Upgrade package integrity verification system and verification method

Abstract

The invention provides an upgrade package integrity verification system and verification method, and belongs to the technical field of automobile software upgrade, a remote upgrade server calculates an upgrade package abstract and signs to obtain a digital signature, the upgrade package is encrypted, and the remote upgrade server transmits the digital signature, the encrypted upgrade package and a digital certificate to an automobile end; the remote upgrade terminal decrypts the encrypted upgrade package, calculates an abstract of the decrypted upgrade package to obtain a first upgrade package abstract, and transmits the first upgrade package abstract, a digital signature and a digital certificate to a signature verification server; and the signature verification server decrypts the digital certificate and verifies the digital signature to obtain a second upgrade package abstract after confirmation is passed, the signature verification server compares the first upgrade package abstract with the second upgrade package abstract, and the remote upgrade terminal transmits the decrypted upgrade package to the automobile electronic control unit after comparison is passed. According to the invention, the upgrade package verification speed is improved, and the safety of the automobile is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of automobile software upgrade, and in particular, relates to an upgrade package integrity verification system and verification method. Background Art

[0002] When a car is upgraded, the upgrade package needs to be verified to ensure its integrity and avoid potential safety hazards caused by downloading incomplete upgrade packages that affect the operation of the car system. Faced with fierce competition in the automotive industry, automakers are paying more and more attention to the speed of verifying the integrity of car upgrade packages.

[0003] Chinese Patent 109862099A discloses an upgrade verification method, device, terminal and system, wherein the terminal sends an upgrade query request to a control server; the control server sends upgrade download information to the terminal, the upgrade download information includes a download address of an upgrade package, upgrade version information and first verification information, and the first verification information is used to verify the download source of the upgrade package; the terminal sends a download request for the upgrade package corresponding to the upgrade version information to the download server based on the download address; the download server sends the upgrade package and second verification information to the terminal, and the second verification information is used to verify the type and upgrade version of the upgrade package; the terminal verifies the first verification information; when the verification passes, the terminal verifies the second verification information; when the verification of the second verification information passes, the terminal performs an upgrade operation based on the upgrade package.

[0004] The upgrade package verification speed of the existing technology is limited by the computing power of the car itself, which has a great impact on the speed of the car upgrade package integrity verification. Summary of the invention

[0005] The present invention aims to provide an upgrade package integrity verification system and verification method to achieve the technical purpose of improving the integrity verification speed of automobile software upgrade packages.

[0006] In order to achieve the above object, the technical solution adopted by the present invention is:

[0007] The present invention provides an upgrade package integrity verification system, comprising a remote upgrade server, a signature verification server and a vehicle end, wherein the output end of the remote upgrade server is connected to the input end of the vehicle end, the output end of the vehicle end is connected to the input end of the signature verification server, and the output end of the signature verification server is connected to the input end of the vehicle end.

[0008] The remote upgrade server outputs the upgrade package information to the vehicle end, the vehicle end outputs the upgrade verification information to the signature verification server, and the signature verification server outputs the verification result to the vehicle end.

[0009] The vehicle end includes a remote upgrade terminal and an automobile electronic control unit. The input end of the remote upgrade terminal is connected to the output end of the remote upgrade server, the output end of the remote upgrade terminal is connected to the input end of the automobile electronic control unit, the output end of the remote upgrade terminal is connected to the input end of the signature verification server, and the output end of the signature verification server is connected to the input end of the remote upgrade terminal.

[0010] The remote upgrade terminal passes through the gateway and is connected to the automobile electronic control unit through a bus.

[0011] The remote upgrade server is connected to the vehicle end via a mobile communication network, and the signature verification server is connected to the vehicle end via a mobile communication network.

[0012] The present invention provides an upgrade package integrity verification method:

[0013] Step 1: The remote upgrade server calculates the upgrade package digest and signs the upgrade package digest with the first private key to obtain a digital signature. The remote upgrade server encrypts the upgrade package with the second public key. The remote upgrade server transmits the digital signature, the encrypted upgrade package and the digital certificate to the vehicle end.

[0014] Step 2: The remote upgrade terminal in the vehicle end decrypts the encrypted upgrade package using the second private key, calculates the upgrade package digest for the decrypted upgrade package to obtain the first upgrade package digest, and the remote upgrade terminal transmits the first upgrade package digest, the digital signature, and the digital certificate to the signature verification server;

[0015] Step 3: The signature verification server decrypts the digital certificate using the public key of the certificate issuing agency to determine whether the digital certificate is the digital certificate of the remote upgrade server. After confirmation, the signature verification server verifies the digital signature using the first public key to obtain the second upgrade package digest. The signature verification server compares the first upgrade package digest with the second upgrade package digest and outputs the comparison result to the remote upgrade terminal.

[0016] Step 4: The remote upgrade terminal obtains the comparison result. When the first upgrade package digest and the second upgrade package digest are the same, the remote upgrade terminal transmits the decrypted upgrade package to the vehicle electronic control unit.

[0017] The first public key and the first private key are generated by the remote upgrade server, and the second public key and the second private key are generated by the vehicle end.

[0018] A digital certificate is generated by a certificate issuing authority using the certificate issuing authority's private key.

[0019] The remote upgrade server communicates with the remote upgrade terminal through the mobile communication network, and the signature verification server communicates with the remote upgrade terminal through the mobile communication network.

[0020] The technical effects of the present invention are:

[0021] (1) The present invention calculates the upgrade package digest before signing the upgrade package, and then signs the digest, which reduces the amount of calculation and speeds up the signing speed.

[0022] (2) The present invention performs the signature verification operation in the signature verification server, which reduces the computing power requirements of the vehicle side and improves the speed of the vehicle side's integrity verification of the upgrade package.

[0023] (3) The present invention verifies whether the sender of the upgrade package is the remote upgrade server through digital certificate technology, thereby preventing other devices from forging information to transmit the upgrade package, reducing security vulnerabilities and improving the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] This specification includes the following drawings, which show the following contents:

[0025] Figure 1 A logical structure diagram of an upgrade package integrity verification system and verification method of the present invention;

[0026] Figure 1 The markings are: 1. Remote upgrade server; 2. Signature verification server; 3. Vehicle end. DETAILED DESCRIPTION

[0027] The specific implementation methods of the present invention are further explained in detail below by describing the embodiments with reference to the accompanying drawings, with the aim of helping those skilled in the art to have a more complete, accurate and in-depth understanding of the inventive concept and technical solution of the present invention and facilitating their implementation.

[0028] The present invention provides an upgrade package integrity verification system, comprising a remote upgrade server 1, a signature verification server 2 and a vehicle end 3, wherein the output end of the remote upgrade server 1 is connected to the input end of the vehicle end 3, the output end of the vehicle end 3 is connected to the input end of the signature verification server 2, and the output end of the signature verification server 2 is connected to the input end of the vehicle end 3. The remote upgrade server 1 outputs upgrade package information to the vehicle end 3, the vehicle end 3 outputs upgrade verification information to the signature verification server 2, and the signature verification server 2 outputs the verification result to the vehicle end 3. The vehicle end 3 comprises a remote upgrade terminal and an automotive electronic control unit, wherein the input end of the remote upgrade terminal is connected to the output end of the remote upgrade server 1, the output end of the remote upgrade terminal is connected to the input end of the automotive electronic control unit, the output end of the remote upgrade terminal is connected to the input end of the signature verification server 2, and the output end of the signature verification server 2 is connected to the input end of the remote upgrade terminal. The remote upgrade terminal passes through a gateway and is then connected to the automotive electronic control unit through a bus. The remote upgrade server 1 is connected to the vehicle end 3 through a mobile communication network, and the signature verification server 2 is connected to the vehicle end 3 through a mobile communication network.

[0029] The present invention provides an upgrade package integrity verification method:

[0030] Step 1: The remote upgrade server 1 calculates the upgrade package digest and signs the upgrade package digest with the first private key to obtain a digital signature. The remote upgrade server 1 encrypts the upgrade package with the second public key. The remote upgrade server 1 transmits the digital signature, the encrypted upgrade package and the digital certificate to the vehicle end 3;

[0031] Step 2: The remote upgrade terminal in the vehicle end 3 decrypts the encrypted upgrade package using the second private key, calculates the upgrade package digest of the decrypted upgrade package to obtain the first upgrade package digest, and the remote upgrade terminal transmits the first upgrade package digest, the digital signature and the digital certificate to the signature verification server 2;

[0032] Step 3: The signature verification server 2 decrypts the digital certificate using the public key of the certificate issuing agency, determines whether the digital certificate is the digital certificate of the remote upgrade server 1, and after confirmation, the signature verification server 2 verifies the digital signature using the first public key to obtain the second upgrade package digest. The signature verification server 2 compares the first upgrade package digest with the second upgrade package digest, and outputs the comparison result to the remote upgrade terminal;

[0033] Step 4: The remote upgrade terminal obtains the comparison result. When the first upgrade package digest and the second upgrade package digest are the same, the remote upgrade terminal transmits the decrypted upgrade package to the vehicle electronic control unit.

[0034] The first public key and the first private key are generated by the remote upgrade server 1, and the second public key and the second private key are generated by the vehicle end 3. The digital certificate is generated by the certificate issuing authority using the private key of the certificate issuing authority. The remote upgrade server 1 communicates with the remote upgrade terminal through the mobile communication network, and the signature verification server 2 communicates with the remote upgrade terminal through the mobile communication network.

[0035] The following is a detailed description of an upgrade package integrity verification system and verification method of the present invention.

[0036] The present invention provides an upgrade package integrity verification system comprising a remote upgrade server 1, a signature verification server 2 and a vehicle end 3, wherein the remote upgrade server 1 is used to receive the upgrade package uploaded by the automobile manufacturer and transmit the software upgrade package to the vehicle end 3. The signature verification server 2 is used to verify whether the sender of the upgrade package is the remote upgrade server 1 and whether the upgrade package is complete.

[0037] The vehicle end 3 includes a remote upgrade terminal and a vehicle electronic control unit. The remote upgrade terminal adopts TBox, that is, an Android system box with communication function, including a SIM card. The remote upgrade terminal is used to cooperate with the signature verification server 2 to verify whether the upgrade package is complete, and to transmit the verified upgrade package to the vehicle electronic control unit; the vehicle electronic control unit is used to receive the upgrade package and complete the software upgrade. In the embodiment of the present invention, the vehicle electronic control unit adopts the MED17 series ECU.

[0038] The output end of the remote upgrade server 1 in the present invention is connected to the input end of the remote upgrade terminal through a mobile communication network, the remote upgrade terminal is connected to the signature verification server 2 through the mobile communication network, and the remote upgrade terminal is connected to the vehicle electronic control unit through a gateway and a CAN bus.

[0039] The detailed process of an upgrade package integrity verification method of the present invention is as follows:

[0040] Before the verification begins, the remote upgrade server 1 generates a first public key and a first private key, and the remote upgrade terminal in the vehicle end 3 generates a second public key and a second private key; the remote upgrade server 1 transmits the public key of the remote upgrade server 1 to the signature verification server 2, and the remote upgrade terminal transmits the public key of the remote upgrade terminal to the remote upgrade server 1; the public key and private key generated by the same device are a pair, the public key is a public key, and the device can receive the public key through the wireless network; when transmitting information, the sender encrypts the information through the public key of the receiver, and the receiver decrypts it through its own private key after receiving the encrypted information; when verifying the integrity of the information, the sender signs with its own private key to obtain a digital signature, and after receiving the digital signature, the receiver verifies the digital signature through the public key of the sender to verify the integrity of the information.

[0041] When the car is upgrading its software, the remote upgrade server 1 calculates the upgrade package digest and signs the upgrade package digest with the first private key to obtain a digital signature. The remote upgrade server 1 encrypts the upgrade package with the second public key. The remote upgrade server 1 transmits the digital signature, the encrypted upgrade package and the digital certificate of the remote upgrade server 1 to the vehicle end 3, specifically to the remote upgrade terminal in the vehicle end 3. The present invention calculates the upgrade package digest before signing the upgrade package, and then signs the digest, which reduces the amount of calculation and speeds up the signing speed.

[0042] The remote upgrade terminal decrypts the encrypted upgrade package using the second private key, and calculates the upgrade package digest of the decrypted upgrade package to obtain the first upgrade package digest. The remote upgrade terminal transmits the first upgrade package digest, the digital signature input by the remote upgrade server 1, and the digital certificate of the remote upgrade server 1 to the signature verification server 2.

[0043] The signature verification server 2 decrypts the digital certificate through the public key of the certificate issuing agency, obtains the identity information in the digital certificate, and determines whether the digital certificate is the digital certificate of the remote upgrade server 1. When the signature verification server 2 confirms that the digital certificate is the digital certificate of the remote upgrade server 1, the signature verification server 2 verifies the digital signature through the first public key to obtain the second upgrade package summary. The signature verification server 2 compares the first upgrade package summary with the second upgrade package summary, and outputs the comparison result to the remote upgrade terminal. The present invention performs the verification operation in the signature verification server 2, reduces the computing power requirements of the vehicle end 3, and improves the speed of the vehicle end 3 to verify the integrity of the upgrade package.

[0044] The remote upgrade terminal obtains the comparison result from the signature verification server 2. When the first upgrade package digest and the second upgrade package digest are the same, the remote upgrade terminal transmits the decrypted upgrade package to the vehicle electronic control unit.

[0045] The digital certificate is generated by the certificate issuing agency through the private key of the certificate issuing agency. Specifically, the remote upgrade server 1 inputs the identity information and public key into the certificate issuing agency, and the certificate issuing agency encrypts the certificate issuing agency information, validity period, public key, and the identity information of the holder through the private key to generate a digital certificate, and then transmits the digital certificate to the remote upgrade server 1. The present invention verifies whether the sender of the upgrade package is the remote upgrade server 1 through the digital certificate technology, prevents other devices from forging information to transmit the upgrade package, reduces security vulnerabilities, and improves the security of data transmission.

[0046] The present invention is described above by way of example in conjunction with the accompanying drawings. Obviously, the specific implementation of the present invention is not limited to the above-mentioned methods. As long as various non-substantial improvements are made using the method concept and technical solution of the present invention; or the above concept and technical solution of the present invention are directly applied to other occasions without improvement, they are all within the protection scope of the present invention.

Claims

1. An upgrade package integrity verification system, characterized in that: It includes a remote upgrade server, a signature verification server and a vehicle end, wherein the output end of the remote upgrade server is connected to the input end of the vehicle end, the output end of the vehicle end is connected to the input end of the signature verification server, and the output end of the signature verification server is connected to the input end of the vehicle end.

2. The upgrade package integrity verification system according to claim 1, characterized in that: The remote upgrade server outputs the upgrade package information to the vehicle end, the vehicle end outputs the upgrade verification information to the signature verification server, and the signature verification server outputs the verification result to the vehicle end.

3. The upgrade package integrity verification system according to claim 1, characterized in that: The vehicle end includes a remote upgrade terminal and an automobile electronic control unit. The input end of the remote upgrade terminal is connected to the output end of the remote upgrade server, the output end of the remote upgrade terminal is connected to the input end of the automobile electronic control unit, the output end of the remote upgrade terminal is connected to the input end of the signature verification server, and the output end of the signature verification server is connected to the input end of the remote upgrade terminal.

4. The upgrade package integrity verification system according to claim 3, characterized in that: The remote upgrade terminal passes through the gateway and is connected to the automobile electronic control unit through a bus.

5. The upgrade package integrity verification system according to claim 1, characterized in that: The remote upgrade server is connected to the vehicle end via a mobile communication network, and the signature verification server is connected to the vehicle end via a mobile communication network.

6. A method for checking the integrity of an upgrade package according to any one of claims 1 to 5, characterized in that: Step 1: The remote upgrade server calculates the upgrade package digest and signs the upgrade package digest with the first private key to obtain a digital signature. The remote upgrade server encrypts the upgrade package with the second public key. The remote upgrade server transmits the digital signature, the encrypted upgrade package and the digital certificate to the vehicle end. Step 2: The remote upgrade terminal in the vehicle end decrypts the encrypted upgrade package using the second private key, calculates the upgrade package digest for the decrypted upgrade package to obtain the first upgrade package digest, and the remote upgrade terminal transmits the first upgrade package digest, the digital signature, and the digital certificate to the signature verification server; Step 3: The signature verification server decrypts the digital certificate using the public key of the certificate issuing agency to determine whether the digital certificate is the digital certificate of the remote upgrade server. After confirmation, the signature verification server verifies the digital signature using the first public key to obtain the second upgrade package digest. The signature verification server compares the first upgrade package digest with the second upgrade package digest and outputs the comparison result to the remote upgrade terminal. Step 4: The remote upgrade terminal obtains the comparison result. When the first upgrade package digest and the second upgrade package digest are the same, the remote upgrade terminal transmits the decrypted upgrade package to the vehicle electronic control unit.

7. The upgrade package integrity verification method according to claim 6, characterized in that: The first public key and the first private key are generated by the remote upgrade server, and the second public key and the second private key are generated by the vehicle end.

8. The upgrade package integrity verification method according to claim 6, characterized in that: A digital certificate is generated by a certificate issuing authority using the certificate issuing authority's private key.

9. The upgrade package integrity verification method according to claim 6, characterized in that: The remote upgrade server communicates with the remote upgrade terminal through the mobile communication network, and the signature verification server communicates with the remote upgrade terminal through the mobile communication network.

Images