Software upgrading method and related device

Abstract

The invention provides a software upgrading method and a related device, and relates to the field of software upgrading. In the application, the identity of the to-be-upgraded vehicle is firstly verified, and if the verification is passed, the subsequent software upgrading operation is carried out, so that the security of software online upgrading is ensured. The method comprises the following steps: during software upgrading, encrypting a software upgrading package to obtain an encrypted upgrading package, generating an encrypted token corresponding to an abstract of the encrypted upgrading package, transmitting the encrypted token to a to-be-upgraded vehicle through an OTA server, and transmitting the encrypted upgrading package to the to-be-upgraded vehicle through a CDN accelerator. According to the method, the encryption token and the encryption upgrade package are respectively transmitted through encryption operation and by adopting two different transmission modes, so that the possibility that two data are intercepted and cracked at the same time is reduced, and the security of software online upgrade is further ensured.

Description

Technical Field

[0001] The present application relates to the field of software updating, and more specifically, to a software upgrading method and related devices. Background Art

[0002] OTA (Over-the-Air Technology) is a technology that uses server mobile communication networks and terminal networks to update mobile terminal memory data and improve terminal functions and services.

[0003] According to the upgrade type, automotive OTA is mainly divided into SOTA (Software Over-The-Air) and FOTA (Firmware Over-The-Air), which is to use OTA to upgrade software and firmware. Among them, SOTA is the update and experience optimization of vehicle functions such as in-vehicle navigation, infotainment applications, and human-computer interaction.

[0004] When using SOTA for upgrading, how to ensure the security of online software upgrades is a technical problem that technical personnel in this field urgently need to solve. Summary of the invention

[0005] In view of this, the present application provides a software upgrade method and related devices to solve the problem of ensuring the security of software online upgrades when using SOTA for upgrades.

[0006] In order to solve the above technical problems, this application adopts the following technical solutions:

[0007] A software upgrade method, applied to a control terminal, the software upgrade method comprising:

[0008] After determining that the identity authentication of the vehicle to be upgraded has passed, obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded;

[0009] Determining a software upgrade package for the device to be upgraded based on the software parameter information;

[0010] Performing an encryption operation on the software upgrade package to obtain an encrypted upgrade package;

[0011] Generate an encrypted token corresponding to the summary of the encrypted upgrade package;

[0012] The encrypted token is transmitted to the vehicle to be upgraded through the over-the-air download technology OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0013] Optionally, determining that the identity authentication of the vehicle to be upgraded is passed includes:

[0014] Obtaining actual verification information of the equipment to be upgraded in the vehicle to be upgraded;

[0015] If the actual verification information is the same as the reference verification information of the device to be upgraded stored in the control end, it is determined that the identity authentication of the vehicle to be upgraded has passed.

[0016] Optionally, determining the software upgrade package of the device to be upgraded based on the software parameter information includes:

[0017] Obtain the latest software version of the device to be upgraded;

[0018] Extracting the current software version of the device to be upgraded from the software parameter information;

[0019] Based on the difference information between the latest software version and the current software version, a software upgrade package for the device to be upgraded is determined.

[0020] Optionally, generating an encrypted token corresponding to the digest of the encrypted upgrade package includes:

[0021] Extracting a digest of the encrypted upgrade package from the encrypted upgrade package;

[0022] Generate a token using the summary of the encryption upgrade package, a random password and a symmetric encryption algorithm;

[0023] An encryption operation is performed on the token to obtain an encrypted token.

[0024] A software upgrade method is applied to a vehicle to be upgraded, the software upgrade method comprising:

[0025] Obtaining an encrypted token transmitted by the control end through the server and an encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the digest of the encrypted upgrade package;

[0026] Decrypting the encrypted upgrade package to obtain the software upgrade package;

[0027] Determine a digest of the encrypted upgrade package corresponding to the encrypted token;

[0028] Based on the software upgrade package and the digest of the encrypted upgrade package, a software upgrade operation is performed on the device to be upgraded.

[0029] Optionally, determining a digest of the encrypted upgrade package corresponding to the encrypted token includes:

[0030] Decrypting the encrypted token to obtain a token;

[0031] The token is decomposed to obtain a summary of the encrypted upgrade package.

[0032] Optionally, performing a software upgrade operation on the device to be upgraded based on the software upgrade package and the digest of the encrypted upgrade package includes:

[0033] Extracting a summary to be verified from the encrypted upgrade package;

[0034] Comparing the summary to be verified with the summary of the encrypted upgrade package;

[0035] If the comparison result is consistent, the software upgrade package is sent to the device to be upgraded, so that the device to be upgraded performs an upgrade operation according to the software upgrade package.

[0036] A software upgrade device, applied to a control terminal, comprising:

[0037] An information acquisition module, used to acquire software parameter information of a device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed;

[0038] An upgrade package determination module, used to determine the software upgrade package of the device to be upgraded based on the software parameter information;

[0039] An encryption module, used to perform an encryption operation on the software upgrade package to obtain an encrypted upgrade package;

[0040] A token generation module, used to generate an encrypted token corresponding to the digest of the encrypted upgrade package;

[0041] The upgrade control module is used to transmit the encrypted token to the vehicle to be upgraded through the over-the-air download technology OTA server, and transmit the encrypted upgrade package to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0042] A software upgrade device, applied to a vehicle to be upgraded, comprising:

[0043] A data acquisition module, used to acquire an encrypted token transmitted by the control end through the server and an encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end, after determining that the identity authentication of the vehicle to be upgraded has passed, acquiring software parameter information of the device to be upgraded in the vehicle to be upgraded, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the summary of the encrypted upgrade package;

[0044] A decryption module, used to decrypt the encrypted upgrade package to obtain the software upgrade package;

[0045] A digest determination module, used to determine the digest of the encrypted upgrade package corresponding to the encrypted token;

[0046] An upgrade processing module is used to perform a software upgrade operation on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0047] A software upgrade system comprises a control terminal for executing the software upgrade method and a vehicle to be upgraded for executing the software upgrade method.

[0048] The present application provides a software upgrade method and related devices. In the present application, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention transmits the encrypted token and the encrypted upgrade package respectively through encryption operations and two different transmission methods, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are merely embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0050] Figure 1 A flowchart of a software upgrade method provided by an embodiment of the present invention;

[0051] Figure 2 A flowchart of a method for determining a software upgrade package provided by an embodiment of the present invention;

[0052] Figure 3 A schematic diagram of a cloud encryption scenario provided by an embodiment of the present invention;

[0053] Figure 4 A schematic diagram of a vehicle-side decryption scenario provided by an embodiment of the present invention;

[0054] Figure 5 A schematic diagram of a scenario of a software upgrade method provided by an embodiment of the present invention;

[0055] Figure 6 A flowchart of another software upgrade method provided by an embodiment of the present invention;

[0056] Figure 7 A flowchart of another software upgrade method provided by an embodiment of the present invention;

[0057] Figure 8 A schematic diagram of the structure of a software upgrade device provided by an embodiment of the present invention;

[0058] Fig. 9 A schematic diagram of the structure of another software upgrade device provided by an embodiment of the present invention;

[0059] Fig.10 A schematic diagram of the structure of a software upgrade system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0060] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0061] OTA (Over-the-Air Technology) is a technology that uses server mobile communication networks and terminal networks to update mobile terminal memory data and improve terminal functions and services.

[0062] According to the upgrade type, automotive OTA is mainly divided into SOTA (Software Over-The-Air) and FOTA (Firmware Over-The-Air), which is to use OTA to upgrade software and firmware. Among them, SOTA is the update and experience optimization of vehicle functions such as in-vehicle navigation, infotainment applications, and human-computer interaction. FOTA updates the vehicle's firmware system through the network, including but not limited to the firmware systems that control the engine, motor, gearbox, chassis suspension, etc.

[0063] When using SOTA for upgrading, how to ensure the security of online software upgrades is a technical problem that technical personnel in this field urgently need to solve.

[0064] In an embodiment of the present invention, a software upgrade method and related devices are provided. In this application, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention transmits the encrypted token and the encrypted upgrade package respectively through encryption operations and two different transmission methods, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0065] On the basis of the above content, an embodiment of the present invention provides a software upgrade method, which mainly adopts SOTA for online software upgrade. SOTA helps users to remotely repair defects, unlock new functions, unlock configurations, remotely check and other functions, improve vehicle efficiency, and save users a lot of time going back and forth to 4S stores. The software upgrade method mainly involves two components: the control end and the vehicle to be upgraded. Among them, the control end can be the cloud, which is mainly used to perform software upgrade control operations, such as determining the software upgrade package, issuing the software upgrade package and other operations. The vehicle to be upgraded refers to the subject that needs to perform software upgrades, and the type, model, and manufacturer of the vehicle to be upgraded are not restricted. There are devices to be upgraded in the vehicle to be upgraded. The devices to be upgraded can be battery controllers, vehicle navigation software, infotainment applications, human-computer interaction software, etc., as long as the software meets the needs of SOTA upgrades.

[0066] Reference Figure 1 , a software upgrade method may include:

[0067] S11. After determining that the identity authentication of the vehicle to be upgraded has passed, the control end obtains software parameter information of the device to be upgraded in the vehicle to be upgraded.

[0068] In actual applications, before upgrading vehicles, the upgrade operations of different controllers of different models can be made into upgrade strategies. For example, the infotainment application of 1,000 B-type vehicles located in area A is upgraded, or the battery controllers of all vehicles in area A are upgraded. The specific upgrade strategy is set by the upgrade personnel.

[0069] After determining the vehicles to be upgraded, i.e. the upgrade scope, an upgrade strategy is created. To ensure that there are no problems during the upgrade process, the upgrade strategy needs to be tested. Only after the test passes, the upgrade operation is allowed. In addition, before the upgrade task is released, a necessary internal review mechanism needs to be implemented.

[0070] After the upgrade strategy and internal review are passed, the upgrade can begin. During the upgrade, the identity of the vehicle to be upgraded needs to be verified in advance to ensure that the current communication of the vehicle to be upgraded is normal and the identity is legal.

[0071] When performing identity verification, in this embodiment, the cloud can communicate with the vehicle to be upgraded to obtain actual verification information of the device to be upgraded in the vehicle to be upgraded, and the actual verification information can be such as seed information. Specifically, the cloud sends a Seed request to the vehicle to be upgraded, and the vehicle to be upgraded sends the Seed request to the device to be upgraded in the vehicle, and the device to be upgraded sends its own Seed to the cloud through the vehicle to be upgraded.

[0072] The vehicle to be upgraded is provided with a main controller TU, which can be a T-BOX (TelematicsBOX, telematics processor). The main controller TU serves as a communication device between the cloud and the device to be upgraded. The cloud sends a Seed request to the main controller TU, and the main controller TU sends the Seed request to the device to be upgraded. The device to be upgraded sends its own Seed to the cloud through the main controller TU.

[0073] The reference verification information of the device to be upgraded stored in the control end, such as the cloud, specifically refers to the legal Seed of the device to be upgraded. If the actual verification information is the same as the reference verification information of the device to be upgraded stored in the control end, it is determined that the identity verification of the vehicle to be upgraded has passed, that is, if the Seed transmitted by the device to be upgraded is the same as the legal Seed of the device to be upgraded stored in the cloud, it means that the identity verification of the device to be upgraded and the vehicle to be upgraded has passed, and the upgrade operation can be performed.

[0074] When performing the specific upgrade operation, it is necessary to determine the upgrade package for this upgrade. At this time, it is necessary to obtain the software parameter information of the device to be upgraded in the vehicle to be upgraded. The software parameter information can be such as the software version number, etc. At this time, the cloud still sends a request to the device to be upgraded through the main controller TU, and the device to be upgraded feeds back the software version number.

[0075] It should be noted that the software version number and Seed can be obtained together to reduce the number of communications.

[0076] S12: The control end determines the software upgrade package of the device to be upgraded based on the software parameter information.

[0077] Specifically, taking the device to be upgraded as an ECU (Electronic Control Unit) as an example, for the new version of the ECU software, the software package is uploaded to the OTA cloud system after testing. Then the OTA cloud will automatically or manually generate a software upgrade package based on the current software package and the latest software version uploaded by the ECU.

[0078] Specifically, refer to Figure 2 , step S12 may include:

[0079] S21. Obtain the latest software version of the device to be upgraded.

[0080] Specifically, the latest software version is the new software version of the above-mentioned ECU, which may be uploaded by a technician, such as V3.0.

[0081] S22: Extract the current software version of the device to be upgraded from the software parameter information.

[0082] Specifically, the current software version number of the device to be upgraded, such as ECU, is directly extracted from the software parameter information, such as V1.0.

[0083] S23: Determine a software upgrade package for the device to be upgraded based on difference information between the latest software version and the current software version.

[0084] Specifically, if the device to be upgraded needs to be upgraded from V1.0 to V3.0, it is necessary to obtain the content different from V1.0 from the software package of V3.0 to obtain the software upgrade package of the device to be upgraded.

[0085] S13, the control end performs an encryption operation on the software upgrade package to obtain an encrypted upgrade package.

[0086] In this embodiment, Figure 3 As shown in the figure, for the software upgrade package Up, the cloud generates an encrypted upgrade package through a symmetric encryption algorithm. Symmetric encryption algorithms can include DES (Data Encryption Standard), 3DES (Triple DES), AES (Advanced Encryption Standard), XOR (exclusive OR), etc. In addition, you can also choose asymmetric encryption algorithms for encryption operations according to your needs.

[0087] S14. The control end generates an encrypted token corresponding to the summary of the encrypted upgrade package.

[0088] Specifically, the cloud upgrades the encrypted package The summary of the encrypted upgrade package is extracted, and then the summary of the encrypted upgrade package, the random password and the symmetric encryption algorithm are used to generate a token in the T=Base64(D,Cm,Rp) method, and the token is uploaded to the PKI (Public Key Infrastructure) server in the cloud. The PKI server encrypts the token to obtain an encrypted token.

[0089] S15. The control end transmits the encrypted token to the vehicle to be upgraded through the OTA server.

[0090] Specifically, in the embodiment of the present invention, in order to improve the reliability of data transmission, a method of transmitting the encrypted token and the encrypted upgrade package separately is adopted.

[0091] For encrypted tokens, Figure 3 The OTA server in the system transmits the data to the main controller TU in the vehicle to be upgraded.

[0092] S16. The control end transmits the encrypted upgrade package to the vehicle to be upgraded through the CDN accelerator.

[0093] Specifically, refer to Figure 3 , for encryption upgrade package , and sends it to the main controller TU in the vehicle to be upgraded through the CDN (Content Delivery Network) accelerator.

[0094] Among them, in this embodiment, the CDN accelerator is used to improve the transmission efficiency.

[0095] It should be noted that the encrypted upgrade package can be transmitted to the vehicle to be upgraded through the CDN accelerator after it is generated, or it can be transmitted successively with the encrypted token. When transmitted successively, there is no requirement for the transmission order, and the encrypted upgrade package can also be transmitted first, and then the encrypted token.

[0096] S17: The vehicle to be upgraded decrypts the encrypted upgrade package to obtain the software upgrade package.

[0097] Specifically, Figure 4 As shown, the decryption process of the vehicle to be upgraded is the reverse operation of the cloud encryption process.

[0098] The main controller TU in the vehicle to be upgraded receives the encrypted upgrade package Afterwards, a symmetric decryption algorithm is used to perform a decryption operation to obtain a software upgrade package.

[0099] S18. The vehicle to be upgraded determines the digest of the encrypted upgrade package corresponding to the encrypted token.

[0100] Specifically, the main controller TU performs a decryption operation on the encrypted token to obtain a token, and performs a decomposition operation on the token to obtain a summary of the encrypted upgrade package, a random password, and a symmetric encryption algorithm. After receiving the encrypted token, the main controller TU performs asymmetric decryption through key security storage to generate a token, and then continues to decompose it into an encrypted upgrade package summary, a random password, and a symmetric encryption algorithm.

[0101] S19. The vehicle to be upgraded performs a software upgrade operation on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0102] In actual applications, the encrypted upgrade package or encrypted token may be illegally tampered with, making the encrypted upgrade package or encrypted token received by the vehicle illegal data. Therefore, it is necessary to verify the encrypted upgrade package and encrypted token. Only after the verification is passed can the upgrade operation be performed to ensure the security of the upgrade.

[0103] During verification, since the token contains a digest of the encrypted upgrade package, the digest can also be extracted from the encrypted upgrade package, so tampering verification can be performed by comparing whether the two digests are identical.

[0104] In specific implementation, a summary is extracted from the encrypted upgrade package, which is called the summary to be verified. The summary to be verified is compared or signed with the summary of the encrypted upgrade package decomposed from the token. If the comparison result is consistent, it means that the encrypted upgrade package and the encrypted token received by the vehicle are correct and have not been tampered with. At this time, the upgrade operation can be performed, and the software upgrade package is sent to the device to be upgraded, so that the device to be upgraded can perform the upgrade operation according to the software upgrade package. During the upgrade process, the device to be upgraded can report the upgrade status in real time or periodically, so that the cloud can understand the upgrade progress in real time. In addition, the cloud can also set the upgrade time. If the device to be upgraded fails to complete the upgrade within the upgrade time, the upgrade exception information is output to the cloud, so that the cloud can re-perform the upgrade operation.

[0105] If the comparison result is inconsistent, it means that at least one of the encrypted upgrade package and the encrypted token received by the vehicle has been tampered with. At this time, the signature verification fails and the upgrade task is terminated.

[0106] In order for those skilled in the art to understand the present invention more clearly, Figure 5 This section describes the upgrade scenarios.

[0107] Specifically, TSP Cloud (TSP: telematics service provider) is the OTA cloud in the embodiment of the present invention. When the cloud is upgrading, it establishes an upgrade task and wakes up the main controller TU. After the main controller TU is awakened, it will wake up the in-vehicle network, send a version number acquisition request and a Seed request to the device to be upgraded in the vehicle through remote diagnosis, and the device to be upgraded will send its own Seed, version number and status to the cloud through the main controller TU.

[0108] The cloud can also request the key from Server PLM (Product Lifecycle Management), and Server PLM will feedback the key to the cloud. The cloud uses the key for symmetric encryption and token encryption operations. Different encryption operations may use different keys, which can be configured according to actual conditions. In addition, the key can be set to take effect at a certain time, so that the key can be updated at a certain interval. Even if the key is leaked, the key value can be adjusted in time.

[0109] The cloud sends the key to the main controller TU, and the main controller TU uses the key to perform corresponding decryption operations.

[0110] In addition, after obtaining the version number of the component, ie, the device to be upgraded, the main controller TU may check the version to ensure the accuracy of the upgrade.

[0111] In addition, the main controller TU receives and downloads the upgrade file package sent from the cloud, uses the key to decrypt and verify the operation, and after the verification is passed, controls the device to be upgraded to perform the upgrade operation.

[0112] In the embodiment of the present invention, the above upgrade process meets the security requirements of SOTA, specifically meeting the security and performance, reliability, availability, and robustness. The security aspects mainly include server-side security, communication security, and security of the upgrade strategy. The embodiment of the present invention mainly involves the following aspects:

[0113] 1. Application security (cloud, mobile): When making software changes on the vehicle, it must be authorized by the user. The user can download and update the software package only after authorization on the mobile phone;

[0114] 2. Data security (server): Encryption operations are performed through the server;

[0115] 3. Communication security: achieved through the development of vehicle-to-cloud communication protocols;

[0116] 4. Two-way authentication: The cloud system and the vehicle-side customer can perform two-way identity authentication to identify each other's identity information; identity authentication can be implemented through Seed;

[0117] 5. Encrypted transmission: The cloud platform and the vehicle client need to develop compatibility based on the standard API (Application Programming Interface) interface, and use signature verification, session symmetric encryption and decryption, etc. to ensure the secure transmission of OTA data, avoid man-in-the-middle attacks, and prevent tampering and replay.

[0118] 6. Signature verification and vehicle-side security: OTA upgrade package storage security on the vehicle side, vehicle-side such as T-BOX, gateway security storage conditions, assist in ensuring the upgrade package is securely stored on the vehicle side, secure signature verification algorithm and key, and provide data and logic security solution instructions for the vehicle-side OTA upgrade logic.

[0119] From the above, it can be seen that the embodiments of the present invention improve the upgrade security from multiple angles and in an all-round manner through application security, data security, communication security, two-way authentication, encrypted transmission, signature verification and vehicle-side security, thereby improving the security of software upgrades.

[0120] In actual scenarios, after the upgrade task is released, the vehicle receives the corresponding upgrade notification. After the upgrade task is released in the cloud, vehicles within the upgrade range will receive an upgrade notification, which includes the upgrade scope, upgrade time, and other content. If you want to make software changes on the vehicle, you must go through user authorization. Only after the user authorizes can the software package be downloaded and the corresponding upgrade operations be performed. The vehicle side obtains the software package and the corresponding upgrade execution script required for this upgrade from the cloud, performs security and integrity checks on the vehicle side, and performs the upgrade after ensuring safety. The installation of the upgrade package is the specific process of the car software upgrade. After the upgrade process is completed, the vehicle side must report the relevant situation to the cloud, whether it succeeds or fails. The return of vehicle-side data is the basis for good management.

[0121] In the embodiment of the present invention, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0122] In addition, the present invention updates the vehicle's software system through the network by remote upgrade, and upgrades the systems such as vehicle navigation, infotainment applications, human-computer interaction, and other vehicle functions and experience optimization, so as to achieve software upgrade and repair. It accelerates the iteration of automobile products, reduces costs (return to the factory for repair), improves user experience, strengthens new points of user communication, and continuously improves the current product development cycle. At the same time, it is necessary to meet the target market's requirements for vehicle information security and increase revenue.

[0123] In addition, during the upgrade process, the security mechanisms of the vehicle's security algorithms, such as signature encryption of the upgrade package in the cloud and signature verification and decryption on the vehicle side, ensure the safe implementation of the upgrade process, while taking into account the security of the vehicle-side software version and data flashing.

[0124] In addition, the SOTA system can identify the current software version of the vehicle and formulate an upgrade strategy suitable for the vehicle.

[0125] Based on the above content, an embodiment of the present invention provides a software upgrade method, which is applied to the control end, referring to Figure 6 , the software upgrade method comprises:

[0126] S31. After determining that the identity authentication of the vehicle to be upgraded has passed, obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded.

[0127] S32: Determine a software upgrade package for the device to be upgraded based on the software parameter information.

[0128] S33: performing an encryption operation on the software upgrade package to obtain an encrypted upgrade package.

[0129] S34: Generate an encrypted token corresponding to the summary of the encrypted upgrade package.

[0130] S35. Transmit the encrypted token to the vehicle to be upgraded through the over-the-air download technology OTA server, and transmit the encrypted upgrade package to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0131] Among them, confirming that the identity authentication of the vehicle to be upgraded has been passed includes:

[0132] The actual verification information of the device to be upgraded in the vehicle to be upgraded is obtained. If the actual verification information is the same as the reference verification information of the device to be upgraded stored in the control end, it is determined that the identity authentication of the vehicle to be upgraded is passed.

[0133] Wherein, determining the software upgrade package of the device to be upgraded based on the software parameter information includes:

[0134] The latest software version of the device to be upgraded is obtained, the current software version of the device to be upgraded is extracted from the software parameter information, and the software upgrade package of the device to be upgraded is determined based on the difference information between the latest software version and the current software version.

[0135] The step of generating an encrypted token corresponding to the summary of the encrypted upgrade package includes:

[0136] Extract the summary of the encrypted upgrade package from the encrypted upgrade package, generate a token using the summary of the encrypted upgrade package, a random password and a symmetric encryption algorithm, and perform an encryption operation on the token to obtain an encrypted token.

[0137] In this embodiment, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0138] Based on the above content, an embodiment of the present invention provides a software upgrade method, which is applied to a vehicle to be upgraded, referring to Figure 7 , the software upgrade method comprises:

[0139] S41, obtaining an encrypted token transmitted by the control end through the server and an encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the digest of the encrypted upgrade package;

[0140] S42, decrypting the encrypted upgrade package to obtain the software upgrade package;

[0141] S43, determining the digest of the encrypted upgrade package corresponding to the encrypted token;

[0142] S44: Based on the software upgrade package and the digest of the encrypted upgrade package, perform a software upgrade operation on the device to be upgraded.

[0143] Wherein, determining the digest of the encrypted upgrade package corresponding to the encrypted token includes:

[0144] Decrypting the encrypted token to obtain a token;

[0145] The token is decomposed to obtain a summary of the encrypted upgrade package.

[0146] The step of performing a software upgrade operation on the device to be upgraded based on the software upgrade package and the digest of the encrypted upgrade package includes:

[0147] Extracting a summary to be verified from the encrypted upgrade package;

[0148] Comparing the summary to be verified with the summary of the encrypted upgrade package;

[0149] If the comparison result is consistent, the software upgrade package is sent to the device to be upgraded, so that the device to be upgraded performs an upgrade operation according to the software upgrade package.

[0150] In this embodiment, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0151] Based on the above-mentioned embodiment of the software upgrade method applied to the control end, another embodiment of the present invention provides a software upgrade device, which is applied to the control end, referring to Figure 8 , the software upgrading device comprises:

[0152] The information acquisition module 11 is used to acquire software parameter information of the device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed;

[0153] An upgrade package determination module 12, configured to determine a software upgrade package for the device to be upgraded based on the software parameter information;

[0154] The encryption module 13 is used to perform an encryption operation on the software upgrade package to obtain an encrypted upgrade package;

[0155] A token generation module 14, used to generate an encrypted token corresponding to the digest of the encrypted upgrade package;

[0156] The upgrade control module 15 is used to transmit the encrypted token to the vehicle to be upgraded through the over-the-air download technology OTA server, and transmit the encrypted upgrade package to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

[0157] The information acquisition module 11 includes:

[0158] The identity authentication module is used to obtain actual verification information of the device to be upgraded in the vehicle to be upgraded. If the actual verification information is the same as the reference verification information of the device to be upgraded stored in the control end, it is determined that the identity authentication of the vehicle to be upgraded is passed.

[0159] The upgrade package determination module 12 is specifically used for:

[0160] The latest software version of the device to be upgraded is obtained, the current software version of the device to be upgraded is extracted from the software parameter information, and the software upgrade package of the device to be upgraded is determined based on the difference information between the latest software version and the current software version.

[0161] Among them, the token generation module 14 includes:

[0162] A first summary extraction submodule, used to extract a summary of the encrypted upgrade package from the encrypted upgrade package;

[0163] A token generation submodule, used to generate a token using the summary of the encryption upgrade package, a random password and a symmetric encryption algorithm;

[0164] The token encryption submodule is used to perform encryption operation on the token to obtain an encrypted token.

[0165] In this embodiment, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0166] It should be noted that, for the working process of each module and sub-module in this embodiment, please refer to the corresponding description in the above embodiment, which will not be repeated here.

[0167] Based on the above-mentioned embodiment of the software upgrade method applied to the vehicle to be upgraded, another embodiment of the present invention provides a software upgrade device, which is applied to the vehicle to be upgraded, referring to Fig. 9 , the software upgrading device comprises:

[0168] The data acquisition module 21 is used to acquire the encrypted token transmitted by the control end through the server and the encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end acquiring the software parameter information of the device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the digest of the encrypted upgrade package;

[0169] A decryption module 22, used to decrypt the encrypted upgrade package to obtain the software upgrade package;

[0170] A digest determination module 23, used to determine the digest of the encrypted upgrade package corresponding to the encrypted token;

[0171] The upgrade processing module 24 is used to perform a software upgrade operation on the device to be upgraded based on the software upgrade package and the digest of the encrypted upgrade package.

[0172] The summary determination module 23 is specifically used for:

[0173] The encrypted token is decrypted to obtain a token, and the token is decomposed to obtain a summary of the encrypted upgrade package.

[0174] The upgrade processing module 24 includes:

[0175] A second digest extraction submodule, used to extract the digest to be verified from the encrypted upgrade package;

[0176] A comparison submodule, used for comparing the summary to be verified with the summary of the encrypted upgrade package;

[0177] The upgrade processing submodule is used to send the software upgrade package to the device to be upgraded if the comparison result is consistent, so that the device to be upgraded performs an upgrade operation according to the software upgrade package.

[0178] In this embodiment, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0179] It should be noted that, for the working process of each module and sub-module in the embodiment of the present invention, please refer to the corresponding description in the above embodiment, which will not be repeated here.

[0180] Another embodiment of the present invention provides a software upgrade system, referring to Fig.10 , including the above-mentioned control terminal 31 and the vehicle 32 to be upgraded.

[0181] In this embodiment, the identity of the vehicle to be upgraded is first verified. If the verification is successful, the subsequent software upgrade operation is performed, thereby ensuring the security of the online software upgrade. During the software upgrade, the software upgrade package is encrypted to obtain an encrypted upgrade package, and an encrypted token corresponding to the summary of the encrypted upgrade package is generated. The encrypted token is transmitted to the vehicle to be upgraded through the OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the CDN accelerator. That is, the present invention uses encryption operations and two different transmission methods to transmit the encrypted token and the encrypted upgrade package respectively, thereby reducing the possibility of the two data being intercepted and cracked at the same time, and further ensuring the security of the online software upgrade.

[0182] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A software upgrade method, characterized in that: Applied to the control end, the software upgrade method includes: After determining that the identity authentication of the vehicle to be upgraded has passed, obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded; Determining a software upgrade package for the device to be upgraded based on the software parameter information; Performing an encryption operation on the software upgrade package to obtain an encrypted upgrade package; Generate an encrypted token corresponding to the summary of the encrypted upgrade package; The encrypted token is transmitted to the vehicle to be upgraded through the over-the-air download technology OTA server, and the encrypted upgrade package is transmitted to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

2. The software upgrade method according to claim 1, characterized in that: Confirm that the identity verification of the vehicle to be upgraded has been passed, including: Obtaining actual verification information of the equipment to be upgraded in the vehicle to be upgraded; If the actual verification information is the same as the reference verification information of the device to be upgraded stored in the control end, it is determined that the identity authentication of the vehicle to be upgraded has passed.

3. The software upgrade method according to claim 1, characterized in that: Determining a software upgrade package for the device to be upgraded based on the software parameter information includes: Obtain the latest software version of the device to be upgraded; Extracting the current software version of the device to be upgraded from the software parameter information; Based on the difference information between the latest software version and the current software version, a software upgrade package for the device to be upgraded is determined.

4. The software upgrade method according to claim 1, characterized in that: Generating an encrypted token corresponding to the digest of the encrypted upgrade package, including: Extracting a digest of the encrypted upgrade package from the encrypted upgrade package; Generate a token using the summary of the encryption upgrade package, a random password and a symmetric encryption algorithm; An encryption operation is performed on the token to obtain an encrypted token.

5. A software upgrade method, characterized in that: Applied to the vehicle to be upgraded, the software upgrade method includes: Obtaining an encrypted token transmitted by the control end through the server and an encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end obtaining software parameter information of the device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the digest of the encrypted upgrade package; Decrypting the encrypted upgrade package to obtain the software upgrade package; Determine a digest of the encrypted upgrade package corresponding to the encrypted token; Based on the software upgrade package and the digest of the encrypted upgrade package, a software upgrade operation is performed on the device to be upgraded.

6. The software upgrade method according to claim 5, characterized in that: Determining a digest of the encrypted upgrade package corresponding to the encrypted token includes: Decrypting the encrypted token to obtain a token; The token is decomposed to obtain a summary of the encrypted upgrade package.

7. The software upgrade method according to claim 5, characterized in that: Based on the software upgrade package and the digest of the encrypted upgrade package, performing a software upgrade operation on the device to be upgraded, including: Extracting a summary to be verified from the encrypted upgrade package; Comparing the summary to be verified with the summary of the encrypted upgrade package; If the comparison result is consistent, the software upgrade package is sent to the device to be upgraded, so that the device to be upgraded performs an upgrade operation according to the software upgrade package.

8. A software upgrade device, characterized in that: Applied to the control end, the software upgrade device comprises: An information acquisition module, used to acquire software parameter information of a device to be upgraded in the vehicle to be upgraded after determining that the identity authentication of the vehicle to be upgraded has passed; An upgrade package determination module, used to determine the software upgrade package of the device to be upgraded based on the software parameter information; An encryption module, used to perform an encryption operation on the software upgrade package to obtain an encrypted upgrade package; A token generation module, used to generate an encrypted token corresponding to the digest of the encrypted upgrade package; The upgrade control module is used to transmit the encrypted token to the vehicle to be upgraded through the over-the-air download technology OTA server, and transmit the encrypted upgrade package to the vehicle to be upgraded through the content distribution network CDN accelerator, so that the vehicle to be upgraded can decrypt the encrypted upgrade package to obtain the software upgrade package, determine the summary of the encrypted upgrade package corresponding to the encrypted token, and perform software upgrade operations on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

9. A software upgrade device, characterized in that: Applied to the vehicle to be upgraded, the software upgrade device comprises: A data acquisition module, used to acquire an encrypted token transmitted by the control end through the server and an encrypted upgrade package transmitted through the CDN accelerator; the encrypted upgrade package is obtained by the control end, after determining that the identity authentication of the vehicle to be upgraded has passed, acquiring software parameter information of the device to be upgraded in the vehicle to be upgraded, determining the software upgrade package of the device to be upgraded based on the software parameter information, and performing an encryption operation on the software upgrade package; the encrypted token corresponds to the summary of the encrypted upgrade package; A decryption module, used to decrypt the encrypted upgrade package to obtain the software upgrade package; A digest determination module, used to determine the digest of the encrypted upgrade package corresponding to the encrypted token; An upgrade processing module is used to perform a software upgrade operation on the device to be upgraded based on the software upgrade package and the summary of the encrypted upgrade package.

10. A software upgrade system, characterized in that: It comprises a control terminal for executing the software upgrade method as described in any one of claims 1 to 4, and a vehicle to be upgraded for executing the software upgrade method as described in any one of claims 5 to 7.

Images