OTA cloud server.

[0082] The judgment module is used to determine whether the vehicle's OTA meets the preset upgrade conditions based on the status information.

[0083] The receiving module is configured to allow receiving over-the-air (OTA) upgrade requests when the vehicle's OTA meets preset upgrade conditions.

[0084] Optionally, in one embodiment of this application, the receiving module 100 includes:

[0085] The confirmation unit is used to obtain the vehicle's identity authentication information based on at least one of the user registration information and identity authentication information, based on the OTA upgrade request.

[0086] Optionally, in one embodiment of this application, the control module 200 includes: a first calling unit and an encryption unit.

[0087] The first calling unit is used to call the vehicle's preset key.

[0088] The encryption unit is used to encrypt the upgrade package key according to the preset key to obtain the encrypted upgrade package key, and then send the encrypted upgrade package key to the OTA cloud server and the vehicle.

[0089] Optionally, in one embodiment of this application, the control module 200 further includes: a second calling unit, a decryption unit, and a verification unit.

[0090] The second calling unit is used to call the vehicle's preset key.

[0091] The decryption unit is used to decrypt the preset key to obtain the vehicle's identity information.

[0092] The verification unit is used to verify identity information, obtain the verified identity information, and send the verified identity information to the vehicle's upgrade package key.

[0093] It should be noted that the explanation of the above-described embodiment of the encrypted upgrade method for vehicle OTA also applies to the encrypted upgrade device for vehicle OTA in this embodiment, and will not be repeated here.

[0094] The encrypted OTA upgrade device for vehicles proposed in this application ensures that only key distribution occurs between the cloud platform and the vehicle, without sending upgrade packages. This reduces the pressure on the cloud and changes the current method of the cloud directly sending upgrade packages to the vehicle. It eliminates the need for sending multiple upgrade packages, and the OTA upgrade package data is traceable, with tamper-proof and transparent upgrade content. This, to a certain extent, prevents unintended tampering with important vehicle information via OTA. Therefore, it solves the problems in related technologies where the lack of consideration for upgrade package security leads to malicious tampering during transmission, or incomplete upgrade package structure during network transmission, making it impossible to verify the accuracy of the upgrade package.

[0095] Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of this application. The electronic device may include:

[0096] The memory 401, the processor 402, and the computer program stored on the memory 401 and capable of running on the processor 402.

[0097] When the processor 402 executes the program, it implements the vehicle OTA encrypted upgrade method provided in the above embodiments.

[0098] Furthermore, electronic devices also include:

[0099] Communication interface 403 is used for communication between memory 401 and processor 402.

[0100] The memory 401 is used to store computer programs that can run on the processor 402.

[0101] The memory 401 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0102] If the memory 401, processor 402, and communication interface 403 are implemented independently, then the communication interface 403, memory 401, and processor 402 can be interconnected via a bus to complete communication between them. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be divided into address buses, data buses, control buses, etc. For ease of representation, Figure 4 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0103] Optionally, in a specific implementation, if the memory 401, processor 402, and communication interface 403 are integrated on a single chip, then the memory 401, processor 402, and communication interface 403 can communicate with each other through an internal interface.

[0104] Processor 402 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of this application.

[0105] This embodiment also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described encrypted OTA upgrade method for vehicles.

[0106] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0107] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0108] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or N executable instructions for implementing custom logic functions or processes, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the functions involved, as should be understood by those skilled in the art to which embodiments of this application pertain.

[0109] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include: an electrical connection having one or more wires (electronic device), a portable computer disk drive (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Alternatively, the computer-readable medium may be paper or other suitable media on which the program can be printed, since the program can be obtained electronically by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in a computer memory.

[0110] It should be understood that the various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, the N steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0111] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0112] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0113] The storage medium mentioned above can be a read-only memory, a disk, or an optical disk, etc. Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of this application.

Claims

1. A method for encrypted over-the-air (OTA) upgrades for vehicles, characterized in that, Includes the following steps: The vehicle submits an upgrade request to the cloud-based OTA management platform to receive an over-the-air (OTA) upgrade request sent by the OTA cloud server. Based on the OTA upgrade request, the vehicle's identity authentication information is determined, and the OTA upgrade information is obtained based on the identity authentication information. Upon receiving a request, the cloud-based OTA server forwards the information to the quantum key management center. The vehicle then encrypts its own identity information using a pre-set key and uploads it to the blockchain. The quantum key management center accesses the blockchain to view the vehicle's identity authentication records. Specifically, based on the OTA upgrade request, the vehicle's identity authentication information is obtained according to at least one of the user registration information and identity verification information; wherein, before applying for the upgrade, the vehicle and the blockchain perform identity authentication, the blockchain is used for querying user registration and identity verification information, and the vehicle's identity authentication information is obtained based on the OTA upgrade request, according to the user registration information and the identity verification information; The vehicle is controlled to enter OTA upgrade mode according to the OTA upgrade information, and a software upgrade package is obtained according to the OTA upgrade mode. The upgrade package key is also issued according to the preset key. After confirming the identity, the quantum key management platform generates an upgrade package key. The quantum key management platform calls the preset key of the vehicle to be upgraded and the preset key of the cloud OTA management platform to encrypt the upgrade package key and send it to the cloud OTA management platform and the vehicle. The upgrade package is encrypted using an upgrade package key on a cloud-based OTA management platform, and the encrypted upgrade package is then uploaded to the blockchain. The software upgrade package is encrypted using the upgrade package key to obtain an encrypted upgrade package. The encrypted upgrade package is then decrypted using the upgrade package key to obtain the plaintext upgrade package. The vehicle's software is then upgraded based on the plaintext upgrade package. Specifically, the vehicle accesses the blockchain and downloads the upgrade package encrypted with the upgrade package key. The vehicle then uses the upgrade package key to decrypt the upgrade package and obtain the plaintext of the upgrade package.

2. The method according to claim 1, characterized in that, Before receiving the OTA (Over-The-Air) upgrade request sent by the OTA cloud server, the process also includes: Detect the status information of the vehicle; Based on the status information, determine whether the vehicle OTA meets the preset upgrade conditions; If the vehicle OTA meets the preset upgrade conditions, it is allowed to receive OTA upgrade requests via over-the-air (OTA) technology.

3. The method according to claim 1, characterized in that, The step of issuing the upgrade package key according to the preset key includes: Call the vehicle's preset key; The upgrade package key is encrypted using the preset key to obtain the encrypted upgrade package key, and the encrypted upgrade package key is then sent to the OTA cloud server and the vehicle.

4. The method according to claim 1, characterized in that, The step of issuing the upgrade package key according to the preset key also includes: Call the vehicle's preset key; The vehicle's identity information is obtained by decrypting the preset key; The identity information is verified to obtain the verified identity information, and the verified identity information is sent to the upgrade package key of the vehicle.

5. A vehicle OTA (Over-The-Air) encryption upgrade device, characterized in that, The apparatus is used to implement the vehicle OTA encrypted upgrade method as described in any one of claims 1-4, the apparatus comprising: The receiving module is used to receive the Over-the-Air (OTA) upgrade request sent by the OTA cloud server, determine the vehicle's identity authentication information based on the OTA upgrade request, and obtain OTA upgrade information based on the identity authentication information. The control module is used to control the vehicle to enter the OTA upgrade mode according to the OTA upgrade information, obtain the software upgrade package according to the OTA upgrade mode, and issue the upgrade package key according to the preset key. The upgrade module is used to encrypt the software upgrade package using the upgrade package key to obtain an encrypted upgrade package, decrypt the encrypted upgrade package using the upgrade package key to obtain the upgrade package plaintext, and upgrade the vehicle's software according to the upgrade package plaintext. The receiving module includes: The confirmation unit is used to obtain the vehicle's identity authentication information based on the OTA upgrade request and at least one of the user registration information and identity authentication information.

6. The apparatus according to claim 5, characterized in that, Also includes: The detection module is used to detect the vehicle's status information before receiving an Over-the-Air (OTA) upgrade request sent by the OTA cloud server; The judgment module is used to determine whether the vehicle OTA meets the preset upgrade conditions based on the status information; The receiving module is configured to allow receiving OTA upgrade requests via over-the-air (OTA) technology when the vehicle OTA meets the preset upgrade conditions.

7. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, the processor executing the program to implement the encrypted upgrade method for vehicle OTA as described in any one of claims 1-4.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that, The program is executed by the processor to implement the encrypted upgrade method for vehicle OTA as described in any one of claims 1-4.

Images