An automotive OTA automatic upgrade method and system

Abstract

The present invention provides a method and system for automatic OTA upgrade of an automobile. The vehicle terminal sends the software version number of the firmware, the OTA upgrade log, and the current status information of the vehicle terminal as the first status information to the OTA cloud server, and the OTA cloud server judges the first status information; when the first status information is the first abnormal information, the first status information is discarded; when the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the vehicle terminal to verify whether the first status information is abnormal; the present invention can improve the security of software upgrade of the vehicle terminal and improve the overall operation efficiency of the system.

Description

Technical Field

[0001] The present invention relates to the technical field of automotive software upgrades, and particularly to an automotive OTA automatic upgrade method and system. Background Art

[0002] With the rapid development of intelligent connected vehicles, there are a large number of software systems (hereinafter referred to as firmware) in the vehicle terminal; moreover, with the occasional occurrence of network attack phenomena, in order to solve the security risks brought by software vulnerabilities, the software upgrade and update speed is relatively fast. However, during the software upgrade process of the vehicle terminal, how to ensure the security of data interaction between the vehicle terminal and the OTA cloud server, and how to improve the efficiency of the software upgrade process are urgent problems to be solved. Based on this, this paper proposes an automotive OTA automatic upgrade method and system. Summary of the Invention

[0003] In view of the above problems, the present invention proposes an automotive OTA automatic upgrade method, and the method specifically includes the following steps:

[0004] S1. The vehicle terminal sends the first status information to the OTA cloud server every preset time T;

[0005] The first status information includes the software version numbers corresponding to the firmware in the vehicle terminal;

[0006] S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal;

[0007] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0008] When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the vehicle terminal and executes step S3;

[0009] When the first status information is normal information, execute step S5;

[0010] S3. After receiving the first verification instruction, the vehicle terminal sends a first feedback instruction to the OTA cloud server;

[0011] S4. The OTA cloud server receives the first feedback instruction and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction;

[0012] When the first status information is normal information, execute step S5;

[0013] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0014] S5. The OTA cloud server obtains the latest version software packages corresponding to each firmware, and sends the latest version software packages to the vehicle terminal;

[0015] S6. After the vehicle terminal receives the latest version software packages, software upgrade is completed at the vehicle terminal.

[0016] Further, the first abnormal information is specifically: the first status information is attack information;

[0017] The second abnormal information is specifically: the first status information is suspected attack information;

[0018] The normal information is specifically: the first status information is non-abnormal information.

[0019] The present invention also provides a vehicle OTA automatic upgrade system, and the system includes a vehicle terminal and an OTA cloud server;

[0020] The vehicle terminal sends the first status information to the OTA cloud server every preset time T;

[0021] The first status information includes the software version numbers corresponding to each firmware in the vehicle terminal;

[0022] The OTA cloud server receives the first status information and determines whether the first status information is abnormal;

[0023] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0024] When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the vehicle terminal; after the vehicle terminal receives the first verification instruction, it sends a first feedback instruction to the OTA cloud server; the OTA cloud server receives the first feedback instruction and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction; when the first status information is normal information, the OTA cloud server obtains the latest version software packages corresponding to each firmware, and sends the latest version software packages to the vehicle terminal; after the vehicle terminal receives the latest version software packages, software upgrade is completed at the vehicle terminal; when the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0025] When the first status information is normal information, the OTA cloud server obtains the latest version software packages corresponding to each firmware, and sends the latest version software packages to the vehicle terminal; after the vehicle terminal receives the latest version software packages, software upgrade is completed at the vehicle terminal.

[0026] The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the content of the specification. And in order to make the above description, other purposes, features and advantages of the present invention more obvious and understandable, preferred embodiments are specifically given and described in detail as follows. Description of the Drawings

[0027] By reading the following detailed description of the preferred embodiments, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only for the purpose of showing the preferred embodiments and are not considered to be a limitation of the present invention. Moreover, throughout the drawings, the same reference numerals are used to represent the same components. In the drawings:

[0028] Figure 1 It is a structural diagram of an automotive OTA automatic upgrade system provided by the present invention. Detailed Embodiments

[0029] The following will describe the exemplary embodiments of the present disclosure in more detail with reference to the drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present disclosure can be fully communicated to those skilled in the art.

[0030] In the description of the present invention, unless otherwise clearly defined and limited, terms such as "installed", "connected", "connected", "fixed", etc. should be understood in a broad sense. For example, it can be a connection, a detachable connection, or integrated; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium, and it can be the communication inside two components or the interaction relationship between two components. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0031] Embodiment 1

[0032] The present invention provides an automotive OTA automatic upgrade method, and the method specifically includes the following steps:

[0033] S1. The vehicle terminal sends the first status information to the OTA cloud server at preset time intervals T;

[0034] The first status information includes the software version numbers corresponding to the respective firmware in the vehicle terminal;

[0035] S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal;

[0036] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0037] When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the vehicle terminal and executes step S3;

[0038] When the first status information is normal information, execute step S5;

[0039] S3. After receiving the first verification instruction, the vehicle terminal sends a first feedback instruction to the OTA cloud server;

[0040] S4. The OTA cloud server receives the first feedback instruction and determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction;

[0041] When the first status information is normal information, execute step S5;

[0042] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0043] S5. The OTA cloud server obtains the latest version software packages corresponding to each firmware and sends the latest version software packages to the vehicle terminal;

[0044] S6. After receiving the latest version software packages, the vehicle terminal completes software upgrade at the vehicle terminal.

[0045] Further, the first abnormal information is specifically: the first status information is attack information;

[0046] The second abnormal information is specifically: the first status information is suspected attack information;

[0047] The normal information is specifically: the first status information is non-abnormal information.

[0048] Further, step S1 specifically includes the following steps:

[0049] S11. The vehicle terminal collects the software version numbers corresponding to each firmware in the vehicle terminal at preset time intervals T, obtains the OTA upgrade logs of each firmware, and collects the current status information of the vehicle terminal;

[0050] The data format of the OTA upgrade log of the firmware is: {( , , ), ( , , ),…, ( , , ),…,( , , )}; The OTA upgrade log of each firmware includes one or more logs;

[0051] Among them, , , are respectively the firmware name corresponding to the j-th log in the OTA upgrade log of a firmware, the software version number of this upgrade, and the status of this upgrade; m is the total number of logs in the OTA upgrade log of the firmware;

[0052] Among them, the status of this upgrade is 0 or 1; when this upgrade is unsuccessful, the status of this upgrade is 0; when this upgrade is successful, the status of this upgrade is 1;

[0053] The current status information of the vehicle terminal includes: the driving speed of the vehicle terminal, the current location, the remaining fuel, the current fuel consumption, the current acceleration, the current window status, and the current headlight status;

[0054] The current acceleration is calculated based on the speed of the vehicle terminal at the current moment and the speed of the vehicle terminal at a certain moment; among them, the current acceleration = |the speed of the vehicle terminal at the current moment - the speed of the vehicle terminal at a certain moment| / ;

[0055] The current window status is: open or closed;

[0056] The current headlight status is: open or closed;

[0057] S12. The vehicle terminal calculates the hash value of the OTA upgrade log of each firmware for the OTA upgrade log of each firmware;

[0058] S13. The vehicle terminal combines the software version numbers corresponding to each firmware, the hash values of the OTA upgrade logs of each firmware, and the current status information of the vehicle terminal to form the first status information;

[0059] The data format of the first status information is: {VIN number, ( , , ), ( , , ), …, ( , , ), …, ( , , ), driving speed, current location, remaining fuel, current fuel consumption, current acceleration, current window status, current headlight status, };

[0060] Among them, the VIN number is the VIN number of the vehicle terminal; , , are respectively the firmware name of the i-th firmware in the vehicle terminal, the software version number corresponding to the firmware, and the hash value of the OTA upgrade log of the firmware; n is the total number of firmwares in the vehicle terminal; is the sending time of the first status information;

[0061] S14. The vehicle terminal encrypts the first status information using the public key of the OTA cloud server and sends the encrypted first status information to the OTA cloud server.

[0062] Further, step S2 specifically includes the following steps:

[0063] S21. After receiving the encrypted first status information, the OTA cloud server decrypts the encrypted first status information using the private key to obtain the first status information;

[0064] S22. The OTA cloud server obtains the time when the first status information is received , and calculates the difference from in the first status information;

[0065] When the difference is greater than or equal to the preset threshold , it is determined that the first status information is the first abnormal information;

[0066] When the difference is less than the preset threshold , step S23 is executed;

[0067] S23. The OTA cloud server obtains the cloud OTA upgrade logs of each firmware in the first status information and calculates the hash values of the cloud OTA upgrade logs of each firmware;

[0068] Among them, the cloud OTA upgrade logs of each firmware are stored in the OTA cloud server, and the cloud OTA upgrade logs of each firmware are consistent with the OTA upgrade logs of each firmware in the vehicle terminal;

[0069] S24. The OTA cloud server compares whether the hash values of the cloud OTA upgrade logs of each firmware are equal to the hash values of the OTA upgrade logs of the corresponding firmware in the first status information. If they are all equal, step S26 is executed; otherwise, step S25 is executed;

[0070] S25. The OTA cloud server determines that the first status information is the first abnormal information, and the OTA cloud server discards the first status information;

[0071] S26. The OTA cloud server obtains, from the cloud OTA upgrade logs of each firmware, the software version number of the most recent successful upgrade for each firmware as the current software version number of the firmware;

[0072] S27. The OTA cloud server determines whether the current software version number of each firmware is consistent with the software version number of the corresponding firmware in the first status information; if all are consistent, it determines that the first status information is normal information; otherwise, it determines that the first status information is the second abnormal information, and the OTA cloud server sends a first verification instruction to the vehicle terminal;

[0073] Among them, the first verification instruction includes: a verification instruction, a random number P;

[0074] The random number P is greater than or equal to 1 and less than or equal to 10.

[0075] Further, step S3 specifically includes the following steps:

[0076] S31. After receiving the first verification instruction, the vehicle terminal calculates the remainder Q of the random number P divided by 3;

[0077] When the remainder Q = 0, the vehicle terminal combines the software version numbers corresponding to each firmware and the first set of the current status information of the vehicle terminal to form first combined data as the first feedback instruction;

[0078] When the remainder Q = 1, the vehicle terminal combines the software version numbers corresponding to each firmware and the second set of the current status information of the vehicle terminal to form second combined data as the first feedback instruction;

[0079] When the remainder Q = 2, the vehicle terminal combines the software version numbers corresponding to each firmware and the third set of the current status information of the vehicle terminal to form third combined data as the first feedback instruction;

[0080] Among them, the first combined data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current location, remaining fuel, current fuel consumption, current acceleration};

[0081] The second combined data is {VIN number, ( , ),( , ),…,( , ),…,( , ), driving speed, current location, remaining fuel, current window state, current headlight state};

[0082] The third combined data is {VIN number, ( , ), ( , ), …, ( , ), …, ( , ), driving speed, current fuel consumption, current acceleration, current window state, current headlight state};

[0083] S32. The vehicle terminal encrypts the first feedback instruction using the public key of the OTA cloud server and sends the encrypted first feedback instruction to the OTA cloud server.

[0084] Further, step S4 specifically includes the following steps:

[0085] S41. The OTA cloud server decrypts the encrypted first feedback instruction using the private key to obtain the first feedback instruction;

[0086] S42. The OTA cloud server calculates the remainder of the random number P divided by 3 ;

[0087] When the remainder = 0, the OTA cloud server checks whether the current status information of the vehicle terminal in the first feedback instruction only includes driving speed, current location, remaining fuel, current fuel consumption, and current acceleration; if so, it executes step S43; if not, it discards the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again;

[0088] When the remainder = 1, the OTA cloud server checks whether the current status information of the vehicle terminal in the first feedback instruction only includes driving speed, current location, remaining fuel, current window state, and current headlight state; if so, it executes step S43; if not, it discards the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again;

[0089] When the remainder When = 2, the OTA cloud server obtains and determines whether the current status information of the vehicle terminal in the first feedback instruction only includes the driving speed, current fuel consumption, current acceleration, current window status, and current headlight status; if so, execute step S43; if not, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again;

[0090] S43. The OTA cloud server determines whether the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the corresponding data items of the current status information of the vehicle terminal in the first status information; if they are consistent, execute step S44; if they are not consistent, determine that the first status information is the first abnormal information, and the OTA cloud server discards the first status information;

[0091] S44. The OTA cloud server determines whether the software version numbers of the respective firmware in the first feedback instruction are consistent with the software version numbers of the respective firmware in the first status information; if all are consistent, then determine that the first status information is normal information; otherwise, determine that the first status information is the first abnormal information, and the OTA cloud server discards the first status information.

[0092] Furthermore, the OTA cloud server determines whether the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the corresponding data items of the current status information of the vehicle terminal in the first status information, specifically including:

[0093] When any one of the data items of the current status information of the vehicle terminal is the driving speed, remaining fuel quantity, current fuel consumption, or current acceleration, determine whether the difference between the data corresponding to this data item in the first feedback instruction and the data corresponding to this data item in the first status information is less than the preset threshold corresponding to this data item; if so, determine that this data item is consistent; if not, determine that this data item is inconsistent;

[0094] When any one of the data items of the current status information of the vehicle terminal is the current position, current window status, or current headlight status, determine whether the content corresponding to this data item in the first feedback instruction is the same as the content corresponding to this data item in the first status information; if so, determine that this data item is consistent; if not, determine that this data item is inconsistent;

[0095] When more than 80% of the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the corresponding data items of the current status information of the vehicle terminal in the first status information, determine that the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the corresponding data items of the current status information of the vehicle terminal in the first status information, otherwise they are inconsistent.

[0096] Furthermore, step S5 specifically includes the following steps:

[0097] S51. The OTA cloud server obtains the latest version software packages corresponding to each firmware;

[0098] S52. The OTA cloud server performs AES256 symmetric encryption on the latest version software packages corresponding to each firmware using the KMS key;

[0099] S53. The OTA cloud server sends the encrypted latest version software packages corresponding to each firmware to the vehicle terminal.

[0100] Further, step S6 specifically includes the following steps:

[0101] S61. After the vehicle terminal receives the encrypted latest version software packages corresponding to each firmware, it performs AES256 symmetric decryption on the latest version software packages corresponding to each firmware to obtain the latest version software packages corresponding to each firmware;

[0102] S62. The vehicle terminal upgrades each firmware. After the upgrade is completed, it stores the firmware name, the software version number of this upgrade, and the status of this upgrade in the OTA upgrade log of the firmware;

[0103] S63. The vehicle terminal feeds back the status of this upgrade corresponding to each firmware to the OTA cloud server, and the OTA cloud server stores the firmware name, the software version number of this upgrade, and the status of this upgrade in the cloud OTA upgrade log of each firmware in the OTA cloud server.

[0104] Embodiment 2

[0105] An automotive OTA automatic upgrade system, see Figure 1 , the system includes a vehicle terminal and an OTA cloud server;

[0106] The vehicle terminal sends the first status information to the OTA cloud server every preset time T;

[0107] The first status information includes the software version numbers corresponding to each firmware in the vehicle terminal;

[0108] The OTA cloud server receives the first status information and determines whether the first status information is abnormal;

[0109] When the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0110] When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the vehicle terminal; after receiving the first verification instruction, the vehicle terminal sends a first feedback instruction to the OTA cloud server; after receiving the first feedback instruction, the OTA cloud server determines whether the first status information is the first abnormal information or normal information according to the first feedback instruction; when the first status information is normal information, the OTA cloud server obtains the latest version software packages corresponding to each firmware and sends the latest version software packages to the vehicle terminal; after receiving the latest version software packages, the vehicle terminal completes software upgrade at the vehicle terminal; when the first status information is the first abnormal information, the OTA cloud server discards the first status information;

[0111] When the first status information is normal information, the OTA cloud server obtains the latest version software packages corresponding to each firmware and sends the latest version software packages to the vehicle terminal; after receiving the latest version software packages, the vehicle terminal completes software upgrade at the vehicle terminal.

[0112] The beneficial effects of the invention are as follows:

[0113] 1. The vehicle terminal of the present invention sends the software version numbers of each firmware, the hash value of the OTA upgrade log, and the current status information of the vehicle terminal as the first status information to the OTA cloud server. The OTA cloud server uses a three-stage judgment method based on the difference between the sending time and the receiving time, the hash value of the OTA upgrade log, and the software version numbers of each firmware to determine whether there is an abnormal attack on the received first status information, improving the security protection of the vehicle terminal information and avoiding simulated attacks on the OTA cloud server.

[0114] 2. For the determination of whether there is an abnormal attack on the first status information in the present invention, three levels of first abnormal information, second abnormal information, and normal information are set to effectively identify and subsequently process the first status information, improving the overall operation efficiency of the system.

[0115] 3. When it is determined that the first status information is the second abnormal information in the present invention, the OTA cloud server sends a first verification instruction to the vehicle terminal, and the vehicle terminal feeds back data items of the current status information of different groups of vehicle terminals to the OTA cloud server according to random numbers, further avoiding the possibility of external attacks.

[0116] 4. After receiving the first feedback instruction of the vehicle terminal in the OTA cloud server, the current status information of the vehicle terminal, that is, the current driving behavior and habits of the vehicle terminal, is used as a condition for determining whether the first feedback instruction and the first status information are tampered with or attacked, improving the security of the software upgrade system.

[0117] As described above, it is only the preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by those skilled in the art within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims

1. A method for automatic OTA upgrade of an automobile, characterized in that: The method specifically comprises the following steps: S1. The car terminal sends the first status information to the OTA cloud server every preset time T; The first status information includes the software version number corresponding to each firmware in the automobile terminal; S2. The OTA cloud server receives the first status information and determines whether the first status information is abnormal; When the first status information is first abnormal information, the OTA cloud server discards the first status information; When the first status information is the second abnormal information, the OTA cloud server sends a first verification instruction to the automobile terminal and executes step S3; When the first status information is normal information, executing step S5; The first abnormal information is specifically: the first state information is attack information; The second abnormal information specifically includes: the first state information is suspected attack information; The normal information specifically includes: the first state information is non-abnormal information; S3. After the car terminal receives the first verification command, it sends a first feedback command to the OTA cloud server; S4. The OTA cloud server receives the first feedback instruction, and determines whether the first status information is first abnormal information or normal information according to the first feedback instruction; When the first status information is normal information, executing step S5; When the first status information is first abnormal information, the OTA cloud server discards the first status information; S5. The OTA cloud server obtains the latest version of the software package corresponding to each firmware, and sends the latest version of the software package to the vehicle terminal; S6. After the car terminal receives the latest version of the software package, the software upgrade is completed in the car terminal; Step S1 specifically includes the following steps: S11. The car terminal collects the software version number corresponding to each firmware in the car terminal at a preset time T, obtains the OTA upgrade log of each firmware, and collects the current status information of the car terminal; The data format of the firmware OTA upgrade log is: {(N1,W1,Z1),(N2,W2,Z2),…,(N j ,W j ,Z j ),…,(N m ,W m ,Z m )}; Each firmware OTA upgrade log includes one or more logs; Among them, N j ,W j ,Z j are the firmware name, software version number of this upgrade, and status of this upgrade corresponding to the jth log in a firmware OTA upgrade log; m is the total number of logs in the firmware OTA upgrade log; The current upgrade status is 0 or 1. If the current upgrade is unsuccessful, the current upgrade status is 0; if the current upgrade is successful, the current upgrade status is 1. The current status information of the vehicle terminal includes: the vehicle terminal's travel speed, current location, remaining fuel, current fuel consumption, current acceleration, current window status, and current headlight status; The current acceleration is based on the speed of the vehicle terminal at the current time T2 and the vehicle terminal T2-T ′ The speed at the moment is calculated; where the current acceleration = | the speed of the vehicle terminal at the current moment T2 - the vehicle terminal T2 - T ′ Speed ​​of time| / T ′ ; The current window state is: open or closed; The current vehicle light status is: on or off; S12. The car terminal calculates the hash value of the OTA upgrade log of each firmware for the OTA upgrade log of the firmware; S13. The car terminal combines the software version number corresponding to each firmware, the hash value of the OTA upgrade log of each firmware, and the current status information of the car terminal to form the first status information; The data format of the first status information is: {VIN number, (N1, V1, H1), (N2, V2, H2), ..., (N i ,V i ,H i ),…,(N n ,V n ,H n ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration, current window status, current light status, T1}; Among them, VIN number is the VIN number of the vehicle terminal; N i ,V i ,H i are respectively the firmware name of the i-th firmware in the automobile terminal, the software version number corresponding to the firmware, and the hash value of the firmware's OTA upgrade log; n is the total number of firmware in the automobile terminal; T1 is the sending time of the first status information; S14. The automobile terminal uses the public key of the OTA cloud server to encrypt the first state information, and sends the encrypted first state information to the OTA cloud server.

2. The method for OTA automatic upgrade of an automobile according to claim 1, characterized in that: Step S2 specifically includes the following steps: S21. After receiving the encrypted first state information, the OTA cloud server uses the private key to decrypt the encrypted first state information to obtain the first state information; S22. The OTA cloud server obtains the time T3 when the first state information is received, and calculates the difference between T3 and T1 in the first state information; When the difference is greater than or equal to a preset threshold value T4, the first state information is judged to be first abnormal information; When the difference is less than the preset threshold value T4, step S23 is executed; S23. The OTA cloud server obtains the cloud OTA upgrade log of each firmware in the first status information, and calculates the hash value of the cloud OTA upgrade log of each firmware; Among them, the cloud OTA upgrade log of each firmware is stored in the OTA cloud server, and the cloud OTA upgrade log of each firmware is consistent with the OTA upgrade log of each firmware in the car terminal; S24. The OTA cloud server compares the hash value of the cloud OTA upgrade log of each firmware with the hash value of the OTA upgrade log of the corresponding firmware in the first status information to see if they are equal. If they are equal, execute step S26; otherwise, execute step S25; S25. The OTA cloud server determines that the first status information is the first abnormal information, and the OTA cloud server discards the first status information; S26. The OTA cloud server obtains the software version number of the latest successful upgrade of each firmware from the cloud OTA upgrade log of each firmware as the current software version number of the firmware; S27. The OTA cloud server determines whether the current software version number of each firmware is consistent with the software version number of the corresponding firmware in the first state information; if all are consistent, the first state information is determined to be normal information; otherwise, the first state information is determined to be the second abnormal information, and the OTA cloud server sends a first verification instruction to the vehicle terminal; Wherein, the first verification instruction includes: verification instruction, random number P; The random number P is greater than or equal to 1 and less than or equal to 10.

3. The method for automatic OTA upgrade of an automobile according to claim 2, characterized in that: Step S3 specifically includes the following steps: S31. After the car terminal receives the first verification instruction, it calculates the remainder Q of the random number P divided by 3; When the remainder Q=0, the vehicle terminal combines the software version number corresponding to each firmware and the current status information of the first group of vehicle terminals to form first combined data as the first feedback instruction; When the remainder Q=1, the vehicle terminal combines the software version number corresponding to each firmware with the current status information of the second group of vehicle terminals to form second combined data as the first feedback instruction; When the remainder Q=2, the vehicle terminal combines the software version number corresponding to each firmware and the third group of current state information of the vehicle terminal to form third combined data as the first feedback instruction; The first combination data is {VIN number, (N1, V1), (N2, V2), ..., (N i ,V i ),…,(N n ,V n ), driving speed, current position, remaining fuel, current fuel consumption, current acceleration}; The second combination data is {VIN number, (N1, V1), (N2, V2), ..., (N i ,V i ),…,(N n ,V n ), driving speed, current position, remaining fuel, current window status, current light status}; The third combination data is {VIN number, (N1, V1), (N2, V2), ..., (N i ,V i ),…,(N n ,V n ), driving speed, current fuel consumption, current acceleration, current window status, current light status}; S32. The automobile terminal uses the public key of the OTA cloud server to encrypt the first feedback instruction, and sends the encrypted first feedback instruction to the OTA cloud server.

4. The method for automatic OTA upgrade of an automobile according to claim 3, characterized in that: Step S4 specifically includes the following steps: S41. The OTA cloud server uses the private key to decrypt the received encrypted first feedback instruction to obtain the first feedback instruction; S42. OTA cloud server calculates the remainder Q of the random number P divided by 3 ′ ; When the remainder Q ′ =0, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current position, remaining fuel, current fuel consumption, and current acceleration; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; When the remainder Q ′ =1, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current position, remaining fuel, current window status, and current light status; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; When the remainder Q ′ =2, the OTA cloud server obtains and determines whether the current status information of the automobile terminal in the first feedback instruction only includes the driving speed, current fuel consumption, current acceleration, current window status, and current light status; If yes, execute step S43; if no, discard the first feedback instruction, and the OTA cloud server sends the first verification instruction to the vehicle terminal again; S43. The OTA cloud server determines whether the data of the current state information of the automobile terminal in the first feedback instruction is consistent with the data of the current state information of the automobile terminal corresponding to the first state information; if they are consistent, execute step S44; if they are inconsistent, determine that the first state information is the first abnormal information, and the OTA cloud server discards the first state information; S44. The OTA cloud server determines whether the software version number of each firmware in the first feedback instruction is consistent with the software version number of each firmware in the first status information; If all are consistent, the first state information is judged to be normal information; Otherwise, it is determined that the first status information is the first abnormal information, and the OTA cloud server discards the first status information.

5. The method for automatic OTA upgrade of an automobile according to claim 4, characterized in that: The OTA cloud server determines whether the various data of the current state information of the automobile terminal in the first feedback instruction are consistent with the various data of the current state information of the automobile terminal corresponding to the first state information, specifically including: When the current status information of the automobile terminal is any one of the data items of driving speed, remaining fuel, current fuel consumption, and current acceleration, it is determined whether the difference between the data corresponding to the data item in the first feedback instruction and the data corresponding to the data item in the first status information is less than a preset threshold value corresponding to the data item; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When the current status information of the automobile terminal is any one of the data items of the current position, the current window status, and the current light status, it is determined whether the content corresponding to the data item in the first feedback instruction is the same as the content corresponding to the data item in the first status information; if yes, it is determined that the data items are consistent; if not, it is determined that the data items are inconsistent; When more than 80% of the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, it is judged that the data items of the current status information of the vehicle terminal in the first feedback instruction are consistent with the data items of the current status information of the vehicle terminal corresponding to the first status information, otherwise they are inconsistent.

6. The method for automatic OTA upgrade of an automobile according to claim 5, characterized in that: Step S5 specifically includes the following steps: S51. The OTA cloud server obtains the latest version of the software package corresponding to each firmware; S52.OTA cloud server uses KMS key to perform AES256 symmetric encryption on the latest version software package corresponding to each firmware; S53. The OTA cloud server sends the encrypted latest version software package corresponding to each firmware to the vehicle terminal.

7. The method for automatic OTA upgrade of an automobile according to claim 6, characterized in that: Step S6 specifically includes the following steps: S61. After the car terminal receives the latest version of the encrypted software package corresponding to each firmware, it performs AES256 symmetric decryption on the latest version of the software package corresponding to each firmware to obtain the latest version of the software package corresponding to each firmware; S62. The car terminal upgrades each firmware. After the upgrade is completed, the firmware name, the software version number of this upgrade, and the upgrade status are associated and stored in the firmware OTA upgrade log; S63. The automobile terminal feeds back the upgrade status of each firmware to the OTA cloud server, and the OTA cloud server associates and stores the firmware name, the software version number of this upgrade, and the upgrade status in the cloud OTA upgrade log of each firmware in the OTA cloud server.

Images