A method for dynamically updating radar control software

Abstract

The present invention provides a method for dynamically updating control software of a radar, which belongs to the field of communication technology and is used to ensure data security when updating the software configuration of a laser radar through a mobile communication network. The method comprises: a RAN device acquires control configuration information of a laser radar terminal, the laser radar terminal is a mobile terminal device with a radar function, the laser radar terminal is connected to the RAN device, the control configuration information comprises M sub-class configuration information with different functions / purposes, M is an integer greater than 1; the RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission mode that satisfies the information security level of each of the M sub-class configuration information.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method for dynamically updating control software of a radar. Background Art

[0002] With the continuous advancement of science and technology, especially the remarkable achievements in equipment miniaturization technology, radar systems are also constantly innovating. These innovations have enabled radar equipment to not only maintain its traditional functions, but also expand its application areas, increase mobility and network access capabilities. As an important electronic device, the miniaturization of radar means that it can be more easily integrated into various mobile platforms. For example, lidar can be applied to drones, cars, mobile phones, etc., which greatly improves its flexibility and practicality.

[0003] The improvement of mobility allows radar systems to better adapt to complex and changing environments, and achieve real-time monitoring and rapid response. For example, in the fields of traffic management, border patrols, environmental monitoring, etc., miniaturized radar systems can be easily deployed on various mobile carriers to achieve continuous scanning and monitoring of specific areas. In addition, the network access capability of radar systems has also been significantly improved. Through the connection with the mobile communication network, the radar system can achieve remote control and data transmission. This means that operators can update the software configuration of radar equipment through the network at different locations without physical contact with the equipment, thereby improving the convenience of maintenance and the security of the system. Software configuration update is an important part of radar system maintenance. Remote update through the mobile communication network can ensure that the radar system always runs the latest version of software, so that it has the latest functions and improvements, and improves the performance and reliability of the system.

[0004] However, due to the application scenarios of lidar, it has a higher demand for data privacy. When updating the radar's software configuration through a mobile communication network, how to ensure data security is a characteristic issue currently being studied. Summary of the invention

[0005] An embodiment of the present invention provides a method for dynamically updating control software of a radar, which is used to ensure data security when updating the software configuration of a laser radar through a mobile communication network.

[0006] In order to achieve the above object, the present invention adopts the following technical scheme:

[0007] In a first aspect, a method for dynamically updating control software of a radar is provided, which is applied to a RAN device. The method includes: the RAN device obtains control configuration information of a laser radar terminal, the laser radar terminal is a mobile terminal device with a radar function, the laser radar terminal is connected to the RAN device, and the control configuration information includes M sub-class configuration information with different functions / purposes, where M is an integer greater than 1; the RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission method that satisfies the information security level of each of the M sub-class configuration information.

[0008] Optionally, the control configuration information also includes the information security level of each of the M seed class configuration information. The RAN device configures the M seed class configuration information to the lidar terminal in sequence according to a secure transmission method that satisfies the information security level of each of the M seed class configuration information, including: the RAN device encrypts the M seed class configuration information in sequence according to an encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high regarding the information security level of each of the M seed class configuration information, and then configures it to the lidar terminal.

[0009] Optionally, i is a positive integer, and i traverses from 1 to M-1 in order from low to high according to the information security level of each of the M seed class configuration information. The RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high according to the information security level of each of the M seed class configuration information. Then, the RAN device configures the M seed class configuration information to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th seed class configuration information in the M seed class configuration information to obtain ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; in the configuration When result #i indicates that the i-th sub-class configuration information is successfully configured, the RAN device derives configuration key Kconfig_i+1 based on configuration key Kconfig_i; configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses configuration key Kconfig_i+1 to symmetrically encrypt the i+1-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i+1; the information security level of the i+1-th sub-class configuration information is higher than the information security level of the i-th sub-class configuration information; the RAN device sends ciphertext configuration information #i+1 to the laser radar terminal, and receives configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if configuration result #i+1 indicates that the i+1-th sub-class configuration information is successfully configured, the configuration is completed.

[0010] Optionally, i is a positive integer, and i traverses from 1 to M-2 in order of the information security level of each of the M seed class configuration information from low to high, and the RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high in which the information security level of each of the M seed class configuration information is from low to high, and then configures it to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to encrypt the M seed class configuration information. The RAN device symmetrically encrypts the i-th sub-class configuration information to obtain the ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; when the configuration result #i indicates that the i-th sub-class configuration is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i+1 to encrypt the i+1-th sub-class configuration information in the M sub-class configuration information. The information is symmetrically encrypted to obtain the ciphertext configuration information #i+1; the information security level of the i+1th seed class configuration information is higher than the information security level of the i-th seed class configuration information; the RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1; when the configuration result #i+1 indicates that the i+1th seed class configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is the RAN device The key shared with the laser radar terminal; the RAN device uses the configuration key Kconfig_i+2 to symmetrically encrypt the i+2th seed class configuration information in the M seed class configuration information to obtain the ciphertext configuration information #i+2; the information security level of the i+2th seed class configuration information is higher than the information security level of the i+1th seed class configuration information; the RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is configured successfully, the configuration is completed.

[0011] Optionally, the RAN device derives the configuration key Kconfig_i, including: the RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal for the configuration request #i, where the configuration request #i is used to request the laser radar terminal to cooperate in performing the i-th subclass configuration, and the configuration response #i includes a random number #i generated by the laser radar terminal for the i-th subclass configuration; if i is equal to 1, the RAN device uses the access layer key KgNB and the random number #i of the laser radar terminal as input parameters to derive the configuration key Kconfig_i; if i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, and the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th subclass configuration information in the M subclass configuration information, and the information security level of the i-th subclass configuration information is higher than the information security level of the i-1th subclass configuration information.

[0012] Optionally, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i, including: the RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal for the configuration request #i+1, the configuration request #i+1 is used to request the laser radar terminal to cooperate in performing the i+1th seed class configuration, and the configuration response #i+1 includes a random number #i+1 generated by the laser radar terminal for the i+1th seed class configuration; the RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1.

[0013] Optionally, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1, including: the RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal for the configuration request #i+2, the configuration request #i+2 is used to request the laser radar terminal to cooperate in performing the i+2th seed class configuration, and the configuration response #i+2 includes a random number #i+2 generated by the laser radar terminal for the i+2th seed class configuration; the RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2.

[0014] Optionally, the RAN device obtains control configuration information of the lidar terminal, including: when the mobile communication network where the RAN device is located is a third-party AF open information configuration function, the RAN device obtains the control configuration information from the AF, and the AF determines that the lidar terminal is connected to the RAN device by subscribing to the location of the lidar terminal to the mobile communication network. The control configuration information indicates by carrying the AF identifier and the lidar terminal identifier: the control configuration information is provided by the AF and needs to be configured to the lidar terminal through the RAN device.

[0015] Optionally, the M sub-categories of configuration information are arranged in order from low to high information security levels: radar detector software configuration, controller software, and communication interface software.

[0016] According to a second aspect, a radar control software dynamic update system is provided, the system includes a RAN device, and the system is configured as follows: the RAN device obtains control configuration information of a laser radar terminal, the laser radar terminal is a mobile terminal device with a radar function, the laser radar terminal is connected to the RAN device, and the control configuration information includes M sub-class configuration information with different functions / purposes, where M is an integer greater than 1; the RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission manner that meets the information security requirements of each of the M sub-class configuration information.

[0017] Optionally, the control configuration information also includes the information security level of each of the M seed class configuration information. The RAN device configures the M seed class configuration information to the lidar terminal in sequence according to a secure transmission method that satisfies the information security level of each of the M seed class configuration information, including: the RAN device encrypts the M seed class configuration information in sequence according to an encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high regarding the information security level of each of the M seed class configuration information, and then configures it to the lidar terminal.

[0018] Optionally, i is a positive integer, and i traverses from 1 to M-1 in order from low to high according to the information security level of each of the M seed class configuration information. The RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high according to the information security level of each of the M seed class configuration information. Then, the RAN device configures the M seed class configuration information to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th seed class configuration information in the M seed class configuration information to obtain ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; in the configuration When result #i indicates that the i-th sub-class configuration information is successfully configured, the RAN device derives configuration key Kconfig_i+1 based on configuration key Kconfig_i; configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses configuration key Kconfig_i+1 to symmetrically encrypt the i+1-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i+1; the information security level of the i+1-th sub-class configuration information is higher than the information security level of the i-th sub-class configuration information; the RAN device sends ciphertext configuration information #i+1 to the laser radar terminal, and receives configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if configuration result #i+1 indicates that the i+1-th sub-class configuration information is successfully configured, the configuration is completed.

[0019] Optionally, i is a positive integer, and i traverses from 1 to M-2 in order of the information security level of each of the M seed class configuration information from low to high, and the RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high in which the information security level of each of the M seed class configuration information is from low to high, and then configures it to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to encrypt the M seed class configuration information. The RAN device symmetrically encrypts the i-th sub-class configuration information to obtain the ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; when the configuration result #i indicates that the i-th sub-class configuration is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i+1 to encrypt the i+1-th sub-class configuration information in the M sub-class configuration information. The information is symmetrically encrypted to obtain the ciphertext configuration information #i+1; the information security level of the i+1th seed class configuration information is higher than the information security level of the i-th seed class configuration information; the RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1; when the configuration result #i+1 indicates that the i+1th seed class configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is the RAN device The key shared with the laser radar terminal; the RAN device uses the configuration key Kconfig_i+2 to symmetrically encrypt the i+2th seed class configuration information in the M seed class configuration information to obtain the ciphertext configuration information #i+2; the information security level of the i+2th seed class configuration information is higher than the information security level of the i+1th seed class configuration information; the RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is configured successfully, the configuration is completed.

[0020] Optionally, the RAN device derives the configuration key Kconfig_i, including: the RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal for the configuration request #i, where the configuration request #i is used to request the laser radar terminal to cooperate in performing the i-th subclass configuration, and the configuration response #i includes a random number #i generated by the laser radar terminal for the i-th subclass configuration; if i is equal to 1, the RAN device uses the access layer key KgNB and the random number #i of the laser radar terminal as input parameters to derive the configuration key Kconfig_i; if i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, and the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th subclass configuration information in the M subclass configuration information, and the information security level of the i-th subclass configuration information is higher than the information security level of the i-1th subclass configuration information.

[0021] Optionally, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i, including: the RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal for the configuration request #i+1, the configuration request #i+1 is used to request the laser radar terminal to cooperate in performing the i+1th seed class configuration, and the configuration response #i+1 includes a random number #i+1 generated by the laser radar terminal for the i+1th seed class configuration; the RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1.

[0022] Optionally, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1, including: the RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal for the configuration request #i+2, the configuration request #i+2 is used to request the laser radar terminal to cooperate in performing the i+2th seed class configuration, and the configuration response #i+2 includes a random number #i+2 generated by the laser radar terminal for the i+2th seed class configuration; the RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2.

[0023] Optionally, the RAN device obtains control configuration information of the lidar terminal, including: when the mobile communication network where the RAN device is located is a third-party AF open information configuration function, the RAN device obtains the control configuration information from the AF, and the AF determines that the lidar terminal is connected to the RAN device by subscribing to the location of the lidar terminal to the mobile communication network. The control configuration information indicates by carrying the AF identifier and the lidar terminal identifier: the control configuration information is provided by the AF and needs to be configured to the lidar terminal through the RAN device.

[0024] Optionally, the M sub-categories of configuration information are arranged in order from low to high information security levels: radar detector software configuration, controller software, and communication interface software.

[0025] In a third aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method described in the first aspect.

[0026] According to a fourth aspect, a computer program product is provided, comprising a computer program or instructions, which, when executed on a computer, causes the computer to execute the method described in the first aspect.

[0027] In summary, the above method and system have the following technical effects:

[0028] When the RAN device obtains the control configuration information of the lidar terminal, since the control configuration information includes M sub-class configuration information with different functions / purposes, the RAN device can configure the M sub-class configuration information to the lidar terminal in sequence according to a secure transmission method that meets the information security level of each sub-class configuration information, so as to achieve secure decoupling of each sub-class configuration information, thereby being able to ensure the information security of each sub-class configuration information during the configuration process in a fine-grained manner, thereby ensuring data security when the radar software configuration is updated through the mobile communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 A schematic diagram of the architecture of a system for dynamically updating control software of a radar provided by an embodiment of the present invention;

[0030] Figure 2 A schematic diagram of a flow chart of a method for dynamically updating control software of a radar provided by an embodiment of the present invention;

[0031] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0032] The present invention will present various aspects, embodiments or features around a system that may include multiple devices, components, modules, etc. It should be understood and appreciated that each system may include additional devices, components, modules, etc., and / or may not include all of the devices, components, modules, etc. discussed in conjunction with the figures. In addition, combinations of these schemes may also be used.

[0033] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information (such as the first indication information, the second indication information, or the third indication information, etc. below) is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be realized by means of the arrangement order of each information agreed in advance (such as specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and uniformly indicated to reduce the indication overhead caused by indicating the same information separately.

[0034] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0035] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0036] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or a communication device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or a communication device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0037] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future communication systems, and the embodiments of the present invention do not specifically limit this.

[0038] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0039] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b and c, or at least one of a, b or c, can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, the words "first", "second" and the like are used to distinguish the same items or similar items with substantially the same functions and effects. Those skilled in the art will understand that the words "first", "second" and the like do not limit the quantity and execution order, and the words "first", "second" and the like do not necessarily limit the differences. At the same time, in the embodiments of the present invention, the words "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or design. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete manner for easy understanding.

[0040] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0041] To facilitate understanding of the embodiments of the present invention, first Figure 1 The control system applicable to the embodiment of the present invention is described in detail by taking the radar control software dynamic update system shown in FIG. Figure 1 A schematic diagram of the architecture of a radar control software dynamic update system applicable to the method provided in an embodiment of the present invention.

[0042] like Figure 1 As shown, the radar control software dynamic update system may include: a radio access network (RAN) device and a lidar terminal.

[0043] RAN equipment can be equipment that provides access to terminals. For example, RAN equipment can include: RAN equipment can also include 5G, such as gNB in ​​a new radio (NR) system, or one or a group of antenna panels (including multiple antenna panels) of a base station in 5G, or network nodes that constitute gNB, transmission point (TRP or transmission point, TP) or transmission measurement function (TMF), such as a baseband unit (building base band unit, BBU), or a centralized unit (CU) or a distributed unit (DU), an RSU with base station function, or a wired access gateway, or a core network element of 5G. Alternatively, RAN equipment can also include an access point (AP) in a wireless fidelity (WiFi) system, a wireless relay node, a wireless backhaul node, various forms of macro base stations, micro base stations (also known as small stations), relay stations, access points, wearable devices, vehicle-mounted devices, etc. Alternatively, the RAN device may also include a next-generation mobile communication system, such as a 6G access network device, such as a 6G base station, or in the next-generation mobile communication system, the network device may also have other naming methods, which are all covered within the protection scope of the embodiments of the present invention, and the present invention does not impose any limitations on this.

[0044] The above-mentioned laser radar terminal can be a terminal with radar function, or a chip or chip system that can be set in the terminal. The terminal can also be called user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device. The terminal in the embodiments of the present invention may be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with a wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, a wireless terminal in a smart home, a vehicle-mounted terminal, a road side unit (RSU) with a terminal function, etc. The terminal of the present invention may also be an on-board module, an on-board module, an on-board component, an on-board chip or an on-board unit built into a vehicle as one or more components or units.

[0045] It can be understood that the lidar terminal can realize radar functions such as target perception and discovery, target tracking, target ranging / speed measurement, etc. by sending and receiving laser beams.

[0046] The following will be combined Figure 2 The interaction process between the devices in the above system is specifically introduced through the method embodiment. The radar control software dynamic update method provided by the embodiment of the present invention can be applied to the above control system, which is specifically introduced below.

[0047] Figure 2A schematic diagram of a flow chart of a method for dynamically updating control software of a radar provided by an embodiment of the present invention. Specifically, the flow chart of the method for dynamically updating control software of the radar is as follows:

[0048] S201, the RAN device obtains control configuration information of the laser radar terminal.

[0049] The laser radar terminal is a mobile terminal device with radar function, and specifically can be a terminal device of LS type laser radar, such as LS series obstacle avoidance laser radar.

[0050] LS series obstacle avoidance LiDAR is an advanced sensor widely used in mobile robots, autonomous vehicles and other fields. LS series LiDAR mainly works based on the principle of Time-of-Flight (ToF). The specific steps are as follows: Laser emission: The radar transmitter emits laser pulses, which have a specific wavelength and energy. Laser reflection: When the laser pulse encounters an obstacle, part of the energy is reflected back. Signal reception: The receiver captures the reflected laser signal and converts it into an electrical signal. Distance calculation: The distance to the obstacle is calculated by measuring the time difference from the laser pulse being emitted to being reflected back. Since the speed of light is very fast, the flight time can be very short, so the measurement equipment is required to have very high accuracy.

[0051] The LS series obstacle avoidance laser radar has the following technical features: Scanning range: The LS series laser radar can achieve a scanning range of 270°, with a radius of up to 20 meters (at 70% reflectivity), and can also reach a radius of 8 meters at 10% reflectivity. This enables it to perform effective obstacle detection and contour scanning in a wider area. Measurement accuracy: Based on pulse laser ranging technology, the radar has very high measurement accuracy, which can ensure the stability and reliability of the data. In addition, it uses nanosecond narrow pulse technology to ensure the safety of a class of laser products and is harmless to the human eye. Scanning speed: The LS series laser radar has a very fast scanning speed, measuring 25,000 times per second, and a single-circle scanning time of only 40 milliseconds. This high speed helps to feedback environmental changes in real time, ensuring that the device can respond quickly and make corresponding adjustments. Industrial-grade design: The radar adopts industrial-grade design with IP65 protection level, which can withstand harsh environmental conditions. It also has professional EMC design and rigorous testing, including ambient light and shock vibration testing, to ensure its stability and reliability. Maintenance convenience: The window design of the LS series laser radar is detachable, which is easy to maintain and clean, reducing maintenance costs and extending the service life of the product. Flexibility: The radar supports up to 16 groups of definable detection areas. Users can define any complex and irregular detection areas as needed, increasing the flexibility and applicability of use2.

[0052] Optionally, the radar terminal adopts a unified hardware description language, and based on the differences in transmission information content and rate, uses a network, CAN (Controller Area Network) bus, serial port, RapidIO (interconnection architecture) and RAM (Random Access Memory) to transmit data through the internal bus interconnection of the processing platform, provides a unified information message format for data and control information between various processors on a heterogeneous processor platform, provides a unified hardware access interface for each module, and designs a driver layer; wherein the network and the controller area network bus are used for data interconnection between signal processing and data processing, as well as data interaction of information such as management, monitoring and debugging, the serial port is used for transmission interconnection of low-speed data, the interconnection architecture is used for transmission interconnection of high-speed data, and the random access memory is used for information interaction with the board.

[0053] The board may be a ZYNQ board.

[0054] According to the driver layer of the design, the radar terminal adopts an encapsulated communication protocol based on the differences and similarities in communication protocols and communication mechanisms of different types of subsystems, shields the differences in communication mechanisms and communication modes of different systems, and provides the application layer with a message-only instantaneous communication method. Optionally, an intermediate layer can also be designed. The intermediate layer can provide communication between the main control software and other subsystems, including communication between telemetry / remote control, servo, radio frequency, wave control, and inertial navigation, and can also include functions such as message integration, forwarding, message parsing, and callback, etc., which are not limited by the present invention.

[0055] In the embodiment of the present invention, the radar terminal can be configured with a wireless model so that it can be connected to the RAN device to configure it through the wireless network.

[0056] The control configuration information includes M sub-class configuration information with different functions / purposes, where M is an integer greater than 1. The control configuration information also includes the information security level of each of the M sub-class configuration information. For example, the M sub-class configuration information is arranged in order from low to high information security level: radar detector software configuration, controller software, and communication interface software.

[0057] Radar detector software: The radar detector software is the core part of the radar system, so it has the highest level of information security. It is responsible for transmitting and receiving laser signals and performing preliminary data processing. The software can be customized to suit different application requirements, such as adjusting the transmission power, signal frequency, etc.

[0058] Controller Software: The controller is the control center of the radar system, responsible for managing the working status of the radar detector and processing and storing data from the detector. This includes setting the operating mode, monitoring the system status and performing necessary calibration.

[0059] Communication interface software: In order to communicate with other systems (such as navigation systems or central control units), radar systems require specialized software to manage the transmission and reception of data. This may include drivers or other communication protocols based on the PCI bus.

[0060] RAN equipment can obtain control configuration information through network information opening. For example, a third-party AF can request the mobile communication network where the RAN equipment is located to open the information configuration function, that is, the third party can configure information for its corresponding terminal through the mobile communication network. The specific process is that the third-party AF sends a request for the mobile communication network to open the information configuration function to the management plane network element of the mobile communication network, such as EMS / NMS. If the EMS / NMS passes the verification of the third-party AF and determines that the third-party AF has the authority to open the mobile communication network information configuration function based on the pre-configured information, it will respond to the request of the third-party AF and assign it a token (the token contains the signature of the EMS / NMS). The token indicates that the third-party AF has the authority to open the mobile communication network information configuration function. Otherwise, the request of the third-party AF is rejected.

[0061] The third-party AF can determine that the laser radar terminal is connected to the RAN device by subscribing to the location of the laser radar terminal to the mobile communication network where the RAN device is located, so that when the third-party AF obtains the token, it can send control configuration information to the RAN device. Correspondingly, when the mobile communication network where the RAN device is located opens the information configuration function for the third-party AF, the RAN device obtains the control configuration information from the AF, and the control configuration information indicates by carrying the AF identifier and the laser radar terminal identifier: the control configuration information is provided by the AF and needs to be configured to the laser radar terminal through the RAN device. The identifier of the laser radar terminal is different from the identifier of the conventional UE. It is a special identifier used to indicate that it is a terminal with special capabilities, such as a terminal that requires higher communication security. The control configuration information also includes the above-mentioned token. On this basis, the RAN device first verifies the signature of the token. If the verification is passed, the RAN device determines that it is necessary to perform chain deduction with the access layer key of the laser radar terminal based on the fact that the identifier of the laser radar terminal is a special identifier, and based on the fact that the control configuration information contains M sub-class configuration information, and the information security level of each of the M sub-class configuration information, such as performing the following interdependent M-time key deduction to sequentially encrypt and configure this sub-class configuration information.

[0062] S202, the RAN device configures the M sub-class configuration information to the lidar terminal in sequence according to a secure transmission method that satisfies the information security level of each of the M sub-class configuration information.

[0063] The RAN device ky encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information, and then configures it to the laser radar terminal according to the information security level of each of the M sub-class configuration information from low to high.

[0064] Case 1: One subclass configuration information may be associated with the next subclass configuration information for configuration.

[0065] i is a positive integer, and i traverses from 1 to M-1 in order of the information security level of each of the M sub-class configuration information from low to high. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in order of the information security level of each of the M sub-class configuration information from low to high, and then configures it to the lidar terminal, including:

[0066] The RAN device may first derive the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal. For example, the RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal for the configuration request #i, the configuration request #i is used to request the laser radar terminal to cooperate in the i-th sub-class configuration, and the configuration response #i includes the random number #i generated by the laser radar terminal for the i-th sub-class configuration; if i is equal to 1, the RAN device uses the access layer key KgNB of the laser radar terminal and the random number #i as input parameters to derive the configuration key Kconfig_i; if i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th sub-class configuration information in the M sub-class configuration information, and the information security level of the i-th sub-class configuration information is higher than the information security level of the i-1th sub-class configuration information.

[0067] Similar to the following i+1 situation, i is equal to 1, RAN can trigger the derivation of configuration key Kconfig_i based on the control configuration information of the laser radar terminal obtained by the RAN device, i is greater than 1, RAN can successfully trigger the derivation of configuration key Kconfig_i based on the i-1th sub-class configuration information configuration, otherwise, reconfigure the i-1th sub-class configuration information.

[0068] The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain the ciphertext configuration information #i. The RAN device sends the ciphertext configuration information #i to the laser radar terminal and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i. The key derivation logic of the laser radar terminal is consistent with that of the RAN device, so the laser radar terminal can use the configuration key Kconfig_i derived locally to symmetrically decrypt the ciphertext configuration information #i. If the decryption is successful, the i-th sub-class configuration information in plain text is obtained, and then the local configuration is updated and the configuration result #i is fed back. If the decryption fails, the information indicating the decryption failure is directly fed back to instruct the RAN device to terminate the configuration.

[0069] When the configuration result #i indicates that the configuration of the i-th sub-class configuration information is successful, the RAN device can derive the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal. For example, the RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal for the configuration request #i+1, the configuration request #i+1 is used to request the laser radar terminal to cooperate in the i+1-th sub-class configuration, and the configuration response #i+1 includes the random number #i+1 generated by the laser radar terminal for the i+1-th sub-class configuration; the RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1.

[0070] The RAN device may use the configuration key Kconfig_i+1 to symmetrically encrypt the i+1th sub-configuration information in the M sub-configuration information to obtain ciphertext configuration information #i+1; the information security level of the i+1th sub-configuration information is higher than the information security level of the ith sub-configuration information.

[0071] The RAN device can send the ciphertext configuration information #i+1 to the laser radar terminal, and receive the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if the configuration result #i+1 indicates that the i+1th seed class configuration information is successfully configured, the configuration ends. The key derivation logic of the laser radar terminal is consistent with that of the RAN device, so the laser radar terminal can use the configuration key Kconfig_i+1 derived locally to symmetrically decrypt the ciphertext configuration information #i+1. If the decryption is successful, the i+1th seed class configuration information in plain text is obtained, and then the local configuration is updated, and the configuration result #i+1 is fed back. If the decryption fails, the information indicating the decryption failure is directly fed back to instruct the RAN device to terminate the configuration.

[0072] Based on the above method, it can be known that the above configuration key Kconfig is a key used to ensure the transmission of perception configuration information, and the signal is decoupled from the key encryption of the multiplexed communication link, so the security implementation can be more flexible. Since the configuration key Kconfig of the next subclass configuration information is derived based on the configuration key Kconfig of the previous subclass configuration information, that is, a chain derivation structure, an attacker who lacks any of the configuration keys Kconfig cannot decipher the configuration process, thus achieving security coupling and better security. Since the subclass configuration information with a higher information security level has a higher number of times its configuration key Kconfig has been deduced through chain deduction, the more difficult it is to decipher, so higher security can be achieved.

[0073] Case 2: You can configure by associating two subclass configuration information with one subclass configuration information.

[0074] i is a positive integer, and i traverses from 1 to M-2 in order of the information security level of each of the M sub-class configuration information from low to high. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in order of the information security level of each of the M sub-class configuration information from low to high, and then configures it to the lidar terminal, including:

[0075] The RAN device can derive the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the lidar terminal.

[0076] The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain the ciphertext configuration information #i. The RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i.

[0077] When the configuration result #i indicates that the i-th sub-class configuration is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal. The RAN device uses the configuration key Kconfig_i+1 to symmetrically encrypt the i+1-th sub-class configuration information in the M sub-class configuration information to obtain the ciphertext configuration information #i+1; the information security level of the i+1-th sub-class configuration information is higher than the information security level of the i-th sub-class configuration information.

[0078] The RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When the configuration result #i+1 indicates that the i+1th seed class configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is a key shared by the RAN device and the laser radar terminal. For example, the RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal for the configuration request #i+2. The configuration request #i+2 is used to request the laser radar terminal to cooperate in the i+2th seed class configuration, and the configuration response #i+2 includes the random number #i+2 generated by the laser radar terminal for the i+2th seed class configuration; the RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2.

[0079] The RAN device uses the configuration key Kconfig_i+2 to symmetrically encrypt the i+2th seed class configuration information in the M seed class configuration information to obtain the ciphertext configuration information #i+2; the information security level of the i+2th seed class configuration information is higher than the information security level of the i+1th seed class configuration information. The RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is successfully configured, the configuration ends.

[0080] In addition, the specific implementation of situation 2 can also refer to the relevant introduction of situation 1, which will not be repeated here.

[0081] Based on the above method, it can be known that the above configuration key Kconfig is a key used to ensure the transmission of perception configuration information, and the signal is decoupled from the key encryption of the multiplexed communication link, so the security implementation can be more flexible. Since the configuration keys Kconfig of the next two subclass configuration information are derived based on the configuration key Kconfig of the previous subclass configuration information, that is, a chain derivation structure, an attacker who lacks any of the configuration keys Kconfig cannot decipher the configuration process, thus achieving security coupling and better security. Since the subclass configuration information with a higher information security level has a higher number of times its configuration key Kconfig has been deduced through chain deduction, the more difficult it is to decipher, so higher security can be achieved.

[0082] In summary, when the RAN device obtains the control configuration information of the lidar terminal, since the control configuration information includes M sub-class configuration information with different functions / purposes, the RAN device can configure the M sub-class configuration information to the lidar terminal in sequence according to a secure transmission method that meets the information security level of each sub-class configuration information, so as to achieve secure decoupling of each sub-class configuration information, thereby being able to ensure the information security of each sub-class configuration information during the configuration process in a fine-grained manner, thereby ensuring data security when the radar software configuration is updated through the mobile communication network.

[0083] Combination of the above Figure 2 The radar control software dynamic update method provided by the embodiment of the present invention is described in detail. The radar control software dynamic update system for executing the radar control software dynamic update method provided by the embodiment of the present invention is described in detail below.

[0084] The system includes a RAN device, and the system is configured as follows: the RAN device obtains control configuration information of a laser radar terminal, the laser radar terminal is a mobile terminal device with a radar function, the laser radar terminal is connected to the RAN device, the control configuration information includes M sub-class configuration information with different functions / purposes, and M is an integer greater than 1; the RAN device configures the M sub-class configuration information to the laser radar terminal in sequence according to a secure transmission method that meets the information security requirements of each of the M sub-class configuration information.

[0085] Optionally, the control configuration information also includes the information security level of each of the M seed class configuration information. The RAN device configures the M seed class configuration information to the lidar terminal in sequence according to a secure transmission method that satisfies the information security level of each of the M seed class configuration information, including: the RAN device encrypts the M seed class configuration information in sequence according to an encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high regarding the information security level of each of the M seed class configuration information, and then configures it to the lidar terminal.

[0086] Optionally, i is a positive integer, and i traverses from 1 to M-1 in order from low to high according to the information security level of each of the M seed class configuration information. The RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high according to the information security level of each of the M seed class configuration information. Then, the RAN device configures the M seed class configuration information to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th seed class configuration information in the M seed class configuration information to obtain ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; in the configuration When result #i indicates that the i-th sub-class configuration information is successfully configured, the RAN device derives configuration key Kconfig_i+1 based on configuration key Kconfig_i; configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses configuration key Kconfig_i+1 to symmetrically encrypt the i+1-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i+1; the information security level of the i+1-th sub-class configuration information is higher than the information security level of the i-th sub-class configuration information; the RAN device sends ciphertext configuration information #i+1 to the laser radar terminal, and receives configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if configuration result #i+1 indicates that the i+1-th sub-class configuration information is successfully configured, the configuration is completed.

[0087] Optionally, i is a positive integer, and i traverses from 1 to M-2 in order of the information security level of each of the M seed class configuration information from low to high, and the RAN device encrypts the M seed class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M seed class configuration information and in a manner from low to high in which the information security level of each of the M seed class configuration information is from low to high, and then configures it to the laser radar terminal, including: the RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i to encrypt the M seed class configuration information. The RAN device symmetrically encrypts the i-th sub-class configuration information to obtain the ciphertext configuration information #i; the RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; when the configuration result #i indicates that the i-th sub-class configuration is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; the RAN device uses the configuration key Kconfig_i+1 to encrypt the i+1-th sub-class configuration information in the M sub-class configuration information. The information is symmetrically encrypted to obtain the ciphertext configuration information #i+1; the information security level of the i+1th seed class configuration information is higher than the information security level of the i-th seed class configuration information; the RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1; when the configuration result #i+1 indicates that the i+1th seed class configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is the RAN device The key shared with the laser radar terminal; the RAN device uses the configuration key Kconfig_i+2 to symmetrically encrypt the i+2th seed class configuration information in the M seed class configuration information to obtain the ciphertext configuration information #i+2; the information security level of the i+2th seed class configuration information is higher than the information security level of the i+1th seed class configuration information; the RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is configured successfully, the configuration is completed.

[0088] Optionally, the RAN device derives the configuration key Kconfig_i, including: the RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal for the configuration request #i, where the configuration request #i is used to request the laser radar terminal to cooperate in performing the i-th subclass configuration, and the configuration response #i includes a random number #i generated by the laser radar terminal for the i-th subclass configuration; if i is equal to 1, the RAN device uses the access layer key KgNB and the random number #i of the laser radar terminal as input parameters to derive the configuration key Kconfig_i; if i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, and the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th subclass configuration information in the M subclass configuration information, and the information security level of the i-th subclass configuration information is higher than the information security level of the i-1th subclass configuration information.

[0089] Optionally, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i, including: the RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal for the configuration request #i+1, the configuration request #i+1 is used to request the laser radar terminal to cooperate in performing the i+1th seed class configuration, and the configuration response #i+1 includes a random number #i+1 generated by the laser radar terminal for the i+1th seed class configuration; the RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1.

[0090] Optionally, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1, including: the RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal for the configuration request #i+2, the configuration request #i+2 is used to request the laser radar terminal to cooperate in performing the i+2th seed class configuration, and the configuration response #i+2 includes a random number #i+2 generated by the laser radar terminal for the i+2th seed class configuration; the RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2.

[0091] Optionally, the RAN device obtains control configuration information of the lidar terminal, including: when the mobile communication network where the RAN device is located is a third-party AF open information configuration function, the RAN device obtains the control configuration information from the AF, and the AF determines that the lidar terminal is connected to the RAN device by subscribing to the location of the lidar terminal to the mobile communication network. The control configuration information indicates by carrying the AF identifier and the lidar terminal identifier: the control configuration information is provided by the AF and needs to be configured to the lidar terminal through the RAN device.

[0092] Optionally, the M sub-categories of configuration information are arranged in order from low to high information security levels: radar detector software configuration, controller software, and communication interface software.

[0093] Figure 3 The electronic device provided in the embodiment of the present invention is a schematic diagram of the structure of the electronic device. For example, the electronic device may be a terminal device, or a chip (system) or other components or assemblies that can be set in the terminal device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may also include a memory 402 and / or a transceiver 403. The processor 401 is coupled to the memory 402 and the transceiver 403, such as being connected via a communication bus. In addition, the electronic device 400 may also be a chip, such as including the processor 401, in which case the transceiver may be an output and input interface of the chip.

[0094] Combine the following Figure 3 The components of the electronic device 400 are specifically introduced as follows:

[0095] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0096] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2The radar control software dynamic update method is shown.

[0097] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0098] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer programs or instructions).

[0099] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0100] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0101] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal device, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal device, or with another network device.

[0102] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0103] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0104] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or less components than those shown in the figure, or combine certain components, or arrange the components differently.

[0105] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0106] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0107] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0108] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program or instruction can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program or instruction can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0109] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0110] In the present invention, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0111] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0112] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0113] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0114] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0115] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0116] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0117] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0118] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for dynamically updating control software of a radar, characterized in that: Applied to RAN equipment, the method includes: The RAN device acquires control configuration information of a laser radar terminal, where the laser radar terminal is a mobile terminal device with a radar function, and the laser radar terminal is connected to the RAN device, where the control configuration information includes M sub-class configuration information with different functions / purposes, where M is an integer greater than 1; The RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission manner that satisfies the information security level of each of the M sub-class configuration information; The control configuration information also includes the information security level of each of the M sub-class configuration information, and the RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission manner that satisfies the information security level of each of the M sub-class configuration information, including: The RAN device encrypts the M sub-class configuration information in sequence according to an encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high regarding the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal; i is a positive integer, and i traverses from 1 to M-1 in order from low to high according to the information security level of each of the M sub-class configuration information. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high according to the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal, including: The RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i; The RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; When the configuration result #i indicates that the configuration of the i-th subclass configuration information is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+1th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+1 to obtain ciphertext configuration information #i+1; the information security level of the i+1th subclass configuration information is higher than the information security level of the ith subclass configuration information; The RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if the configuration result #i+1 indicates that the i+1th seed class configuration information is successfully configured, the configuration ends. i is a positive integer, and i traverses from 1 to M-2 in order from low to high according to the information security level of each of the M sub-class configuration information. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high according to the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal, including: The RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i; The RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; When the configuration result #i indicates that the configuration of the i-th subclass is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+1th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+1 to obtain ciphertext configuration information #i+1; the information security level of the i+1th subclass configuration information is higher than the information security level of the ith subclass configuration information; The RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1; When the configuration result #i+1 indicates that the i+1th subclass configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+2th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+2 to obtain ciphertext configuration information #i+2; the information security level of the i+2th subclass configuration information is higher than the information security level of the i+1th subclass configuration information; The RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is successfully configured, the configuration ends; The RAN device derives the configuration key Kconfig_i, including: The RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal in response to the configuration request #i, wherein the configuration request #i is used to request the laser radar terminal to cooperate in performing an i-th subclass configuration, and the configuration response #i includes a random number #i generated by the laser radar terminal for the i-th subclass configuration; If i is equal to 1, the RAN device uses the access layer key KgNB of the laser radar terminal and the random number #i as input parameters to derive the configuration key Kconfig_i; If i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th subclass configuration information in the M subclass configuration information, and the information security level of the i-th subclass configuration information is higher than the information security level of the i-1th subclass configuration information; The RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i, including: The RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal in response to the configuration request #i+1, wherein the configuration request #i+1 is used to request the laser radar terminal to cooperate in performing the i+1th subclass configuration, and the configuration response #i+1 includes a random number #i+1 generated by the laser radar terminal for the i+1th subclass configuration; The RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1; The RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1, including: The RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal in response to the configuration request #i+2, wherein the configuration request #i+2 is used to request the laser radar terminal to cooperate in performing the i+2th subclass configuration, and the configuration response #i+2 includes a random number #i+2 generated by the laser radar terminal for the i+2th subclass configuration; The RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2; The M sub-categories of configuration information are, in order from low to high information security levels: radar detector software configuration, controller software, and communication interface software.

2. The method for dynamically updating control software of a radar according to claim 1, characterized in that: The RAN device obtains control configuration information of the laser radar terminal, including: In the case where the mobile communication network where the RAN device is located is a third-party AF open information configuration function, the RAN device obtains the control configuration information from the AF, and the AF determines that the lidar terminal is connected to the RAN device by subscribing to the location of the lidar terminal to the mobile communication network. The control configuration information indicates by carrying the identifier of the AF and the identifier of the lidar terminal: the control configuration information is provided by the AF and needs to be configured to the lidar terminal through the RAN device.

3. A radar control software dynamic update system, characterized in that: The system includes a RAN device, and the system is configured to: The RAN device acquires control configuration information of a laser radar terminal, where the laser radar terminal is a mobile terminal device with a radar function, and the laser radar terminal is connected to the RAN device, where the control configuration information includes M sub-class configuration information with different functions / purposes, where M is an integer greater than 1; The RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission manner that meets the information security requirements of each of the M sub-class configuration information; The control configuration information also includes the information security level of each of the M sub-class configuration information, and the RAN device sequentially configures the M sub-class configuration information to the laser radar terminal in a secure transmission manner that satisfies the information security level of each of the M sub-class configuration information, including: The RAN device encrypts the M sub-class configuration information in sequence according to an encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high regarding the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal; i is a positive integer, and i traverses from 1 to M-1 in order from low to high according to the information security level of each of the M sub-class configuration information. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high according to the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal, including: The RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i; The RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; When the configuration result #i indicates that the configuration of the i-th subclass configuration information is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+1th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+1 to obtain ciphertext configuration information #i+1; the information security level of the i+1th subclass configuration information is higher than the information security level of the ith subclass configuration information; The RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1. When i+1=M, if the configuration result #i+1 indicates that the i+1th seed class configuration information is successfully configured, the configuration ends. i is a positive integer, and i traverses from 1 to M-2 in order from low to high according to the information security level of each of the M sub-class configuration information. The RAN device encrypts the M sub-class configuration information in sequence according to the encryption method that satisfies the information security level of each of the M sub-class configuration information and in a manner from low to high according to the information security level of each of the M sub-class configuration information, and then configures the M sub-class configuration information to the laser radar terminal, including: The RAN device derives the configuration key Kconfig_i; the configuration key Kconfig_i is a key shared by the RAN device and the laser radar terminal; The RAN device uses the configuration key Kconfig_i to symmetrically encrypt the i-th sub-class configuration information in the M sub-class configuration information to obtain ciphertext configuration information #i; The RAN device sends the ciphertext configuration information #i to the laser radar terminal, and receives the configuration result #i returned by the laser radar terminal for the ciphertext configuration information #i; When the configuration result #i indicates that the configuration of the i-th subclass is successful, the RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i; the configuration key Kconfig_i+1 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+1th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+1 to obtain ciphertext configuration information #i+1; the information security level of the i+1th subclass configuration information is higher than the information security level of the ith subclass configuration information; The RAN device sends the ciphertext configuration information #i+1 to the laser radar terminal, and receives the configuration result #i+1 returned by the laser radar terminal for the ciphertext configuration information #i+1; When the configuration result #i+1 indicates that the i+1th subclass configuration is successful, the RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1; the configuration key Kconfig_i+2 is a key shared by the RAN device and the laser radar terminal; The RAN device symmetrically encrypts the i+2th subclass configuration information in the M subclass configuration information using the configuration key Kconfig_i+2 to obtain ciphertext configuration information #i+2; the information security level of the i+2th subclass configuration information is higher than the information security level of the i+1th subclass configuration information; The RAN device sends the ciphertext configuration information #i+2 to the laser radar terminal, and receives the configuration result #i+2 returned by the laser radar terminal for the ciphertext configuration information #i+2. When i+2=M, if the configuration result #i+2 indicates that the i+2th seed class configuration information is successfully configured, the configuration ends; The RAN device derives the configuration key Kconfig_i, including: The RAN device sends a configuration request #i to the laser radar terminal, and receives a configuration response #i returned by the laser radar terminal in response to the configuration request #i, wherein the configuration request #i is used to request the laser radar terminal to cooperate in performing an i-th subclass configuration, and the configuration response #i includes a random number #i generated by the laser radar terminal for the i-th subclass configuration; If i is equal to 1, the RAN device uses the access layer key KgNB of the laser radar terminal and the random number #i as input parameters to derive the configuration key Kconfig_i; If i is greater than 1, the RAN device uses the configuration key Kconfig_i-1 and the random number #i as input parameters to derive the configuration key Kconfig_i, the configuration key Kconfig_i-1 is a key shared by the RAN device and the laser radar terminal, the configuration key Kconfig_i-1 is used to symmetrically encrypt the i-1th subclass configuration information in the M subclass configuration information, and the information security level of the i-th subclass configuration information is higher than the information security level of the i-1th subclass configuration information; The RAN device derives the configuration key Kconfig_i+1 based on the configuration key Kconfig_i, including: The RAN device sends a configuration request #i+1 to the laser radar terminal, and receives a configuration response #i+1 returned by the laser radar terminal in response to the configuration request #i+1, wherein the configuration request #i+1 is used to request the laser radar terminal to cooperate in performing the i+1th subclass configuration, and the configuration response #i+1 includes a random number #i+1 generated by the laser radar terminal for the i+1th subclass configuration; The RAN device uses the configuration key Kconfig_i and the random number #i+1 as input parameters to derive the configuration key Kconfig_i+1; The RAN device derives the configuration key Kconfig_i+2 based on the configuration key Kconfig_i and the configuration key Kconfig_i+1, including: The RAN device sends a configuration request #i+2 to the laser radar terminal, and receives a configuration response #i+2 returned by the laser radar terminal in response to the configuration request #i+2, wherein the configuration request #i+2 is used to request the laser radar terminal to cooperate in performing the i+2th subclass configuration, and the configuration response #i+2 includes a random number #i+2 generated by the laser radar terminal for the i+2th subclass configuration; The RAN device uses the configuration key Kconfig_i, the configuration key Kconfig_i+1 and the random number #i+2 as input parameters to derive the configuration key Kconfig_i+2; The M sub-categories of configuration information are, in order from low to high information security levels: radar detector software configuration, controller software, and communication interface software.

Images