Automobile OTA automatic upgrading method and system

Abstract

The invention provides an automobile OTA automatic upgrading method and system, an automobile terminal uses a software version number of firmware, an OTA upgrading log and current state information of the automobile terminal as first state information and sends the first state information to an OTA cloud server, and the OTA cloud server judges the first state information; when the first state information is the first abnormal information, discarding the first state information; when the first state information is second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal to verify whether the first state information is abnormal or not; according to the invention, the security of automobile terminal software upgrading can be improved, and the overall operation efficiency of the system is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of automobile software upgrade, and in particular to an automobile OTA automatic upgrade method and system. Background Art

[0002] With the rapid development of intelligent connected cars, there are many software systems (hereinafter referred to as firmware) in car terminals. In addition, with the frequent occurrence of network attacks, in order to solve the security risks caused by software vulnerabilities, the software upgrade and update speed is relatively fast. However, during the software upgrade process of the car terminal, how to ensure the security of the data interaction between the car terminal and the OTA cloud server, and how to improve the efficiency of the software upgrade process are urgent problems to be solved. Based on this, this paper proposes a method and system for automatic OTA upgrade of automobiles. Summary of the invention

[0003] In view of the above problems, the present invention proposes an automobile OTA automatic upgrade method, which specifically includes the following steps: S1. The car terminal sends the first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal and executes step S3; When the first status information is normal information, executing step S5; S3. After the car terminal receives the first verification command, it sends a first feedback command to the OTA cloud server; S4. The OTA cloud server receives the first feedback instruction, and determines whether the first status information is first abnormal information or normal information according to the first feedback instruction; When the first status information is normal information, executing step S5; When the first status information is first abnormal information, the OTA cloud server discards the first status information; S5. The OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the vehicle terminal; S6. After the vehicle terminal receives the latest version of the software package, the software upgrade is completed at the vehicle terminal.

[0004] Further, the first abnormal information is specifically: the first state information is attack information; The second abnormal information specifically includes: the first state information is suspected attack information; The normal information specifically refers to: the first state information is non-abnormal information.

[0005] The present invention also proposes an automobile OTA automatic upgrade system, the system comprising an automobile terminal and an OTA cloud server; The automobile terminal sends first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; The OTA cloud server receives the first status information, and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal; after receiving the first verification instruction, the automobile terminal sends a first feedback instruction to the OTA cloud server; the OTA cloud server receives the first feedback instruction, and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction; when the first status information is normal information, the OTA cloud server obtains the latest version software package corresponding to each firmware, and sends the latest version software package to the automobile terminal; after receiving the latest version software package, the automobile terminal completes the software upgrade at the automobile terminal; when the first status information is the first abnormal information, the OTA cloud server discards the first status information; When the first status information is normal information, the OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the automobile terminal; after the automobile terminal receives the latest version of the software package, the software upgrade is completed at the automobile terminal.

[0006] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above description and other purposes, features and advantages of the present invention more obvious and easy to understand, the preferred embodiments are specifically cited and described in detail as follows. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings: Figure 1 This is a structural diagram of an automobile OTA automatic upgrade system provided by the present invention. DETAILED DESCRIPTION

[0008] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0009] In the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be connected, detachably connected, or integrated; it can be mechanically connected or electrically connected; it can be directly connected or indirectly connected through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0010] Embodiment 1 The present invention proposes an automobile OTA automatic upgrade method, which specifically comprises the following steps: S1. The car terminal sends the first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal and executes step S3; When the first status information is normal information, executing step S5; S3. After the car terminal receives the first verification command, it sends a first feedback command to the OTA cloud server; S4. The OTA cloud server receives the first feedback instruction, and determines whether the first status information is first abnormal information or normal information according to the first feedback instruction; When the first status information is normal information, executing step S5; When the first status information is first abnormal information, the OTA cloud server discards the first status information; S5. The OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the vehicle terminal; S6. After the vehicle terminal receives the latest version of the software package, the software upgrade is completed at the vehicle terminal.

[0011] Further, the first abnormal information is specifically: the first state information is attack information; The second abnormal information specifically includes: the first state information is suspected attack information; The normal information specifically refers to: the first state information is non-abnormal information.

[0012] Furthermore, step S1 specifically includes the following steps: S11. The car terminal collects the software version number corresponding to each firmware in the car terminal at a preset time T, obtains the OTA upgrade log of each firmware, and collects the current status information of the car terminal; The data format of the firmware OTA upgrade log is: {( , , ), ( , , ),…, ( , , ),…,( , , )}; Each firmware OTA upgrade log includes one or more logs; in, , , are the firmware name, software version number of this upgrade, and status of this upgrade corresponding to the jth log in a firmware OTA upgrade log; m is the total number of logs in the firmware OTA upgrade log; The current upgrade status is 0 or 1. If the current upgrade is unsuccessful, the current upgrade status is 0; if the current upgrade is successful, the current upgrade status is 1. The current status information of the vehicle terminal includes: the vehicle terminal's travel speed, current location, remaining fuel, current fuel consumption, current acceleration, current window status, and current headlight status; The current acceleration is based on the current time of the vehicle terminal Speed ​​and car terminal The speed at the moment is calculated; where the current acceleration = | the current moment of the vehicle terminal Speed ​​- Automotive Terminal Speed ​​of moment| / ; The current window state is: open or closed; The current vehicle light status is: on or off; S12. The car terminal calculates the hash value of the OTA upgrade log of each firmware for the OTA upgrade log of the firmware; S13. The car terminal combines the software version number corresponding to each firmware, the hash value of the OTA upgrade log of each firmware, and the current status information of the car terminal to form the first status information; The data format of the first status information is: {VIN number, ( , , ),( , , ),…,( , , ),…,( , , ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration, current window status, current light status, }; Among them, VIN number is the VIN number of the car terminal; , , are respectively the firmware name of the i-th firmware in the car terminal, the software version number corresponding to the firmware, and the hash value of the firmware's OTA upgrade log; n is the total number of firmware in the car terminal; is the sending time of the first status information; S14. The automobile terminal uses the public key of the OTA cloud server to encrypt the first state information, and sends the encrypted first state information to the OTA cloud server.

[0013] Furthermore, step S2 specifically includes the following steps: S21. After receiving the encrypted first state information, the OTA cloud server uses the private key to decrypt the encrypted first state information to obtain the first state information; S22. The OTA cloud server obtains the time when the first status information is received , and calculate The first state information The difference between When the difference is greater than or equal to the preset threshold , determining that the first state information is the first abnormal information; When the difference is less than the preset threshold When , execute step S23; S23. The OTA cloud server obtains the cloud OTA upgrade log of each firmware in the first status information, and calculates the hash value of the cloud OTA upgrade log of each firmware; Among them, the cloud OTA upgrade log of each firmware is stored in the OTA cloud server, and the cloud OTA upgrade log of each firmware is consistent with the OTA upgrade log of each firmware in the car terminal; S24. The OTA cloud server compares the hash value of the cloud OTA upgrade log of each firmware with the hash value of the OTA upgrade log of the corresponding firmware in the first status information to see if they are equal. If they are equal, execute step S26; otherwise, execute step S25; S25. The OTA cloud server determines that the first status information is the first abnormal information, and the OTA cloud server discards the first status information; S26. The OTA cloud server obtains the software version number of the latest successful upgrade of each firmware from the cloud OTA upgrade log of each firmware as the current software version number of the firmware; S27. The OTA cloud server determines whether the current software version number of each firmware is consistent with the software version number of the corresponding firmware in the first state information; if all are consistent, the first state information is determined to be normal information; otherwise, the first state information is determined to be the second abnormal information, and the OTA cloud server sends a first verification instruction to the vehicle terminal; Wherein, the first verification instruction includes: verification instruction, random number P; The random number P is greater than or equal to 1 and less than or equal to 10.

[0014] Furthermore, step S3 specifically includes the following steps: S31. After the car terminal receives the first verification instruction, it calculates the remainder Q of the random number P divided by 3; When the remainder Q=0, the vehicle terminal combines the software version number corresponding to each firmware and the current status information of the first group of vehicle terminals to form first combined data as the first feedback instruction; When the remainder Q=1, the vehicle terminal combines the software version number corresponding to each firmware with the current status information of the second group of vehicle terminals to form second combined data as the first feedback instruction; When the remainder Q=2, the vehicle terminal combines the software version number corresponding to each firmware and the current status information of the third group of vehicle terminals to form third combined data as the first feedback instruction; The first combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration}; The second combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current position, remaining fuel, current window status, current light status}; The third combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current fuel consumption, current acceleration, current window status, current light status}; S32. The automobile terminal uses the public key of the OTA cloud server to encrypt the first feedback instruction, and sends the encrypted first feedback instruction to the OTA cloud server.

[0015] Furthermore, step S4 specifically includes the following steps: S41. The OTA cloud server uses the private key to decrypt the received encrypted first feedback instruction to obtain the first feedback instruction; S42. OTA cloud server calculates the remainder of the random number P divided by 3 ; When the remainder =0, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current position, remaining fuel, current fuel consumption, and current acceleration; if so, execute step S43; if not, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the automobile terminal again; When the remainder =1, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, the current position, the remaining fuel, the current window status, and the current light status; if so, execute step S43; if not, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the automobile terminal again; When the remainder =2, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, the current fuel consumption, the current acceleration, the current window status, and the current light status; if so, execute step S43; if not, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the automobile terminal again; S43. The OTA cloud server determines whether the data of the current state information of the automobile terminal in the first feedback instruction is consistent with the data of the current state information of the automobile terminal corresponding to the first state information; if they are consistent, execute step S44; if they are inconsistent, determine that the first state information is the first abnormal information, and the OTA cloud server discards the first state information; S44. The OTA cloud server determines whether the software version number of each firmware in the first feedback instruction is consistent with the software version number of each firmware in the first status information; if all are consistent, the first status information is judged to be normal information; otherwise, the first status information is judged to be the first abnormal information, and the OTA cloud server discards the first status information.

[0016] Further, the OTA cloud server determines whether the various data of the current state information of the automobile terminal in the first feedback instruction are consistent with the various data of the current state information of the automobile terminal corresponding to the first state information, specifically including: When the current status information of the automobile terminal is any one of the data items of driving speed, remaining fuel, current fuel consumption, and current acceleration, it is determined whether the difference between the data corresponding to the data item in the first feedback instruction and the data corresponding to the data item in the first status information is less than a preset threshold value corresponding to the data item; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When the current status information of the automobile terminal is any one of the data items of the current position, the current window status, and the current light status, it is determined whether the content corresponding to the data item in the first feedback instruction is the same as the content corresponding to the data item in the first status information; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When more than 80% of the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, it is judged that the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, otherwise they are inconsistent.

[0017] Furthermore, step S5 specifically includes the following steps: S51. The OTA cloud server obtains the latest version of the software package corresponding to each firmware; S52.OTA cloud server uses KMS key to perform AES256 symmetric encryption on the latest version software package corresponding to each firmware; S53. The OTA cloud server sends the encrypted latest version software package corresponding to each firmware to the vehicle terminal.

[0018] Furthermore, step S6 specifically includes the following steps: S61. After the car terminal receives the latest version of the encrypted software package corresponding to each firmware, it performs AES256 symmetric decryption on the latest version of the software package corresponding to each firmware to obtain the latest version of the software package corresponding to each firmware; S62. The car terminal upgrades each firmware. After the upgrade is completed, the firmware name, the software version number of this upgrade, and the upgrade status are associated and stored in the firmware OTA upgrade log; S63. The automobile terminal feeds back the upgrade status of each firmware to the OTA cloud server, and the OTA cloud server associates and stores the firmware name, the software version number of this upgrade, and the upgrade status in the cloud OTA upgrade log of each firmware in the OTA cloud server.

[0019] Embodiment 2 An automotive OTA automatic upgrade system, see Figure 1 , the system includes a car terminal and an OTA cloud server; The automobile terminal sends first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; The OTA cloud server receives the first status information, and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal; after receiving the first verification instruction, the automobile terminal sends a first feedback instruction to the OTA cloud server; the OTA cloud server receives the first feedback instruction, and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction; when the first status information is normal information, the OTA cloud server obtains the latest version software package corresponding to each firmware, and sends the latest version software package to the automobile terminal; after receiving the latest version software package, the automobile terminal completes the software upgrade at the automobile terminal; when the first status information is the first abnormal information, the OTA cloud server discards the first status information; When the first status information is normal information, the OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the automobile terminal; after the automobile terminal receives the latest version of the software package, the software upgrade is completed at the automobile terminal.

[0020] The beneficial effects of the invention are as follows: 1. The automobile terminal of the present invention sends the software version number of each firmware, the hash value of the OTA upgrade log and the current status information of the automobile terminal as the first status information to the OTA cloud server. The OTA cloud server determines whether there is an abnormal attack on the received first status information based on the difference between the sending time and the receiving time, the hash value of the OTA upgrade log, and the software version number of each firmware in the above three-stage judgment method, thereby improving the security protection of the automobile terminal information and avoiding simulated attacks on the OTA cloud server.

[0021] 2. In the present invention, for determining whether there is an abnormal attack in the first state information, three levels of first abnormal information, second abnormal information, and normal information are set, and the first state information is effectively identified and subsequently processed, thereby improving the overall operating efficiency of the system.

[0022] 3. In the present invention, when the first status information is determined to be the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal, and the automobile terminal feeds back data items of the current status information of different groups of automobile terminals to the OTA cloud server according to random numbers, thereby further avoiding the possibility of external attacks.

[0023] 4. In the present invention, after receiving the first feedback instruction of the automobile terminal in the OTA cloud server, the current status information of the automobile terminal, that is, the current driving behavior and habits of the automobile terminal, is used as a condition for determining whether the first feedback instruction and the first status information have been tampered with or attacked, thereby improving the security of the software upgrade system.

[0024] The above is only a preferred specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A method for automatic OTA upgrade of an automobile, characterized in that: The method specifically comprises the following steps: S1. The car terminal sends the first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal and executes step S3; When the first status information is normal information, executing step S5; S3. After the car terminal receives the first verification command, it sends a first feedback command to the OTA cloud server; S4. The OTA cloud server receives the first feedback instruction, and determines whether the first status information is first abnormal information or normal information according to the first feedback instruction; When the first status information is normal information, executing step S5; When the first status information is first abnormal information, the OTA cloud server discards the first status information; S5. The OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the vehicle terminal; S6. After the vehicle terminal receives the latest version of the software package, the software upgrade is completed at the vehicle terminal.

2. The method for OTA automatic upgrade of an automobile according to claim 1, characterized in that: The first abnormal information is specifically: the first state information is attack information; The second abnormal information specifically includes: the first state information is suspected attack information; The normal information specifically refers to: the first state information is non-abnormal information.

3. The method for automatic OTA upgrade of an automobile according to claim 1, characterized in that: Step S1 specifically includes the following steps: S11. The car terminal collects the software version number corresponding to each firmware in the car terminal at a preset time T, obtains the OTA upgrade log of each firmware, and collects the current status information of the car terminal; The data format of the firmware OTA upgrade log is: {( , , ), ( , , ),…, ( , , ),…,( , , )}; Each firmware OTA upgrade log includes one or more logs; in, , , are the firmware name, software version number of this upgrade, and status of this upgrade corresponding to the jth log in a firmware OTA upgrade log; m is the total number of logs in the firmware OTA upgrade log; The current upgrade status is 0 or 1. If the current upgrade is unsuccessful, the current upgrade status is 0; if the current upgrade is successful, the current upgrade status is 1. The current status information of the vehicle terminal includes: the vehicle terminal's travel speed, current location, remaining fuel, current fuel consumption, current acceleration, current window status, and current headlight status; The current acceleration is based on the current time of the vehicle terminal Speed ​​and car terminal The speed at the moment is calculated; where the current acceleration = | the current moment of the vehicle terminal Speed ​​- Automotive Terminal Speed ​​of moment| / ; The current window state is: open or closed; The current vehicle light status is: on or off; S12. The car terminal calculates the hash value of the OTA upgrade log of each firmware for the OTA upgrade log of the firmware; S13. The car terminal combines the software version number corresponding to each firmware, the hash value of the OTA upgrade log of each firmware, and the current status information of the car terminal to form the first status information; The data format of the first status information is: {VIN number, ( , , ),( , , ),…,( , , ),…,( , , ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration, current window status, current light status, }; Among them, VIN number is the VIN number of the car terminal; , , are respectively the firmware name of the i-th firmware in the car terminal, the software version number corresponding to the firmware, and the hash value of the firmware's OTA upgrade log; n is the total number of firmware in the car terminal; is the sending time of the first status information; S14. The automobile terminal uses the public key of the OTA cloud server to encrypt the first state information, and sends the encrypted first state information to the OTA cloud server.

4. The method for automatic OTA upgrade of an automobile according to claim 3, characterized in that: Step S2 specifically includes the following steps: S21. After receiving the encrypted first state information, the OTA cloud server uses the private key to decrypt the encrypted first state information to obtain the first state information; S22. The OTA cloud server obtains the time when the first status information is received , and calculate The first state information The difference between When the difference is greater than or equal to the preset threshold , determining that the first state information is the first abnormal information; When the difference is less than the preset threshold When , execute step S23; S23. The OTA cloud server obtains the cloud OTA upgrade log of each firmware in the first status information, and calculates the hash value of the cloud OTA upgrade log of each firmware; Among them, the cloud OTA upgrade log of each firmware is stored in the OTA cloud server, and the cloud OTA upgrade log of each firmware is consistent with the OTA upgrade log of each firmware in the car terminal; S24. The OTA cloud server compares the hash value of the cloud OTA upgrade log of each firmware with the hash value of the OTA upgrade log of the corresponding firmware in the first status information to see if they are equal. If they are equal, execute step S26; otherwise, execute step S25; S25. The OTA cloud server determines that the first status information is the first abnormal information, and the OTA cloud server discards the first status information; S26. The OTA cloud server obtains the software version number of the latest successful upgrade of each firmware from the cloud OTA upgrade log of each firmware as the current software version number of the firmware; S27. The OTA cloud server determines whether the current software version number of each firmware is consistent with the software version number of the corresponding firmware in the first state information; if all are consistent, the first state information is determined to be normal information; otherwise, the first state information is determined to be the second abnormal information, and the OTA cloud server sends a first verification instruction to the vehicle terminal; Wherein, the first verification instruction includes: verification instruction, random number P; The random number P is greater than or equal to 1 and less than or equal to 10.

5. The method for automatic OTA upgrade of an automobile according to claim 4, characterized in that: Step S3 specifically includes the following steps: S31. After the car terminal receives the first verification instruction, it calculates the remainder Q of the random number P divided by 3; When the remainder Q=0, the vehicle terminal combines the software version number corresponding to each firmware and the current status information of the first group of vehicle terminals to form first combined data as the first feedback instruction; When the remainder Q=1, the vehicle terminal combines the software version number corresponding to each firmware with the current status information of the second group of vehicle terminals to form second combined data as the first feedback instruction; When the remainder Q=2, the vehicle terminal combines the software version number corresponding to each firmware and the current status information of the third group of vehicle terminals to form third combined data as the first feedback instruction; The first combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration}; The second combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current position, remaining fuel, current window status, current light status}; The third combination of data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current fuel consumption, current acceleration, current window status, current light status}; S32. The automobile terminal uses the public key of the OTA cloud server to encrypt the first feedback instruction, and sends the encrypted first feedback instruction to the OTA cloud server.

6. The method for automatic OTA upgrade of an automobile according to claim 5, characterized in that: Step S4 specifically includes the following steps: S41. The OTA cloud server uses the private key to decrypt the received encrypted first feedback instruction to obtain the first feedback instruction; S42. OTA cloud server calculates the remainder of the random number P divided by 3 ; When the remainder =0, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current position, remaining fuel, current fuel consumption, and current acceleration; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; When the remainder =1, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current position, remaining fuel, current window status, and current light status; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; When the remainder =2, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current fuel consumption, current acceleration, current window status, and current light status; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; S43. The OTA cloud server determines whether the data of the current state information of the automobile terminal in the first feedback instruction is consistent with the data of the current state information of the automobile terminal corresponding to the first state information; if they are consistent, execute step S44; if they are inconsistent, determine that the first state information is the first abnormal information, and the OTA cloud server discards the first state information; S44. The OTA cloud server determines whether the software version number of each firmware in the first feedback instruction is consistent with the software version number of each firmware in the first status information; If all are consistent, the first state information is judged to be normal information; Otherwise, it is determined that the first status information is the first abnormal information, and the OTA cloud server discards the first status information.

7. The method for automatic OTA upgrade of an automobile according to claim 6, characterized in that: The OTA cloud server determines whether the various data of the current state information of the automobile terminal in the first feedback instruction are consistent with the various data of the current state information of the automobile terminal corresponding to the first state information, specifically including: When the current status information of the automobile terminal is any one of the data items of driving speed, remaining fuel, current fuel consumption, and current acceleration, it is determined whether the difference between the data corresponding to the data item in the first feedback instruction and the data corresponding to the data item in the first status information is less than a preset threshold value corresponding to the data item; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When the current status information of the automobile terminal is any one of the data items of the current position, the current window status, and the current light status, it is determined whether the content corresponding to the data item in the first feedback instruction is the same as the content corresponding to the data item in the first status information; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When more than 80% of the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, it is judged that the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, otherwise they are inconsistent.

8. The method for OTA automatic upgrade of an automobile according to claim 7, characterized in that: Step S5 specifically includes the following steps: S51. The OTA cloud server obtains the latest version of the software package corresponding to each firmware; S52.OTA cloud server uses KMS key to perform AES256 symmetric encryption on the latest version software package corresponding to each firmware; S53. The OTA cloud server sends the encrypted latest version software package corresponding to each firmware to the vehicle terminal.

9. The method for OTA automatic upgrade of an automobile according to claim 8, characterized in that: Step S6 specifically includes the following steps: S61. After the car terminal receives the latest version of the encrypted software package corresponding to each firmware, it performs AES256 symmetric decryption on the latest version of the software package corresponding to each firmware to obtain the latest version of the software package corresponding to each firmware; S62. The car terminal upgrades each firmware. After the upgrade is completed, the firmware name, the software version number of this upgrade, and the upgrade status are associated and stored in the firmware OTA upgrade log; S63. The automobile terminal feeds back the upgrade status of each firmware to the OTA cloud server, and the OTA cloud server associates and stores the firmware name, the software version number of this upgrade, and the upgrade status in the cloud OTA upgrade log of each firmware in the OTA cloud server.

10. An automobile OTA automatic upgrade system, characterized in that: The system includes a car terminal and an OTA cloud server; The automobile terminal sends first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; The OTA cloud server receives the first status information, and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal; after receiving the first verification instruction, the automobile terminal sends a first feedback instruction to the OTA cloud server; the OTA cloud server receives the first feedback instruction, and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction; when the first status information is normal information, the OTA cloud server obtains the latest version software package corresponding to each firmware, and sends the latest version software package to the automobile terminal; after receiving the latest version software package, the automobile terminal completes the software upgrade at the automobile terminal; when the first status information is the first abnormal information, the OTA cloud server discards the first status information; When the first status information is normal information, the OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the automobile terminal; after the automobile terminal receives the latest version of the software package, the software upgrade is completed at the automobile terminal.

Images