Vehicle-mounted service starting method, electronic equipment and medium

Abstract

The embodiment of the invention is suitable for the technical field of vehicles, and provides a vehicle-mounted service starting method, electronic equipment and a medium, the method is applied to a server, and the method comprises the following steps: receiving a signature request from a vehicle-mounted terminal; signing starting information of a to-be-started vehicle-mounted service in the vehicle-mounted terminal according to the signature request to obtain a starting information signature; sending the starting information signature to the vehicle-mounted terminal, wherein the starting information signature is used for verifying the legality of the starting information of the vehicle-mounted service; when a data packet request from the vehicle-mounted terminal is received, encrypting a software data packet of the requested vehicle-mounted service to obtain an encrypted data packet; the encrypted data packet is sent to the vehicle-mounted terminal, and the vehicle-mounted terminal is used for decrypting the encrypted data packet and starting the vehicle-mounted service based on the decrypted data packet. According to the method provided by the invention, when the vehicle-mounted terminal starts the vehicle-mounted service, the safety of the vehicle-mounted service data can be ensured.

Description

Technical Field

[0001] The present application belongs to the field of vehicle technology, and in particular, relates to a vehicle service startup method, electronic equipment and medium. Background Art

[0002] Rich in-vehicle services can improve user experience. For example, smart cars can provide users with in-vehicle services such as music streaming services, navigation services, entertainment content subscriptions, and smart assistant services.

[0003] The in-vehicle services provided by smart cars generally need to obtain data from third-party entertainment systems. However, in the process of providing service data to the car computer, the third-party entertainment system is prone to data leakage, which may lead to hacker attacks or unauthorized use of services, causing economic losses to car owners.

[0004] In order to ensure data security, the car computer of smart cars needs to be adapted to the customized security solutions of each third-party entertainment system, which brings a huge workload to the production of car computers. On the other hand, the security solutions provided by various third-party entertainment systems cannot guarantee security. Summary of the invention

[0005] In view of this, an embodiment of the present application provides an in-vehicle service startup method, an electronic device, and a medium, which are used to ensure data security when starting the in-vehicle service.

[0006] A first aspect of an embodiment of the present application provides a method for starting an in-vehicle service, which is applied to a server, and the method includes:

[0007] Receive a signature request from the vehicle terminal;

[0008] In response to the signature request, signing the startup information of the vehicle service to be started in the vehicle terminal to obtain a startup information signature;

[0009] Sending the startup information signature to the vehicle terminal, the startup information signature is used to verify the legitimacy of the startup information of the vehicle service;

[0010] When receiving a data packet request from the vehicle-mounted terminal, encrypting the requested software data packet of the vehicle-mounted service to obtain an encrypted data packet;

[0011] The encrypted data packet is sent to the vehicle-mounted terminal, and the vehicle-mounted terminal is used to decrypt the encrypted data packet and start the vehicle-mounted service based on the decrypted data packet.

[0012] A second aspect of an embodiment of the present application provides a vehicle service startup method, which is applied to a vehicle terminal, and the method includes:

[0013] Sending a signature request to the server, wherein the signature request is used to request the server to sign the startup information of the vehicle service to be started;

[0014] If the startup information signature returned by the server is received, verifying the startup information signature based on the stored certificate chain;

[0015] If the startup information signature verification is passed, requesting the server for a software data package corresponding to the in-vehicle service;

[0016] When receiving the encrypted data packet from the server, decrypting the encrypted data packet to obtain a software data packet adapted to the in-vehicle service;

[0017] The in-vehicle service is started based on the software data package of the in-vehicle service.

[0018] A third aspect of an embodiment of the present application provides a vehicle-mounted service startup device, which is applied to a server, and the device includes:

[0019] A signature request receiving module, used to receive a signature request from the vehicle terminal;

[0020] A startup information signature module, used for signing the startup information of the vehicle service to be started in the vehicle terminal in response to the signature request, to obtain a startup information signature;

[0021] A signature information sending module, used to send the startup information signature to the vehicle terminal, where the startup information signature is used to verify the legitimacy of the startup information of the vehicle service;

[0022] A data packet encryption module, configured to encrypt a requested software data packet of the in-vehicle service to obtain an encrypted data packet upon receiving a data packet request from the in-vehicle terminal;

[0023] The data packet sending module is used to send the encrypted data packet to the vehicle-mounted terminal, and the vehicle-mounted terminal is used to decrypt the encrypted data packet and start the vehicle-mounted service based on the decrypted data packet.

[0024] A fourth aspect of an embodiment of the present application provides a vehicle-mounted service startup device, which is applied to a vehicle-mounted terminal, and the device includes:

[0025] A signature request sending module, used to send a signature request to a server, wherein the signature request is used to request the server to sign the startup information of the vehicle service to be started;

[0026] A signature information verification module, configured to verify the startup information signature based on the stored certificate chain if the startup information signature returned by the server is received;

[0027] A data packet request module, configured to request a software data packet corresponding to the in-vehicle service from the server if the startup information signature verification passes;

[0028] A data packet decryption module, configured to decrypt the encrypted data packet upon receiving the encrypted data packet from the server to obtain a software data packet adapted to the in-vehicle service;

[0029] The vehicle-mounted service starting module is used to start the vehicle-mounted service based on the software data package of the vehicle-mounted service.

[0030] A fifth aspect of an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method described in the first or second aspect above when executing the computer program.

[0031] A sixth aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect or the second aspect above is implemented.

[0032] A seventh aspect of the embodiments of the present application provides a computer program product. When the computer program product runs on an electronic device, the electronic device executes the method described in the first aspect or the second aspect.

[0033] Compared with the prior art, the embodiments of the present application have the following advantages:

[0034] When the method in the embodiment of the present application is used to start the vehicle service, the vehicle terminal can first send a signature request to the server. After receiving the signature request, the server can sign the startup information of the vehicle service to be started, obtain the startup information signature, and send the startup information signature to the vehicle terminal. After the vehicle terminal receives the startup information signature, it can verify the startup information signature. Based on the verification of the startup signature information, the vehicle terminal can determine whether the vehicle service on the server is legal, thereby ensuring the correctness of the vehicle service data packet received later. If the startup signature information verification passes, the vehicle terminal can continue to send a data packet request to the server to request the software data packet of the vehicle service from the server. In order to ensure the security of the software data packet, the server can encrypt the software data packet and send the encrypted software data packet to the vehicle terminal. The vehicle terminal can decrypt the received data to obtain the software data packet of the vehicle service. Based on the obtained software data packet, the vehicle terminal can start the vehicle service. In the embodiment of the present application, in the process of starting the vehicle service, the vehicle terminal can first perform a verification based on the signature to ensure that the data on the server is legal; at the same time, during the data transmission process, encrypted transmission can be performed to avoid data leakage and ensure data security. When the vehicle terminal starts any vehicle service, it can obtain the corresponding vehicle service software data package from the server based on the method in the embodiment of the present application. It only needs to communicate securely with the server. In the production process of the vehicle computer, it is not necessary to configure and integrate the hardware of the vehicle computer for a specific security solution, thereby reducing the workload of vehicle computer production. At the same time, when upgrading the vehicle service, the vehicle terminal can still start the upgraded vehicle service based on the method in the embodiment of the present application, and it is not necessary to upgrade the vehicle service through the over-the-air download technology, so that the vehicle terminal can use the vehicle service more conveniently, thereby reducing the pressure of the over-the-air download service on the vehicle and improving the efficiency of the over-the-air download service. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the embodiments or descriptions of the prior art.

[0036] Figure 1 This is a schematic diagram of the steps of a method for starting an in-vehicle service provided by an embodiment of the present application;

[0037] Figure 2 It is a schematic diagram of the steps of another method for starting an in-vehicle service provided by an embodiment of the present application;

[0038] Figure 3 It is a flowchart of a method for starting a vehicle service provided by an embodiment of the present application;

[0039] Figure 4This is a schematic diagram of an application scenario for starting an in-vehicle service provided by an embodiment of the present application;

[0040] Figure 5 is a schematic diagram of an in-vehicle service starting device provided in an embodiment of the present application;

[0041] Figure 6 is a schematic diagram of an in-vehicle service starting device provided in an embodiment of the present application;

[0042] Figure 7 It is a schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0043] In the following description, specific details such as specific system structures, technologies, etc. are proposed for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from hindering the description of the present application.

[0044] With the rapid development of smart cars, third-party in-car entertainment subscription services have become an important part of improving user experience. For example, various third-party in-car entertainment systems can provide smart cars with music streaming services, navigation services, entertainment content subscriptions, smart assistant services, etc. These in-car services provide car owners and passengers with a richer and more convenient in-car entertainment experience.

[0045] However, the security of third-party subscription services faces serious challenges. Third-party subscription services are vulnerable to hacker attacks, which can lead to the use of in-vehicle entertainment services by unauthorized parties, resulting in economic losses for in-vehicle entertainment service developers and car owners. At the same time, when smart cars use in-vehicle entertainment services through third-party subscription services, the third-party subscription service software and firmware are usually entrusted to the OEM that produces the car machine for hosting. The OEM needs to fully ensure that the third-party source code is not leaked, which will increase the workload of the OEM.

[0046] In addition, the current in-car entertainment service upgrade is generally done through Over-the-Air Technology (OTA). As in-car entertainment services become more and more abundant, users are using more and more in-car entertainment services. If the in-car entertainment service is completely upgraded by OTA, it will bring great challenges to the upgrade efficiency of the vehicle's OTA technology.

[0047] There is no unified standard or solution for the above problems. Some developers of in-car entertainment services can provide customized security solutions for security issues. Smart car machine manufacturers can adapt and integrate car machines according to customized security solutions during the production process. However, this method has the following problems:

[0048] For different in-vehicle entertainment service developers, the car machine needs to adapt different security solutions respectively, which leads to a huge workload for the OEM to customize the adaptation when generating the car machine. In addition, the security technology levels of different in-vehicle entertainment service developers are different, and the security solutions customized by some in-vehicle entertainment service developers cannot ensure safety. In addition, the security upgrade of in-vehicle services still needs to rely on the whole vehicle over-the-air download technology, which affects the working efficiency of the whole vehicle over-the-air download technology.

[0049] Based on this, the present application provides a method for starting an in-vehicle service to ensure data security during the in-vehicle service startup process.

[0050] The technical solution of the present application is described below through specific embodiments.

[0051] Reference Figure 1 , shows a schematic flow chart of a method for starting an in-vehicle service provided in an embodiment of the present application, which may specifically include the following steps:

[0052] S101, receiving a signature request from a vehicle-mounted terminal.

[0053] The method in this embodiment can be applied in a server, wherein the server can be a cloud server, and this embodiment does not limit the specific type of the server. The server can be a vehicle service platform, which can communicate with the vehicle terminals of multiple vehicles to provide services for the vehicle terminals. For example, the server can be a service platform provided by a vehicle manufacturer for the vehicles produced by the manufacturer.

[0054] The vehicle-mounted terminal may be a smart device installed on a vehicle. For example, the vehicle-mounted terminal may be a vehicle computer or other electronic components, and the present embodiment does not limit the specific type of the vehicle-mounted terminal. Each vehicle-mounted terminal may have unique identification information. When the vehicle-mounted terminal communicates with the server, the identification information may be carried, so that the server can determine the identity of the vehicle-mounted terminal according to the identification information.

[0055] The above-mentioned signature request can be sent by the vehicle terminal to the server when starting the vehicle service. The signature request is used to request the signature of the startup information of the vehicle service to be started. The vehicle service to be started can be a vehicle service that has never been used in the vehicle terminal, or a vehicle service that is being used in the vehicle terminal but needs to be upgraded. Each vehicle service can also have unique identification information for identifying the type and version of the vehicle service.

[0056] The signature request may carry the identification information of the vehicle terminal and the identification information of the vehicle service to be started.

[0057] S102, in response to the signature request, signing the startup information of the vehicle service to be started in the vehicle terminal to obtain a startup information signature.

[0058] According to the identification information of the vehicle service carried in the signature request, the server can find the startup information of the vehicle service. According to the identification information of the vehicle terminal carried in the signature request, the server can find the signature private key of the vehicle terminal.

[0059] When signing the startup information of the in-vehicle service, the server can calculate the first startup information hash value, and then use the signature private key to encrypt the first startup information hash value to obtain the startup information signature.

[0060] The above-mentioned signature private key can be pre-generated by the server. The server can pre-generate a signature key pair for signing, and the signature key pair can include a signature private key and a signature public key. The signature key pair can be generated based on asymmetric encryption technology. The vehicle terminal can obtain the signature public key, and then verify the startup information signature based on the signature public key.

[0061] The signature public key may exist in the certificate chain of the vehicle terminal. The certificate chain of the vehicle terminal may be sent to the vehicle terminal in advance by the server. The server may generate a root key pair and a signature key pair, the root key pair may include a root public key and a root private key, and the signature key pair may include a signature public key and a signature private key.

[0062] Based on the root public key, the server can generate a root certificate; based on the root certificate and the signature public key, the server can generate a signature certificate. After generating the root certificate, the server can calculate the hash value of the root certificate, obtain the first hash value, and send the first hash value to the third-party manufacturer that produces the vehicle-mounted terminal. In the process of producing the vehicle-mounted terminal, the third-party manufacturer can burn the first hash value into the chip of the vehicle-mounted terminal. Each vehicle-mounted terminal may include a chip. For example, the chip may be located in a sub-component in the vehicle cabin area. The sub-component may be a hardware unit for vehicle-mounted services provided by a third-party manufacturer. The chip in the vehicle-mounted terminal may be a dedicated function chip provided by a third-party service provider, or a Qualcomm chip commonly used in the cockpit domain, or a self-developed chip of the OEM. The chip has secure storage and computing capabilities and supports Fuse operations. The first hash value is burned into the fuse bit in the chip, and the vehicle-mounted terminal can only read the first hash value, but cannot modify the first hash value.

[0063] The root certificate and signature certificate generated by the server can form a certificate chain. The server can send the certificate chain to the vehicle terminal offline. For example, the certificate chain can be sent via a removable storage medium. After the server sends the certificate chain to the vehicle terminal, the vehicle terminal can obtain the root certificate in the certificate chain, and then perform a hash calculation to obtain a second hash value. The vehicle terminal can read the first hash value from the fuse bit, and then compare the first hash value and the second hash value. If the first hash value is the same as the second hash value, it can be determined that the certificate chain verification has passed, and the vehicle terminal can store the certificate chain.

[0064] The first hash value stored in the vehicle terminal is burned during the production process. Therefore, the vehicle terminal can only read the first hash value and cannot modify the first hash value. External attacks cannot tamper with the first hash value stored in the vehicle terminal. The first hash value comes from the server, and the first hash value is the hash value of the root certificate. Therefore, after receiving the certificate chain, when the calculated second hash value of the root certificate in the certificate chain is the same as the first hash value read by the vehicle terminal, it indicates that the certificate chain verification has passed. Based on the first hash value that cannot be modified and can only be read, the certificate chain verification process can be protected from interference from external attacks, ensuring the legitimacy of the certificate chain verification.

[0065] The server can deploy secure public key infrastructure (PKI) services and hardware security modules (HSM). By calling the HSM service, the server can generate a root key pair and a signature key pair. By calling the PKI service, the server can generate a root certificate based on the root public key. After generating the root certificate, the server can issue a signature certificate based on the signature public key of the root certificate.

[0066] S103, sending the startup information signature to the vehicle-mounted terminal, where the startup information signature is used to verify the legitimacy of the startup information of the vehicle-mounted service.

[0067] After receiving the startup information signature, the vehicle terminal can first decrypt the startup information signature based on the signature public key in the signature certificate in the certificate chain to obtain the first startup information hash value. The vehicle terminal can calculate the hash value of the startup information to obtain the second startup information hash value.

[0068] If the first startup information hash value is different from the second startup information hash value, it may be that the startup information in the server is incorrect, or the startup signature information is tampered with, etc. At this time, the vehicle terminal cannot communicate securely with the service or cannot request the correct vehicle service data packet from the server, so the startup process of the current vehicle service can be interrupted.

[0069] If the first startup information hash value and the second startup information hash value are the same, the vehicle-mounted terminal can determine that the startup information signature verification is passed, and can continue to request the software data package of the vehicle-mounted service from the server.

[0070] S104, when a data packet request is received from the vehicle-mounted terminal, encrypt the requested software data packet of the vehicle-mounted service to obtain an encrypted data packet.

[0071] After verifying the startup signature information, the vehicle terminal can send a data packet request to the server, thereby requesting the server for the software data packet of the vehicle service to be started. The data packet request can carry the identification information of the vehicle terminal.

[0072] After receiving the data packet request, the server can look up the data packet key of the vehicle terminal according to the identification information of the vehicle terminal. The data packet key is pre-generated by the server and sent to the vehicle terminal. Based on the data packet key of the vehicle terminal, the software data packet of the vehicle service request is encrypted to obtain an encrypted data packet.

[0073] The server can generate a unique data packet key for each vehicle-mounted terminal in advance, and the data packet key is used to encrypt or decrypt the data packet. The data packet key can be a symmetric key, and the server can use the data packet key to encrypt the data packet, and the vehicle-mounted terminal can use the data packet key to decrypt the data packet.

[0074] In order to ensure the security of the data packet key, the server may encrypt and transmit the data packet key when sending the data packet key to the vehicle-mounted terminal.

[0075] Exemplarily, the server can call HSM to generate data packet keys for the vehicle-mounted terminal, and store each data packet key in association with the identification information of the vehicle-mounted terminal. Before starting the vehicle-mounted service, the vehicle-mounted terminal can send a key request to the server, and the key request can carry the identification information of the vehicle-mounted terminal. If a key request is received from the vehicle-mounted terminal, the server can search for the device certificate of the vehicle-mounted terminal according to the identification information of the vehicle-mounted terminal. The device certificate of the vehicle-mounted terminal may include the public key of the vehicle-mounted terminal; based on the public key of the vehicle-mounted terminal, the server can encrypt the data packet key; and send the encrypted data packet key to the vehicle-mounted terminal. After receiving the encrypted data packet key, the vehicle-mounted terminal can use the private key of the vehicle-mounted terminal to decrypt it, thereby obtaining the decrypted data packet key.

[0076] Among them, the device certificate of the on-board terminal can be flashed to the server during the vehicle production process.

[0077] S105, sending the encrypted data packet to the vehicle-mounted terminal, the vehicle-mounted terminal is used to decrypt the encrypted data packet and start the vehicle-mounted service based on the decrypted data packet.

[0078] The server can send the encrypted data packet to the vehicle terminal, and the vehicle terminal can decrypt the encrypted data packet based on the stored data packet key to obtain the software data packet of the vehicle server. Afterwards, the vehicle terminal can start the vehicle service based on the software data packet of the vehicle service.

[0079] In this embodiment, when starting the in-vehicle service, the in-vehicle terminal can directly obtain data from the server, thereby avoiding the need to adapt to multiple third-party entertainment systems and reducing the adaptation workload in the production process of the in-vehicle terminal. When starting or upgrading the in-vehicle service, the in-vehicle terminal can verify the legitimacy based on the startup information signature. Based on the verification of the signature information, the communication security can be further verified and the legitimacy of the in-vehicle service information can be ensured. When sending data packets, the in-vehicle terminal and the server can encrypt the data for transmission, thereby ensuring the security of the data packet and avoiding the theft of the software data packet, thereby ensuring the rights and interests of the car owner and the in-vehicle service developer. The method in this embodiment is also applicable to the upgrade of in-vehicle services, so that the in-vehicle service can be upgraded without the use of over-the-air download technology, thereby reducing the pressure on the vehicle's over-the-air download technology and improving the efficiency of the over-the-air download technology.

[0080] Reference Figure 2 , shows a schematic flow chart of another method for starting an in-vehicle service provided by an embodiment of the present application, which may specifically include the following steps:

[0081] S201, sending a signature request to a server, wherein the signature request is used to request the server to sign the startup information of the in-vehicle service to be started.

[0082] The execution subject of this embodiment may be a vehicle-mounted terminal. The vehicle-mounted terminal may be a front-end device for intelligent vehicle management. The vehicle-mounted terminal may be connected to a server to obtain server data.

[0083] The in-vehicle service to be started may be software provided by an entertainment service manufacturer or software developed by a car manufacturer. The in-vehicle service may include weather services, music services, game services, recorder services, video services, etc. This embodiment does not limit the in-vehicle service.

[0084] The startup information may include the version information and type information of the vehicle service. The startup information may be a startup image of the vehicle service. The startup information may be sent by the intermediate service to the vehicle terminal. When starting the vehicle service, it is first necessary to ensure that the startup information in the vehicle terminal and the server are the same. Therefore, the vehicle terminal may send a signature request to the server to perform signature verification on the startup information.

[0085] During the communication between the vehicle terminal and the server, in order to ensure data security, the vehicle terminal can actively initiate a two-way Transport Layer Security (TLS) connection with the server. Based on the two-way TLS connection, the vehicle terminal can call the server's HSM to obtain the startup information signature.

[0086] S202: If the startup information signature returned by the server is received, verify the startup information signature based on the stored certificate chain.

[0087] The certificate chain of the vehicle terminal may include a signature certificate, and the signature certificate may include a signature public key. The signature public key and the signature private key of the server are an asymmetric key pair, and the signature public key can decrypt the information encrypted by the signature private key.

[0088] The vehicle terminal can obtain the signature public key in the signature certificate and decrypt the startup information signature based on the signature public key to obtain the first startup information hash value from the server. The vehicle terminal can calculate the second startup information hash value of the stored startup information of the vehicle service; then compare the first startup hash value with the second startup hash value to verify the signature of the startup information.

[0089] If the first startup information hash value is the same as the second startup information hash value, it can be determined that the startup information signature verification has passed, and the vehicle-mounted terminal can continue to start the vehicle-mounted service based on subsequent steps.

[0090] The certificate chain in the vehicle terminal can be sent in advance by the server. The vehicle terminal may include a chip that supports the fuse function. During the production process of the vehicle terminal, the manufacturer can receive the first hash value of the root certificate sent by the server and fuse the chip, that is, burn the first hash value into the fuse bit of the chip. After the first hash value is burned into the fuse bit of the chip, the vehicle terminal can only read the first hash value of the fuse bit and cannot modify the first hash value of the fuse bit. That is, the first hash value has been determined during the vehicle production process, and hacker attack technology cannot change the first hash value.

[0091] Based on the stored first hash value, when the vehicle-mounted terminal receives the certificate chain from the server, it can first verify the certificate chain. The certificate chain includes a root certificate and a signature certificate; the vehicle-mounted terminal can perform a hash calculation on the root certificate in the certificate chain to obtain a second hash value. The vehicle-mounted terminal can read the first hash value that cannot be modified from the fuse bit. The first hash value is then compared with the second hash value to determine whether the certificate chain is legal. If the first hash value and the second hash value are the same, it means that the certificate chain verification is passed, and the vehicle-mounted terminal can store the certificate chain. The signature certificate in the certificate chain is issued by the root certificate, and the root certificate can be used to ensure the legitimacy of the signature certificate. Therefore, the vehicle-mounted terminal only needs to verify the root certificate to determine the legitimacy of the certificate chain.

[0092] S203: If the startup information signature verification is passed, request the server for a software data package corresponding to the in-vehicle service.

[0093] After the startup information signature verification is passed, the vehicle terminal can request the software data package of the vehicle service from the server based on the two-way TLS connection.

[0094] S204, when receiving the encrypted data packet from the server, decrypting the encrypted data packet to obtain a software data packet adapted to the in-vehicle service.

[0095] The vehicle terminal may include a main control software and a secure storage module (Trust Zone), wherein the secure storage module may store a data packet key.

[0096] The vehicle-mounted terminal can decrypt the encrypted data packet based on the stored data packet key to obtain the software data packet of the vehicle-mounted service.

[0097] The above-mentioned data packet key can be sent in advance by the server to the vehicle terminal. Before starting the vehicle service, the vehicle terminal can send a key request to the server, and the key request can carry the identification information of the vehicle terminal. If a key request is received from the vehicle terminal, the server can search for the device certificate of the vehicle terminal according to the identification information of the vehicle terminal. The device certificate of the vehicle terminal can include the public key of the vehicle terminal; based on the public key of the vehicle terminal, the server can encrypt the data packet key; and send the encrypted data packet key to the vehicle terminal. After the vehicle terminal receives the encrypted data packet key, it can use the private key of the vehicle terminal in the device certificate to decrypt it, thereby obtaining the decrypted data packet key. Among them, the device certificate of the vehicle terminal can be loaded into the vehicle terminal during the vehicle production process.

[0098] S205: Start the in-vehicle service based on the software data package of the in-vehicle service.

[0099] The method in this embodiment can be executed when starting the vehicle-mounted service, or when upgrading the vehicle-mounted service. That is, based on the method in this embodiment, the vehicle-mounted service can be started and upgraded.

[0100] Through the method in this embodiment, the vehicle terminal can start and upgrade the vehicle service through encrypted communication with the server, which ensures the security of the software data package of the vehicle service and avoids the theft of the vehicle service, thereby ensuring the rights and interests of the service provider and the car owner. When the terminal device starts any vehicle service, it can obtain the software data package of the vehicle service from the server based on the method in the embodiment of the present application. It only needs to communicate securely with the server. During the production process of the vehicle computer, it is not necessary to configure and integrate the hardware of the vehicle computer for a specific security solution, thereby reducing the workload of vehicle computer production. At the same time, when upgrading the vehicle service, the vehicle terminal can still start the upgraded vehicle service based on the method in the embodiment of the present application. It is not necessary to upgrade the vehicle service through the air download technology, so that the vehicle terminal can use the vehicle service more conveniently, thereby reducing the pressure of the air download service on the vehicle and improving the efficiency of the air download service.

[0101] It should be noted that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0102] In order to more clearly illustrate the solution in the present application, the solution of the present application is described below with a specific embodiment. Figure 3 It is a flow chart of a method for starting an in-vehicle service provided in an embodiment of the present application.

[0103] Figure 3 The vehicle ECU (electronic Control Unit) in the vehicle terminal is the above-mentioned vehicle terminal, in which the main control software and the secure storage module (Trust Zone) are deployed. Figure 3 The cloud in the example is the server mentioned above, where secure PKI services and HSM secure storage can be deployed.

[0104] like Figure 3As shown, the cloud can generate a root key pair root_pri+root_pub and a signature key pair sign_pri+sign_pub. The server calls the PKI service and can generate a root certificate root_cert based on the root public key root_pub. Based on the root certificate root_cert, a signature certificate sign_cert can be issued for the signature public key sign_pub. Root_cert+sign_cert constitute a certificate chain chain. In the embodiment of the present application, the certificate chain may only include two layers of certificate trust chain root_cert+sign_cert. Those skilled in the art should be aware that any multiple layers of trust chain can be added to the certificate chain based on actual scenarios.

[0105] The cloud can calculate the hash value hash_root of root_cert and give hash_root to the third-party manufacturer. When the third-party manufacturer produces customized chips for the OEM, it can perform Fuse, that is, write hash_root into the fuse bit. After Fuse, the content written into the chip fuse bit can no longer be changed, but it can be queried repeatedly. The third-party manufacturer only writes hash_root and does not need to participate in other processes.

[0106] The cloud can send the certificate chain chain to the vehicle ECU, and the vehicle ECU can calculate the hash value hash_root of the Root CA in the built-in chain and read the hash_root of the fuse bit. If the two hash values ​​are equal, it can indicate that the fuse bit verification is successful, and the vehicle ECU can write the certificate chain chain into the ECU; otherwise, the chain cannot be written into the ECU.

[0107] The cloud also needs to send the key k for data packet encryption to the vehicle ECU. The key k is the data packet key mentioned above.

[0108] The cloud can call HSM to generate key k, which can be a symmetric key. The main control software of the vehicle ECU can initiate a two-way TLS connection to the cloud, thereby passing the vehicle id to the cloud to request the encryption key enc_k from the cloud PKI service. Among them, the vehicle id is the identification information of the above-mentioned vehicle terminal.

[0109] The PKI service in the cloud can query the device certificate dvc_cert corresponding to the vehicle ECU according to the vehicle ID; the PKI service calls the cloud encryption machine HSM service to export the key k of the vehicle ECU, and then uses the device public key dvc_pub in dvc_cert to encrypt the key k to generate the encryption key enc_k. After that, the PKI service in the cloud returns enc_k to the vehicle ECU.

[0110] After the vehicle ECU obtains enc_k, the main control software can call the Trust Zone interface and use the Trust Zone's device certificate private key dvc_pri to decrypt enc_key and the decrypted key k; and write k into the Trust Zone for secure storage.

[0111] When starting and upgrading the vehicle service, the vehicle ECU can actively initiate a two-way TLS connection with the cloud, thereby calling the cloud HSM service and using the cloud signature key sign_pri to obtain the startup information signature signed_data. The cloud can send the startup information signature signed_data to the vehicle ECU.

[0112] After the vehicle ECU receives signed_data, it can use the ECU's built-in chain to verify the legitimacy of the signature of signed_pack.

[0113] After the signed_data is verified, the vehicle ECU can request the encryption software enc_pack from the cloud. The vehicle ECU can actively initiate a two-way TLS connection with the cloud, call the cloud HSM service, use the key k in the HSM to encrypt the software data packet pack, and obtain enc_pack.

[0114] After the vehicle ECU receives the encrypted software data packet enc_pack, it can call the TrustZone interface through the KM Service, use the k in the Trust Zone to decrypt enc_pack, and obtain the plaintext software data packet pack. Based on the plaintext pack, the vehicle service can be successfully started or upgraded.

[0115] The method in this embodiment provides a unified and end-to-end security solution based on cryptography. In an embodiment of the present application, the server can generate a root key pair and a signature key pair, and send the root key certificate, that is, the root certificate hash value, to a third-party manufacturer, and the third-party manufacturer will write the root certificate into the chip of the vehicle terminal in the form of Fuse during the chip production stage. Then, in the production line vehicle manufacturing stage, the vehicle terminal can flash the certificate chain after successfully verifying the Fuse position. After that, the vehicle terminal can obtain the data packet key from the server, and the server can encrypt the data packet key based on the device certificate of the vehicle terminal and transmit it to the vehicle terminal, thereby ensuring that the data packet key can be safely transmitted and ensuring one car and one key. Based on the certificate chain and data packet key, the vehicle terminal can first perform signature verification of the startup information with the server when starting or upgrading the vehicle service, and after the legitimacy of the startup information is verified, the software data packet is obtained based on the data packet key, thereby ensuring data security during the startup or upgrade of the vehicle service.

[0116] Figure 4 This is a schematic diagram of an application scenario provided by an embodiment of the present application. The vehicle terminal can obtain the entertainment services supported by the vehicle from the intermediate service and display them on the display interface. The user can select the vehicle service to be used according to the content displayed on the display interface.

[0117] like Figure 4 As shown, the display interface can display in-vehicle services such as video, music, weather, and recorder. When the user needs to start the video service or needs to upgrade the video service, the in-vehicle terminal can send a signature request for the video startup information to the cloud. The cloud can use the signature private key to sign the video startup information to obtain the startup information signature. And send the startup information signature to the in-vehicle terminal.

[0118] The vehicle terminal can verify the startup signature information. After the verification is passed, the cloud can request the software data package of the video. The cloud can encrypt the software data package and send it to the cloud. The cloud decrypts the encrypted software data to obtain the software data package of the video. Based on the software data package, the vehicle terminal can start the video software, so that it can be displayed on the display interface. Figure 4 The interface shown.

[0119] Reference Figure 5 , shows a schematic diagram of a vehicle service startup device provided in an embodiment of the present application, the device is applied to a server, and specifically may include a signature request receiving module 51, a startup information signing module 52, a signature information sending module 53, a data packet encryption module 54 and a data packet sending module 55, wherein:

[0120] The signature request receiving module 51 is used to receive the signature request from the vehicle terminal;

[0121] A startup information signature module 52 is used to sign the startup information of the vehicle service to be started in the vehicle terminal in response to the signature request to obtain a startup information signature;

[0122] A signature information sending module 53, used to send the startup information signature to the vehicle terminal, where the startup information signature is used to verify the legitimacy of the startup information of the vehicle service;

[0123] The data packet encryption module 54 is used to encrypt the requested software data packet of the in-vehicle service to obtain an encrypted data packet when receiving a data packet request from the in-vehicle terminal;

[0124] The data packet sending module 55 is used to send the encrypted data packet to the vehicle-mounted terminal, and the vehicle-mounted terminal is used to decrypt the encrypted data packet and start the vehicle-mounted service based on the decrypted data packet.

[0125] In a possible implementation, the startup information signature module 52 includes:

[0126] The public key acquisition submodule is used to obtain the signature private key;

[0127] The signature submodule is used to sign the startup information of the vehicle service based on the signature private key to obtain the startup information signature; the signature private key has a corresponding signature certificate, and the signature certificate is sent to the vehicle terminal in advance. The vehicle terminal is used to verify the startup information signature based on the signature certificate.

[0128] In a possible implementation, the above device further includes:

[0129] A key generation module, used to generate a root key pair and a signature key pair, wherein the root key pair includes a root public key and a root private key, and the signature key pair includes a signature public key and a signature private key;

[0130] A certificate chain generation module, used to generate a root certificate and a signature certificate based on the root public key and the signature public key, wherein the root certificate and the signature certificate constitute the certificate chain;

[0131] The certificate chain sending module is used to send the certificate chain to the vehicle-mounted terminal, and the vehicle-mounted terminal is used to verify the certificate chain according to the root certificate and store the certificate chain after the certificate chain is verified.

[0132] In a possible implementation, the above device further includes:

[0133] A first hash value generating module, used to generate a first hash value for the vehicle-mounted terminal to be burned into the vehicle-mounted terminal; wherein the first hash value is a hash value of the root certificate, so that the vehicle-mounted terminal verifies the certificate chain from the server according to the first hash value;

[0134] The burning indicates that the first hash value can be read by the vehicle-mounted terminal but cannot be modified by the vehicle-mounted terminal.

[0135] In a possible implementation, the data packet encryption module 54 includes:

[0136] A data packet key search submodule, used to search for a data packet key of the vehicle-mounted terminal according to the identification information of the vehicle-mounted terminal, wherein the data packet key is pre-generated by the server and sent to the vehicle-mounted terminal;

[0137] The encryption submodule is used to encrypt the software data packet of the vehicle-mounted service request based on the data packet key of the vehicle-mounted terminal to obtain an encrypted data packet.

[0138] Reference Figure 6 , shows a schematic diagram of a vehicle service startup device provided in an embodiment of the present application, the device is applied to a vehicle terminal, and specifically may include a signature request sending module 61, a signature information verification module 62, a data packet request module 63, a data packet decryption module 64 and a vehicle service startup module 65, wherein:

[0139] A signature request sending module 61, used to send a signature request to a server, wherein the signature request is used to request the server to sign the startup information of the vehicle service to be started;

[0140] A signature information verification module 62, configured to verify the startup information signature based on the stored certificate chain if the startup information signature returned by the server is received;

[0141] A data packet request module 63, configured to request a software data packet corresponding to the in-vehicle service from the server if the startup information signature verification passes;

[0142] A data packet decryption module 64, configured to decrypt the encrypted data packet when receiving the encrypted data packet from the server to obtain a software data packet adapted to the vehicle-mounted service;

[0143] The in-vehicle service starting module 65 is used to start the in-vehicle service based on the software data package of the in-vehicle service.

[0144] In a possible implementation, the certificate chain includes a signature certificate, the signature certificate includes a signature public key, and the signature information verification module 62 includes:

[0145] A first startup information hash value decryption submodule, used to decrypt the startup information signature based on the signature public key to obtain a first startup information hash value from the server;

[0146] A second startup information hash value calculation submodule, used to calculate a second startup information hash value of the startup information of the in-vehicle service;

[0147] The verification submodule is configured to verify that the startup information signature passes if the first startup information hash value and the second startup information hash value are the same.

[0148] In a possible implementation, the above device further includes:

[0149] A certificate chain receiving module, used to receive a certificate chain from a server, wherein the certificate chain includes a root certificate and a signature certificate;

[0150] A first hash value acquisition module, used to acquire a first hash value pre-burned in the vehicle-mounted terminal, where the first hash value is a hash value of a root certificate from the server;

[0151] A second hash value calculation module, used to perform hash calculation on the root certificate in the certificate chain to obtain a second hash value;

[0152] A certificate chain storage module is used to store the certificate chain if the first hash value and the second hash value are the same.

[0153] In a possible implementation, the burning indicates that the first hash value can be read by the vehicle-mounted terminal but cannot be modified by the vehicle-mounted terminal;

[0154] The first hash value acquisition module includes:

[0155] The reading submodule is used to read the first hash value.

[0156] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment part.

[0157] Figure 7 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 7 As shown, the electronic device 7 of this embodiment includes: at least one processor 70 ( Figure 7 Only one is shown in the figure), a memory 71, and a computer program 72 stored in the memory 71 and executable on the at least one processor 70, wherein the processor 70 implements the steps of any of the above-mentioned method embodiments when executing the computer program 72.

[0158] The electronic device may be the above-mentioned server or vehicle-mounted terminal, and the electronic device may include, but is not limited to, a processor 70 and a memory 71. Those skilled in the art may understand that Figure 7 It is only an example of the electronic device 7 and does not constitute a limitation on the electronic device 7. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0159] The processor 70 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0160] In some embodiments, the memory 71 may be an internal storage unit of the electronic device 7, such as a hard disk or memory of the electronic device 7. In other embodiments, the memory 71 may also be an external storage device of the electronic device 7, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device 7. Further, the memory 71 may also include both an internal storage unit of the electronic device 7 and an external storage device. The memory 71 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as the program code of the computer program, etc. The memory 71 may also be used to temporarily store data that has been output or is to be output.

[0161] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0162] An embodiment of the present application provides a computer program product. When the computer program product runs on an electronic device, the electronic device can implement the steps in the above-mentioned method embodiments when executing the computer program product.

[0163] The above-described embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application is described in detail with reference to the above-mentioned embodiments, a person skilled in the art should understand that the technical solutions described in the above-mentioned embodiments can still be modified, or some of the technical features can be replaced by equivalents; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

Claims

1. A method for starting an in-vehicle service, characterized in that: Applied to a server, the method comprises: Receive a signature request from the vehicle terminal; In response to the signature request, signing the startup information of the vehicle service to be started in the vehicle terminal to obtain a startup information signature; Sending the startup information signature to the vehicle terminal, the startup information signature is used to verify the legitimacy of the startup information of the vehicle service; When receiving a data packet request from the vehicle-mounted terminal, encrypting the requested software data packet of the vehicle-mounted service to obtain an encrypted data packet; The encrypted data packet is sent to the vehicle-mounted terminal so that the vehicle-mounted terminal decrypts the encrypted data packet and starts the vehicle-mounted service based on the decrypted data packet.

2. The method according to claim 1, characterized in that The step of signing the startup information of the vehicle service to be started in the vehicle terminal in response to the signature request to obtain the startup information signature includes: Get the signature private key; The startup information of the in-vehicle service is signed based on the signature private key to obtain the startup information signature; the signature private key has a corresponding signature certificate, the signature certificate is sent to the in-vehicle terminal in advance, and the in-vehicle terminal is used to verify the startup information signature based on the signature certificate.

3. The method according to claim 2, characterized in that Before receiving the signature request from the vehicle-mounted terminal, the method further includes: Generate a root key pair and a signature key pair, the root key pair includes a root public key and a root private key, and the signature key pair includes a signature public key and a signature private key; Generate a root certificate and a signature certificate based on the root public key and the signature public key, the root certificate and the signature certificate forming the certificate chain; The certificate chain is sent to the vehicle-mounted terminal, and the vehicle-mounted terminal is used to verify the certificate chain according to the root certificate, and store the certificate chain after the certificate chain is verified.

4. The method according to claim 3, characterized in that Also includes: Generate a first hash value for the vehicle-mounted terminal and burn it into the vehicle-mounted terminal; wherein, The first hash value is a hash value of the root certificate, so that the vehicle-mounted terminal verifies the certificate chain from the server according to the first hash value; The burning indicates that the first hash value can be read by the vehicle-mounted terminal but cannot be modified by the vehicle-mounted terminal.

5. The method according to any one of claims 1 to 3, characterized in that: The step of encrypting the software data packet of the requested in-vehicle service to obtain an encrypted data packet comprises: According to the identification information of the vehicle-mounted terminal, searching for a data packet key of the vehicle-mounted terminal, where the data packet key is pre-generated by the server and sent to the vehicle-mounted terminal; The software data packet of the vehicle-mounted service request is encrypted based on the data packet key of the vehicle-mounted terminal to obtain an encrypted data packet.

6. The method according to claim 4, characterized in that Before receiving the signature request from the vehicle-mounted terminal, the method further includes: Generating a data packet key for the vehicle-mounted terminal; If a key request is received from the vehicle-mounted terminal, searching for a device certificate of the vehicle-mounted terminal according to the identification information of the vehicle-mounted terminal, wherein the device certificate includes a public key of the vehicle-mounted terminal; Encrypting the data packet key based on the public key of the vehicle-mounted terminal; The encrypted data packet key is sent to the vehicle-mounted terminal.

7. A method for starting an in-vehicle service, characterized in that: Applied to a vehicle-mounted terminal, the method comprises: Sending a signature request to the server, wherein the signature request is used to request the server to sign the startup information of the vehicle service to be started; If the startup information signature returned by the server is received, verifying the startup information signature based on the stored certificate chain; If the startup information signature verification is passed, requesting the server for a software data package corresponding to the in-vehicle service; When receiving the encrypted data packet from the server, decrypting the encrypted data packet to obtain a software data packet adapted to the in-vehicle service; The in-vehicle service is started based on the software data package of the in-vehicle service.

8. The method according to claim 7, characterized in that The certificate chain includes a signature certificate, the signature certificate includes a signature public key, and the verification of the startup information signature based on the stored certificate chain includes: Decrypting the startup information signature based on the signature public key to obtain a first startup information hash value from the server; Calculate a second startup information hash value of the startup information of the in-vehicle service; If the first startup information hash value is the same as the second startup information hash value, the startup information signature verification passes.

9. The method according to claim 8, characterized in that Before sending the signature request to the server, the method further includes: Receiving a certificate chain from a server, the certificate chain comprising a root certificate and a signing certificate; Obtaining a first hash value pre-burned in the vehicle-mounted terminal, where the first hash value is a hash value of a root certificate from the server; Performing hash calculation on the root certificate in the certificate chain to obtain a second hash value; If the first hash value and the second hash value are the same, the certificate chain is stored.

10. The method according to claim 9, characterized in that The burning indicates that the first hash value can be read by the vehicle-mounted terminal but cannot be modified by the vehicle-mounted terminal; Acquiring a first hash value pre-burned in the vehicle-mounted terminal includes: The first hash value is read.

11. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the method according to any one of claims 1 to 10 is implemented.

12. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 10 is implemented.

Images