Method, device and equipment for transmitting upgrade package and storage medium

Abstract

The application discloses a transmission method, device and equipment of an upgrade package and a storage medium, relates to the technical field of data security, and discloses a transmission method of an upgrade package, which comprises the following steps: performing encryption signature on an upgrade package source file to obtain an encrypted upgrade package file; synchronizing the encrypted upgrade package file to a remote cloud storage bucket; when a decryption calling request sent through a secure private line is received, performing decryption verification on the encrypted upgrade package file in the remote cloud storage bucket to obtain a remote upgrade package file; performing encryption signature on the remote upgrade package file to generate a target upgrade package file and sending the target upgrade package file to a vehicle terminal to be upgraded. Through the above method, when the upgrade package is transmitted between different regions or countries, the security and confidentiality of the data are greatly enhanced, and the consistency and integrity of the data are also ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data security, and particularly relates to a transmission method and device of an upgrade package, equipment and a storage medium. BACKGROUND

[0002] At present, basic encryption services are provided for the transmission of upgrade packages, but there is no optimization for specific key management systems, and there is also a lack of efficient data synchronization and verification mechanisms, which may result in the security and integrity of data not being fully guaranteed in the process of cross-country transmission of upgrade packages.

[0003] The above content is only used to assist in understanding the technical solutions of the present application and does not represent the acknowledgement of the above content as prior art. SUMMARY

[0004] The main purpose of the present application is to provide a transmission method, device, equipment and storage medium of an upgrade package, aiming to solve the technical problem that the security and integrity of data cannot be fully guaranteed in the process of cross-country transmission of upgrade packages in the prior art.

[0005] To achieve the above purpose, the present application provides a transmission method of an upgrade package, which comprises:

[0006] encrypting and signing an upgrade package source file to obtain an encrypted upgrade package file;

[0007] synchronizing the encrypted upgrade package file to a remote cloud storage bucket;

[0008] decrypting and verifying the encrypted upgrade package file in the remote cloud storage bucket to obtain a remote upgrade package file when a decryption call request sent through a secure private line is received;

[0009] encrypting and signing the remote upgrade package file to generate a target upgrade package file and sending the target upgrade package file to a vehicle to be upgraded.

[0010] In an embodiment, the encrypting and signing of the upgrade package source file to obtain the encrypted upgrade package file comprises:

[0011] generating a first encryption key of the upgrade package source file when a transmission instruction of the upgrade package source file is received;

[0012] encrypting the upgrade package source file according to the first encryption key to obtain a first upgrade package file;

[0013] signing the first upgrade package file according to a first signature key to obtain the encrypted upgrade package file.

[0014] In an embodiment, the signing of the first upgrade package file according to the signature key to obtain the encrypted upgrade package file comprises:

[0015] performing hash value calculation on the first upgrade package file to determine a file hash value of the first upgrade package file;

[0016] encrypting the file hash value of the first upgrade package file according to a first signature key to obtain file signature information;

[0017] obtaining an encrypted upgrade package according to the file signature information and the first upgrade package file.

[0018] In an embodiment, the synchronizing the encrypted upgrade package file to the off-site cloud storage bucket comprises:

[0019] sending the encrypted upgrade package file to a target cloud storage bucket, and synchronizing the encrypted upgrade package file to the off-site cloud storage bucket through the target cloud storage bucket.

[0020] In an embodiment, the decrypting and verifying the encrypted upgrade package file in the off-site cloud storage bucket upon receiving a decryption call request sent through a secure private line to obtain an off-site upgrade package file comprises:

[0021] verifying the decryption call request upon receiving the decryption call request sent through the secure private line, and decrypting the encrypted upgrade package file in the off-site cloud storage bucket to obtain a second upgrade package file and a decryption signature when the verification is passed;

[0022] performing hash value calculation on the second upgrade package file to determine a file hash value of the second upgrade package file;

[0023] performing file integrity verification according to the file hash value of the second upgrade package file and the decryption signature;

[0024] obtaining an off-site upgrade package file according to the second upgrade package file when the file integrity verification is passed.

[0025] In an embodiment, the encrypting and signing the off-site upgrade package file to generate a target upgrade package file and sending the target upgrade package file to a vehicle to be upgraded comprises:

[0026] encrypting the off-site upgrade package file according to a second encryption key to obtain a third upgrade package file;

[0027] signing the third upgrade package file according to a second signature key to obtain a target upgrade package;

[0028] sending the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded performs software upgrade according to the target upgrade package file.

[0029] In an embodiment, the sending the target upgrade package file to the vehicle to be upgraded comprises:

[0030] The sending the target upgrade package file to the vehicle to be upgraded comprises: sending the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded decrypts the target upgrade package file according to a target decryption key to obtain a fourth upgrade package file, and authenticates the fourth upgrade package file according to a target vehicle certificate, and when the authentication is passed, the vehicle to be upgraded is upgraded according to the fourth upgrade package file.

[0031] In addition, to achieve the above-mentioned purpose, the application further provides an upgrade package transmission device, which comprises: an encryption module configured to encrypt and sign an upgrade package source file to obtain an encrypted upgrade package file;

[0032] A synchronization module is configured to synchronize the encrypted upgrade package file to an off-site cloud storage bucket.

[0033] A decryption module is configured to, when receiving a decryption call request sent through a secure private line, decrypt and verify the encrypted upgrade package file in the off-site cloud storage bucket to obtain an off-site upgrade package file.

[0034] The encryption module is further configured to encrypt and sign the off-site upgrade package file to generate a target upgrade package file and send the target upgrade package file to a vehicle to be upgraded.

[0035] In addition, to achieve the above-mentioned purpose, the application further provides an upgrade package transmission device, which comprises: a memory, a processor, and a computer program stored on the memory and executable on the processor, the computer program being configured to implement the steps of the upgrade package transmission method as described above.

[0036] In addition, to achieve the above-mentioned purpose, the application further provides a storage medium, which is a computer readable storage medium, and the storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the upgrade package transmission method as described above.

[0037] The application provides a transmission method of an upgrade package. The application obtains an encrypted upgrade package file by encrypting and signing an upgrade package source file; synchronizes the encrypted upgrade package file to a remote cloud storage bucket; when a decryption calling request sent through a secure private line is received, decrypts and verifies the encrypted upgrade package file in the remote cloud storage bucket to obtain a remote upgrade package file; encrypts and signs the remote upgrade package file to generate a target upgrade package file and sends the target upgrade package file to a vehicle to be upgraded. Through the above method, the encrypted upgrade package file obtained by encrypting and signing the upgrade package source file is synchronized to the remote cloud storage bucket, and when the decryption calling request is received, the encrypted upgrade package file is decrypted and verified through the secure private line, and the decrypted remote upgrade package file is encrypted and signed again and transmitted to the vehicle to be upgraded, so that when the upgrade package is transmitted between different regions or countries, the security and confidentiality of the data are greatly enhanced, and the consistency and integrity of the data are also ensured. BRIEF DESCRIPTION OF DRAWINGS

[0038] The accompanying drawings, which are incorporated herein and form part of the specification, illustrate embodiments consistent with the present application and, together with the description, further serve to explain the principles of the application.

[0039] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the accompanying drawings needed to be used in the embodiments or prior art description will be briefly introduced. Obviously, those skilled in the art can obtain other drawings according to these drawings without any creative effort.

[0040] Figure 1 The flowchart provided by the transmission method of the upgrade package in Embodiment One of the present application;

[0041] Figure 2 The flowchart provided by the transmission method of the upgrade package in Embodiment Two of the present application;

[0042] Figure 3 The module structure diagram of the transmission device of the upgrade package in the embodiment of the present application;

[0043] Figure 4 The device structure diagram of the hardware running environment involved in the transmission method of the upgrade package in the embodiment of the present application.

[0044] The purpose implementation, functional features and advantages of the present application will be further described with reference to the embodiments and the accompanying drawings. DETAILED DESCRIPTION

[0045] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application, and are not used to limit the present application.

[0046] For better understanding of the technical solutions of the present application, the following will be described in detail in combination with the drawings of the specification and specific embodiments.

[0047] The main solution of the embodiment of the present application is: encrypting and signing the upgrade package source file to obtain an encrypted upgrade package file; synchronizing the encrypted upgrade package file to an off-site cloud storage bucket; when receiving a decryption call request sent through a secure private line, decrypting and verifying the encrypted upgrade package file in the off-site cloud storage bucket to obtain an off-site upgrade package file; encrypting and signing the off-site upgrade package file to generate a target upgrade package file and sending the target upgrade package file to the vehicle to be upgraded.

[0048] Currently, basic encryption services are provided for upgrade package transmission, but there is no optimization for specific key management systems, and there is also a lack of efficient data synchronization and verification mechanisms, which may result in the security and integrity of data during cross-country transmission cannot be fully guaranteed.

[0049] The present application synchronizes the encrypted upgrade package file obtained by encrypting and signing the upgrade package source file to an off-site cloud storage bucket, and when receiving a decryption call request, decrypts and verifies the encrypted upgrade package file through a secure private line, and then encrypts and signs the decrypted off-site upgrade package file again and transmits it to the vehicle to be upgraded. When transmitting the upgrade package between different regions or countries, the security and confidentiality of the data are greatly enhanced, and the consistency and integrity of the data are also guaranteed.

[0050] It should be noted that the execution subject of the present embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, an upgrade package transmission device, etc. The present embodiment and the following embodiments will be described below taking the upgrade package transmission device as an example.

[0051] Based on this, the present embodiment provides an upgrade package transmission method, which is described in detail with reference to Figure 1 , Figure 1 The flowchart of the first embodiment of the upgrade package transmission method of the present application is shown in the figure.

[0052] In the present embodiment, the method comprises steps S10-S40:

[0053] Step S10, encrypting and signing the upgrade package source file to obtain an encrypted upgrade package file;

[0054] It should be noted that during the transmission of data from China to foreign countries, it is necessary to ensure that the encryption and signature of the data remain consistent and secure at each stage. This is crucial because data is vulnerable to interception and tampering in international networks. In this embodiment, the source file is encrypted and signed using the PKI (Public Key Infrastructure) / KMS (Key Management System) system, ensuring the security and integrity of the transmitted data. When data is synchronized between cloud storage services in different countries, it is necessary to ensure the security of encrypted files and proper access control. In this embodiment, encrypted data is stored in cloud S3 buckets and data synchronization services are used to manage data synchronization between China and abroad, effectively ensuring the security and privacy of data. After receiving encrypted data in foreign countries, it must be effectively decrypted and signed to confirm the integrity and consistency of the data. This embodiment designs a process of calling the domestic PKI system for decryption and signature through a dedicated line, which not only enhances security, but also ensures the accuracy of data processing. After the data packet is made into an upgrade package through the OTA (Over-the-Air Technology) platform, it needs to be encrypted again and signed through the vehicle certificate to ensure the integrity and consistency of the software package. This embodiment includes the steps of vehicle decryption and signature according to the built-in SDK, and this process ensures that every step from the domestic technical center to the overseas vehicle is safe and reliable. Through this embodiment, not only the security of cross-border data transmission is improved, but also the consistency and reliability of data in the global range are guaranteed, which is crucial for the expansion of international business and technical compliance. At the same time, it can meet the strict international safety standards and provide safe and reliable data processing services for customers.

[0055] It can be understood that when receiving the instruction to transmit the upgrade package source file to foreign countries or other regions, the upgrade package source file is encrypted through the PKI / KMS system, and each upgrade package source is assigned a unique encryption key, which is managed by the KMS to ensure the security and access control of the key. After encryption is complete, the PKI / KMS system will digitally sign the encrypted upgrade package source file. This step uses PKI technology to generate a signature to verify the integrity of the file and the legality of the source, and the resulting encrypted upgrade package file contains signature information and encrypted upgrade package source files.

[0056] Step S20, synchronizing the encrypted upgrade package file to the off-site cloud storage bucket;

[0057] It should be noted that the off-site cloud storage bucket can be a foreign cloud s3 storage bucket or a cloud s3 storage bucket in other regions. In the present embodiment, the foreign cloud s3 storage bucket or the cloud s3 storage bucket in other regions is the off-site cloud storage bucket. The cloud s3 storage bucket is a basic storage unit in the storage service provided by Amazon Web Services, and has the characteristics of serverless architecture, high persistence and high availability, scalability, multi-level storage options, security, etc.

[0058] It can be understood that after obtaining the encrypted upgrade package file, the encrypted upgrade package file is synchronized to the off-site remote storage bucket through a secure data synchronization service.

[0059] In a possible implementation, the step S20 includes: sending the encrypted upgrade package file to a target cloud storage bucket, and synchronizing the encrypted upgrade package file to an off-site cloud storage bucket through the target cloud storage bucket.

[0060] It should be noted that the target cloud storage bucket can be a domestic cloud s3 storage bucket, or a cloud s3 storage bucket corresponding to a region different from the region of the off-site cloud storage bucket. After the upgrade package source file is encrypted and signed, the encrypted upgrade package file is uploaded to the target cloud storage bucket, and the encrypted upgrade package file is synchronized to the off-site cloud storage bucket through a secure domestic and foreign / region cloud data synchronization service. This data synchronization process uses end-to-end encryption technology to ensure the security of data in the transmission process. In the present embodiment, the target cloud storage bucket and the off-site cloud storage bucket are both configured with advanced security policies to prevent unauthorized access.

[0061] Step S30, when receiving the decryption call request sent through the secure private line, decrypting and verifying the encrypted upgrade package file in the off-site cloud storage bucket to obtain an off-site upgrade package file;

[0062] It should be noted that when the encrypted upgrade package file arrives at the off-site cloud storage bucket, a decryption call request can be issued to call the domestic PKI / KMS system through a secure private line to decrypt and verify the signature of the file in the off-site cloud storage bucket. This process ensures that even if the data is transmitted to a foreign country, it can still be securely processed through domestic security infrastructure. The decrypted data will be subjected to integrity and consistency checks to verify that the data has not been tampered with during transmission. In this embodiment, the upgrade package file obtained after decrypting and verifying the encrypted upgrade package file is the off-site upgrade package file. In this embodiment, in order to ensure high security and low latency during data transmission, a dedicated network connection (such as MPLS VPN, SD-WAN, etc.) is usually used. This connection is independent of the public Internet and provides a higher level of security and bandwidth guarantee to ensure the confidentiality and anti-interference capability of data transmission between domestic and foreign countries. The above-mentioned private line is a secure private line.

[0063] In a possible implementation, step S30 can further include steps A11-A14.

[0064] Step A11, upon receiving the decryption call request sent through the secure private line, verifying the decryption call request, and decrypting the encrypted upgrade package file in the off-site cloud storage bucket to obtain a second upgrade package file and a decryption signature when the verification is passed.

[0065] It should be noted that when the foreign server or application initiates a request to the domestic PKI / KMS system through a private line, the PKI / KMS system first verifies the identity of the decryption call request. This can include using a previously shared key, certificate, or other authentication mechanism to ensure that only authorized entities can call the decryption service. When the identity verification is passed, the foreign end requests the decryption key from the domestic PKI / KMS system, and the PKI / KMS system decrypts the encrypted upgrade package file stored in the off-site cloud storage bucket to obtain the signature information contained in the encrypted upgrade file package and the encrypted upgrade package source file. In this embodiment, the signature information contained in the decrypted encrypted upgrade file package is the decryption signature, and the file obtained after decrypting the encrypted upgrade package source file is the second upgrade package file.

[0066] Step A12, calculating the hash value of the second upgrade package file to determine the file hash value of the second upgrade package file.

[0067] Step A13, performing file integrity verification based on the file hash value of the second upgrade package file and the decryption signature.

[0068] Step A14, obtaining an off-site upgrade package file based on the second upgrade package file when the file integrity verification is passed.

[0069] It should be noted that after decryption, the hash value of the second upgrade package file is recalculated to obtain the file hash value of the second upgrade package file, and the file hash value of the second upgrade package file is compared with the hash value of the upgrade package source file contained in the decryption signature to confirm that the data is not tampered and the source is reliable, indicating that the file integrity test is passed, at this time, it is indicated that the second upgrade package file passes the test, indicating that the data remains in the original state and is not illegally tampered with in the transmission process, and the foreign end can use the data for subsequent processing or operation with confidence. In the embodiment, after the second upgrade package passes the test, the second upgrade package file is taken as the off-site upgrade package file.

[0070] In the embodiment, when receiving the decryption call request sent through the secure private line, the decryption call request is verified, the encrypted upgrade package file in the off-site cloud storage bucket is decrypted to obtain the second upgrade package file and the decryption signature when the verification is passed, the hash value of the second upgrade package file is calculated to determine the file hash value of the second upgrade package file, the file integrity test is performed according to the file hash value of the second upgrade package file and the decryption signature, and the off-site upgrade package file is obtained according to the second upgrade package file when the file integrity test is passed. Through the above-mentioned manner, the integrity and consistency test of the data is guaranteed to verify that the data is not tampered with in the transmission process.

[0071] Step S40, the off-site upgrade package file is encrypted and signed to generate a target upgrade package file and send the target upgrade package file to the vehicle to be upgraded.

[0072] It should be noted that after obtaining the off-site upgrade package file, the PKI / KMS system encrypts the upgrade package generated from the OTA platform, and the encryption key is also managed by the KMS to ensure its security. The encrypted software package will be further signed to ensure that the receiver vehicle can verify the identity of the sender using the vehicle certificate. In the embodiment, the off-site upgrade package file after encryption and signature is the target upgrade package file, and the target upgrade package file is sent to the vehicle to be upgraded.

[0073] In a feasible implementation, step S40 can further include steps B11-B13:

[0074] Step B11, the off-site upgrade package file is encrypted according to the second encryption key to obtain a third upgrade package file;

[0075] Step B12, the third upgrade package file is signed according to the second signature key to obtain a target upgrade package;

[0076] Step B13, sending the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded upgrades software according to the target upgrade package file.

[0077] It should be noted that the PKI / KMS system generates a one-time symmetric encryption key, which is used to encrypt the off-site upgrade package, ensuring that the data cannot be read if intercepted during transmission. Then, the symmetric key is encrypted using the private key of the publisher, forming ciphertext. Only the receiver with the corresponding public key can decrypt the symmetric key and then decrypt the upgrade package. In this embodiment, the symmetric encryption key is the second encryption key, and the encrypted off-site upgrade package file is the third upgrade package file.

[0078] It can be understood that the third upgrade package file is digitally signed using the software publisher's private key, and this signing process ensures that the receiver can verify the integrity and origin of the data. In this embodiment, the file obtained after digitally signing the third upgrade package file is the target upgrade package file.

[0079] In this embodiment, the off-site upgrade package file is encrypted according to the second encryption key to obtain the third upgrade package file, and the third upgrade package file is signed according to the second signature key to obtain the target upgrade package. The target upgrade package file is sent to the vehicle to be upgraded, so that the vehicle to be upgraded upgrades software according to the target upgrade package file. Through the above method, the security of data transmission can be ensured.

[0080] In a feasible implementation, step B15 can further include: sending the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded decrypts the target upgrade package file according to the target decryption key to obtain a fourth upgrade package file, and performs identity verification on the fourth upgrade package file according to the target vehicle certificate, and upgrades software according to the fourth upgrade package file when the identity verification is passed.

[0081] It should be noted that after the vehicle to be upgraded receives the target upgrade package file, the SDK (Software Development Kit) of the vehicle to be upgraded verifies the digital signature using the pre-set vehicle certificate to confirm the legality of the software source and the integrity of the data. The vehicle to be upgraded decrypts the symmetric key ciphertext encrypted by the software publisher's public key using its own private key. The target upgrade package file is decrypted using the decrypted symmetric key to obtain a fourth upgrade package file. After decryption, the vehicle to be upgraded also performs a hash check on the fourth upgrade package file to ensure that the content has not been tampered with. After the identity verification and integrity verification are passed, the vehicle to be upgraded upgrades software using the fourth upgrade package. In this embodiment, the private key of the vehicle to be upgraded is the target decryption key.

[0082] The embodiment provides a transmission method of an upgrade package. The embodiment obtains an encrypted upgrade package file by encrypting and signing an upgrade package source file; synchronizes the encrypted upgrade package file to a remote cloud storage bucket; when a decryption calling request sent through a secure private line is received, performs decryption verification on the encrypted upgrade package file in the remote cloud storage bucket to obtain a remote upgrade package file; encrypts and signs the remote upgrade package file to generate a target upgrade package file and sends the target upgrade package file to a vehicle to be upgraded. In the foregoing manner, the encrypted upgrade package file obtained by encrypting and signing the upgrade package source file is synchronized to the remote cloud storage bucket, and when the decryption calling request is received, the encrypted upgrade package file is decrypted and verified through the secure private line, and the decrypted remote upgrade package file is encrypted and signed again and transmitted to the vehicle to be upgraded, so that when the upgrade package is transmitted between different regions or countries, the data security and confidentiality are greatly enhanced, and the data consistency and integrity are also ensured.

[0083] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as the above-mentioned first embodiment can be referred to the above introduction, and will not be described in detail. On this basis, please refer to Figure 2 , in step S10, the transmission method of the upgrade package further includes steps S11-S13:

[0084] Step S11, when a transmission instruction of the upgrade package source file is received, a first encryption key of the upgrade package source file is generated;

[0085] It should be noted that when the PKI / KMS system receives the transmission instruction of the upgrade package source file, a unique symmetric encryption key will be automatically generated according to the request. This key is only used for encrypting and decrypting the specific file, which ensures the confidentiality of the data. In the present embodiment, the generated symmetric encryption key is the first encryption key.

[0086] It can be understood that the generated first encryption key will be securely stored in the KMS. The KMS manages the life cycle of the key through strict access control policies and audit logs to ensure that the key is not accessed by unauthorized users. When a file needs to be encrypted or decrypted, the KMS will securely distribute the first encryption key to authorized users or services. This usually involves re-encapsulation of the encryption key, which is encrypted using the recipient's public key to ensure that only the recipient with the private key can decrypt and obtain the actual encryption file key.

[0087] Step S12, encrypting the upgrade package source file according to the first encryption key to obtain a first upgrade package file;

[0088] It should be noted that the first encryption key is used to encrypt the upgrade package source file, and this process ensures the confidentiality of the file during transmission and storage. Even if the data is intercepted, the original content cannot be read without the corresponding key. In this embodiment, the encrypted upgrade package source file is the first upgrade package file.

[0089] At step S13, the first upgrade package file is signed according to the first signature key, and an encrypted upgrade package file is obtained.

[0090] It should be noted that after the file is encrypted, the file is digitally signed using a private key in the PKI. The private key belongs to the software publisher and must be properly maintained. The private key is used to create a signature to ensure the uniqueness and unforgeability of the signature. In this embodiment, the private key is the first signature key, and the first upgrade package file after digital signature is the encrypted upgrade package file.

[0091] In a possible implementation, in step S13, the transmission method of the upgrade package further includes steps C11-C13.

[0092] At step C11, the file hash value of the first upgrade package file is calculated to determine the file hash value of the first upgrade package file.

[0093] At step C12, the file hash value of the first upgrade package file is encrypted according to the first signature key to obtain file signature information.

[0094] At step C13, the encrypted upgrade package is obtained according to the file signature information and the first upgrade package file.

[0095] It should be noted that in the signature process of the first upgrade package, the file hash value of the first upgrade package file is calculated, and then the file hash value of the first upgrade package file is encrypted using the first signature key to form file signature information. The encrypted upgrade package file is obtained by the file signature information and the first upgrade package file. If the hash values match in the subsequent process, it indicates that the file has not been tampered with, and it is confirmed that the file comes from an entity holding the corresponding private key, ensuring the integrity of the file and the legality of the source.

[0096] In this embodiment, the file hash value of the first upgrade package file is determined by calculating the hash value of the first upgrade package file. The file hash value of the first upgrade package file is encrypted according to the first signature key to obtain file signature information. The encrypted upgrade package is obtained according to the file signature information and the first upgrade package file. Through the above method, the integrity, legality and security of the file are ensured.

[0097] The above are only two possible implementations of step S13 provided by the embodiment, and the embodiment does not specifically limit the specific implementation of step S13.

[0098] In the embodiment, when a transmission instruction for the upgrade package source file is received, a first encryption key of the upgrade package source file is generated, the upgrade package source file is encrypted according to the first encryption key to obtain a first upgrade package file, and the first upgrade package file is signed according to a first signature key to obtain an encrypted upgrade package file. In this way, the integrity, legality of the source, and security of the file are ensured.

[0099] For example, to facilitate understanding of the implementation process of the upgrade package transmission method obtained after the above embodiment one, specifically:

[0100] The upgrade package transmission method of the embodiment mainly includes the following processes: 1. Data encryption and signature process: 1. Encryption and signature of source files: In the domestic part, the PKI / KMS system is used to encrypt the source files. Each file is assigned a unique encryption key, and these keys are managed by KMS to ensure the security and access control of the keys. After encryption is completed, the system will digitally sign the file. This step uses PKI technology to generate a signature to verify the integrity of the file and the legality of the source. 2. Cloud storage and data synchronization: The encrypted and signed files are uploaded to the domestic cloud S3 storage bucket. These storage buckets are configured with advanced security policies to prevent unauthorized access. Through secure domestic and foreign cloud data synchronization services, these encrypted files are synchronized to the foreign S3 storage bucket. This data synchronization process uses end-to-end encryption technology to ensure the security of the data during transmission. 2. Data decryption and signature verification process: 1. Foreign decryption and signature verification: When the encrypted file reaches the foreign S3 storage bucket, the domestic PKI system is called through a dedicated line to decrypt and verify the signature of the file. This process ensures that even if the data is transmitted to a foreign country, it can still be safely processed through the domestic security infrastructure. The decrypted data will be subjected to integrity and consistency checks to verify that the data has not been tampered with during transmission. 3. Software package encryption and distribution process: 1. Encryption and signature of OTA upgrade package: The PKI / KMS system is used to encrypt the upgrade package generated from the OTA platform. Similarly, the encryption key is securely managed by KMS to ensure its security. The encrypted software package will be further signed using the vehicle-side certificate to ensure that the receiving vehicle can verify the identity of the sender. 2. Vehicle-side decryption and signature verification: After receiving the upgrade package, the vehicle-side device will use the built-in SDK to decrypt and verify the signature of the software package. This step ensures that the upgrade package maintains its integrity and consistency during the process from the domestic technical center to the overseas vehicle. Through the vehicle-side signature verification process, the source and integrity of the upgrade package can be further confirmed, ensuring the security of the upgrade process.

[0101] The method of the embodiment brings the following significant benefits through a series of comprehensive encryption, data synchronization and security verification measures: 1. Enhanced data security and confidentiality: advanced encryption technology application: by using the PKI / KMS system for data encryption and signature processing, the application can ensure that all transmitted data is in an encrypted state during storage and synchronization, greatly enhancing the confidentiality of the data. Even if the data is intercepted during transmission, without the corresponding decryption key, the data content cannot be read, thereby effectively preventing data leakage. Dynamic key management: using KMS for key management not only improves security, but also increases flexibility and controllability of operations. The key rotation and instant revocation functions provided by KMS make the data protection mechanism more rigorous and have higher adaptability to various security threats. 2. Ensure data consistency and integrity: whole-process data integrity verification: every step of operation from the source to the destination is accompanied by strict signature verification process, ensuring the consistency and integrity of data during transmission and processing. By synchronizing encrypted files between domestic and foreign S3 buckets and decrypting and verifying signatures at the target location, it can be ensured that the data has not been tampered with in the entire transmission link. Structured data processing flow: this technical solution provides a reliable operation framework for cross-border data transmission through standardized data encryption and decryption processes. This structured processing not only improves data processing efficiency, but also reduces security risks caused by improper operation. 3. Compliance of cross-border data transmission: compliance with international data transmission regulations: with the increasing strictness of data protection regulations, multinational companies face the challenge of safely and legally handling data worldwide. The embodiment helps enterprises comply with international data protection regulations including GDPR through encrypted and compliant data processing flows, avoiding legal risks and economic losses caused by data leakage or improper handling. 4. Improve business continuity and flexibility: support multiple business scenarios: whether it is cloud data storage, OTA software upgrade, or other data transmission scenarios that require high security, the method of the embodiment can provide strong support. The flexibility and adaptability of this technology enable enterprises to quickly respond to market changes and support new business needs. Reduce operation and maintenance costs: through integrated encryption and key management solutions, the enterprise's operation and maintenance burden in data security is reduced. Automated data processing flow reduces the need for manual operation, reduces the risk of security incidents caused by human error, and also reduces related operating costs.

[0102] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the transmission method of the upgrade package of the present application. Based on this technical concept, more forms of simple transformation are within the protection scope of the present application.

[0103] The application also provides a transmission device for an upgrade package, please refer toFigure 3 The transmission device of the upgrade package comprises:

[0104] An encryption module 10 is configured to encrypt and sign the upgrade package source file to obtain an encrypted upgrade package file.

[0105] A synchronization module 20 is configured to synchronize the encrypted upgrade package file to a remote cloud storage bucket.

[0106] A decryption module 30 is configured to, when receiving a decryption call request sent through a secure private line, decrypt and verify the encrypted upgrade package file in the remote cloud storage bucket to obtain a remote upgrade package file.

[0107] The encryption module 10 is further configured to encrypt and sign the remote upgrade package file, generate a target upgrade package file, and send the target upgrade package file to a vehicle to be upgraded.

[0108] Optionally, the encryption module 10 is further configured to:

[0109] When receiving a transmission instruction of the upgrade package source file, generate a first encryption key of the upgrade package source file, encrypt the upgrade package source file according to the first encryption key to obtain a first upgrade package file, and sign the first upgrade package file according to a first signature key to obtain an encrypted upgrade package file.

[0110] Optionally, the encryption module 10 is further configured to:

[0111] Calculate a hash value of the first upgrade package file to determine a file hash value of the first upgrade package file, encrypt the file hash value of the first upgrade package file according to a first signature key to obtain file signature information, and obtain an encrypted upgrade package according to the file signature information and the first upgrade package file.

[0112] Optionally, the synchronization module 20 is further configured to:

[0113] Send the encrypted upgrade package file to a target cloud storage bucket, and synchronize the encrypted upgrade package file to a remote cloud storage bucket through the target cloud storage bucket.

[0114] Optionally, the decryption module 30 is further configured to:

[0115] When receiving the decryption call request sent through the secure private line, the decryption call request is verified, and when the verification is passed, the encrypted upgrade package file in the off-site cloud storage bucket is decrypted to obtain a second upgrade package file and a decryption signature; the second upgrade package file is subjected to hash value calculation to determine the file hash value of the second upgrade package file; file integrity verification is performed according to the file hash value of the second upgrade package file and the decryption signature; when the file integrity verification is passed, an off-site upgrade package file is obtained according to the second upgrade package file.

[0116] Optionally, the encryption module 10 is further configured to:

[0117] encrypt the off-site upgrade package file according to a second encryption key to obtain a third upgrade package file; sign the third upgrade package file according to a second signature key to obtain a target upgrade package; and send the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded performs software upgrading according to the target upgrade package file.

[0118] Optionally, the encryption module 10 is further configured to:

[0119] send the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded decrypts the target upgrade package file according to a target decryption key to obtain a fourth upgrade package file, and performs identity verification on the fourth upgrade package file according to a target vehicle certificate, and when the identity verification is passed, performs software upgrading according to the fourth upgrade package file.

[0120] The transmission device of the upgrade package provided in the application adopts the transmission method of the upgrade package in the above-mentioned embodiments, and can solve the technical problem that the security and integrity of data cannot be fully guaranteed in the cross-country transmission of the upgrade package in the prior art. Compared with the prior art, the beneficial effects of the transmission device of the upgrade package provided in the application are the same as those of the transmission method of the upgrade package provided in the above-mentioned embodiments, and other technical features in the transmission device of the upgrade package are the same as those disclosed in the above-mentioned embodiments, which will not be repeated here.

[0121] The application provides an upgrade package transmission device, which comprises at least one processor and a memory in communication connection with the at least one processor; the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the transmission method of the upgrade package in Embodiment I.

[0122] The following refers to Figure 4The diagram illustrates a structural schematic of a transmission device suitable for implementing the upgrade package in the embodiments of this application. The transmission device for the upgrade package in the embodiments of this application may include, but is not limited to, mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Description), PMPs (Portable Media Players), in-vehicle terminals (e.g., in-vehicle navigation terminals), and fixed terminals such as digital TVs and desktop computers. Figure 4 The transmission device for the upgrade package shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of this application.

[0123] like Figure 4 As shown, the upgrade package transmission device may include a processing unit 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage device 1003 into a random access memory (RAM) 1004. The RAM 1004 also stores various programs and data required for the operation of the upgrade package transmission device. The processing unit 1001, ROM 1002, and RAM 1004 are interconnected via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to the I / O interface 1006: input devices 1007 including, for example, a touchscreen, touchpad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage devices 1003 including, for example, magnetic tape, hard disk, etc.; and communication devices 1009. Communication device 1009 allows the transmission device of the upgrade package to communicate wirelessly or wiredly with other devices to exchange data. Although the figures show transmission devices for upgrade packages with various systems, it should be understood that implementation or possession of all the systems shown is not required. More or fewer systems may be implemented alternatively.

[0124] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing program codes for executing the method shown in the flowchart. In such embodiments, the computer program can be downloaded and installed from a network through a communication device, or installed from the storage device 1003, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiments disclosed in the present application are executed.

[0125] The transmission device of the upgrade package provided by the present application adopts the transmission method of the upgrade package in the above-mentioned embodiments, and can solve the technical problem that the security and integrity of data cannot be fully guaranteed in the cross-country transmission process of the upgrade package in the prior art. Compared with the prior art, the transmission device of the upgrade package provided by the present application has the same beneficial effects as the transmission method of the upgrade package provided by the above-mentioned embodiments, and other technical features in the transmission device of the upgrade package are the same as the features disclosed in the above-mentioned embodiments, which will not be repeated here.

[0126] It should be understood that various parts of the present application can be realized by hardware, software, firmware or a combination thereof. In the description of the above-mentioned embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0127] The above is merely specific embodiments of the present application, but the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

[0128] The present application provides a computer readable storage medium having stored thereon computer readable program instructions (i.e. computer program) for executing the transmission method of the upgrade package in the above-mentioned embodiments.

[0129] The computer readable storage medium provided in the present application may, for example, be a U disk, but is not limited to an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, system, or device, or any combination of the above. More specific examples of the computer readable storage medium can include, but are not limited to, an electrical connection having one or more conductive wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present embodiment, the computer readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. The program code contained on the computer readable storage medium can be transmitted in any suitable medium, including but not limited to electrical wires, optical cables, RF (Radio Frequency), and the like, or any suitable combination of the above.

[0130] The above computer readable storage medium can be included in the transmission device of the upgrade package, or can exist separately without being assembled into the transmission device of the upgrade package.

[0131] The above computer readable storage medium carries one or more programs, which, when executed by the transmission device of the upgrade package, cause the transmission device of the upgrade package to:

[0132] Computer program code for carrying out operations of the present application can be written in one or more programming languages or combinations of languages including object oriented programming languages such as Java, Smalltalk, C++ or conventional procedural programming languages such as "C" or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0133] The flow and block diagrams in the drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present application. In this regard, each block in the flow and block diagrams can represent a module, a segment, or a portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that in some alternative implementations, the functions noted in the blocks can occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and / or flowchart illustrations, and combinations thereof, can be implemented by special purpose hardware-based systems that perform the specified functions or operations, or combinations of special purpose hardware and computer instructions.

[0134] The modules involved in the embodiments of the present application can be implemented in the form of software or in the form of hardware. In some cases, the name of the module does not constitute a limitation on the unit itself.

[0135] The readable storage medium provided by the present application is a computer readable storage medium, which stores computer readable program instructions (i.e. computer programs) for executing the transmission method of the upgrade package. The technical problem of the present application can solve the problem that the security and integrity of data cannot be fully guaranteed in the cross-country transmission of the upgrade package in the prior art. Compared with the prior art, the beneficial effects of the computer readable storage medium provided by the present application are the same as those of the transmission method of the upgrade package provided by the above-mentioned embodiments, which will not be repeated here.

[0136] The present application also provides a computer program product comprising a computer program, which, when executed by a processor, implements the steps of the transmission method of the upgrade package as described above.

[0137] The computer program product provided by the present application can solve the technical problem that the security and integrity of data cannot be fully guaranteed in the cross-country transmission of the upgrade package in the prior art. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as those of the transmission method of the upgrade package provided by the above-mentioned embodiments, which will not be repeated here.

[0138] The above only describes some embodiments of the present application, and does not limit the patent scope of the present application. Any equivalent structural transformation made by using the content of the present application specification and drawings, or direct / indirect application in other related technical fields is included in the patent protection scope of the present application.

Claims

1. A method for transmitting an upgrade package, characterized in that, The method for transmitting the upgrade package includes: The source file of the upgrade package is encrypted and signed to obtain an encrypted upgrade package file; Synchronize the encrypted upgrade package file to a remote cloud storage bucket; Upon receiving a decryption request sent via a secure dedicated line, the encrypted upgrade package file in the remote cloud storage bucket is decrypted and verified to obtain the remote upgrade package file; The remote upgrade package file is encrypted and signed to generate a target upgrade package file, which is then sent to the vehicle to be upgraded. The step of encrypting and signing the source file of the upgrade package to obtain the encrypted upgrade package file includes: Upon receiving a transmission instruction for the upgrade package source file, a first encryption key for the upgrade package source file is generated; The upgrade package source file is encrypted using the first encryption key to obtain the first upgrade package file; The first upgrade package file is signed using the first signing key to obtain an encrypted upgrade package file; The step of signing the first upgrade package file according to the first signing key to obtain the encrypted upgrade package file includes: Calculate the hash value of the first upgrade package file to determine its file hash value; The file hash value of the first upgrade package file is encrypted using the first signature key to obtain the file signature information; An encrypted upgrade package file is obtained based on the file signature information and the first upgrade package file.

2. The method as described in claim 1, characterized in that, The step of synchronizing the encrypted upgrade package file to a remote cloud storage bucket includes: Send the encrypted upgrade package file to the target cloud storage bucket, and then synchronize the encrypted upgrade package file to a remote cloud storage bucket through the target cloud storage bucket.

3. The method as described in claim 1, characterized in that, Upon receiving a decryption request sent via a secure dedicated line, the encrypted upgrade package file in the remote cloud storage bucket is decrypted and verified to obtain the remote upgrade package file, including: Upon receiving a decryption request sent via a secure dedicated line, the decryption request is verified. If the verification is successful, the encrypted upgrade package file in the remote cloud storage bucket is decrypted to obtain the second upgrade package file and the decryption signature. Calculate the hash value of the second upgrade package file to determine its file hash value; File integrity is verified based on the file hash value of the second upgrade package file and the decryption signature. If the file integrity check passes, the off-site upgrade package file is obtained based on the second upgrade package file.

4. The method as described in claim 1, characterized in that, The step of encrypting and signing the remote upgrade package file, generating a target upgrade package file, and sending the target upgrade package file to the vehicle to be upgraded includes: The remote upgrade package file is encrypted using the second encryption key to obtain the third upgrade package file; The third upgrade package file is signed using the second signing key to obtain the target upgrade package; The target upgrade package file is sent to the vehicle to be upgraded, so that the vehicle to be upgraded can perform a software upgrade based on the target upgrade package file.

5. The method as described in claim 4, characterized in that, Sending the target upgrade package file to the vehicle to be upgraded, so that the vehicle to be upgraded can perform a software upgrade based on the target upgrade package file, includes: The target upgrade package file is sent to the vehicle to be upgraded, so that the vehicle to be upgraded can decrypt the target upgrade package file according to the target decryption key to obtain the fourth upgrade package file, and authenticate the fourth upgrade package file according to the target vehicle certificate. If the authentication is successful, the software upgrade is performed according to the fourth upgrade package file.

6. A transmission device for an upgrade package, characterized in that, The transmission device for the upgrade package includes: The encryption module is used to encrypt and sign the source file of the upgrade package to obtain an encrypted upgrade package file. The synchronization module is used to synchronize the encrypted upgrade package file to a remote cloud storage bucket; The decryption module is used to decrypt and verify the encrypted upgrade package file in the remote cloud storage bucket when it receives a decryption call request sent through a secure dedicated line, so as to obtain the remote upgrade package file; The encryption module is also used to encrypt and sign the remote upgrade package file, generate the target upgrade package file, and send the target upgrade package file to the vehicle to be upgraded. The step of encrypting and signing the source file of the upgrade package to obtain the encrypted upgrade package file includes: Upon receiving a transmission instruction for the upgrade package source file, a first encryption key for the upgrade package source file is generated; The upgrade package source file is encrypted using the first encryption key to obtain the first upgrade package file; The first upgrade package file is signed using the first signing key to obtain an encrypted upgrade package file; The step of signing the first upgrade package file according to the first signing key to obtain the encrypted upgrade package file includes: Calculate the hash value of the first upgrade package file to determine its file hash value; The file hash value of the first upgrade package file is encrypted using the first signature key to obtain the file signature information; An encrypted upgrade package file is obtained based on the file signature information and the first upgrade package file.

7. A transmission device for an upgrade package, characterized in that, The upgrade package transmission device includes: a memory, a processor, and an upgrade package transmission program stored in the memory and executable on the processor, wherein the upgrade package transmission program is configured to implement the upgrade package transmission method as described in any one of claims 1 to 5.

8. A storage medium, characterized in that, The storage medium stores a transmission program for the upgrade package, which, when executed by a processor, implements the transmission method for the upgrade package as described in any one of claims 1 to 5.

Images