Software package encryption protection system and method

Abstract

The invention provides a software package encryption protection system and method, and belongs to the technical field of software package encryption, the software package encryption protection system comprises a certificate issuing mechanism, a remote upgrade server and a vehicle end, and during work, the certificate issuing mechanism issues a digital certificate to the remote upgrade server. And the remote upgrading server firstly encrypts the software package through the symmetric key, and then transmits the digital certificate, the encrypted software package and the digital envelope to the remote upgrading terminal. The remote upgrading terminal verifies the digital certificate through the public key of the certificate issuing mechanism, determines the identity of the remote upgrading server, decrypts the digital envelope to obtain the symmetric key after determining the identity of the remote upgrading server, decrypts the encrypted software package input by the remote upgrading server through the symmetric key, and sends the encrypted software package to the remote upgrading server; and the remote upgrading terminal transmits the upgrading package to the automobile electronic control unit. According to the invention, the security of information transmission between the remote upgrade server and the vehicle end is improved, and the risk that the transmitted information is acquired by a third party is eliminated.

Description

Technical Field

[0001] The present invention belongs to the technical field of software package encryption, and in particular, relates to a system and method for software package encryption protection. Background Art

[0002] With the development of the smart car industry, information transmission between cars and servers is becoming more and more frequent, the risk of data leakage and reverse analysis is increasing, and the market's requirements for data encryption levels are becoming higher.

[0003] Chinese Patent 105260198A discloses a vehicle software update verification. The mobile device may be configured to: receive a message including an encryption key, wherein the software update for the vehicle is encrypted using the encryption key; provide a user interface requesting a user to verify the installation of the software update; in response to receiving the user verification, provide the encryption key to the vehicle to allow the vehicle to decrypt the software update. The update server may be configured to: send the software update encrypted using the encryption key to the vehicle; receive a request from the vehicle, wherein the request is used to request that the encryption key used to encrypt the software update be provided to a mobile device associated with the vehicle for verification of the software update; and send the encryption key to the mobile device in response to the request.

[0004] The existing encryption technology has low security and is easily reverse analyzed, resulting in information leakage. Summary of the invention

[0005] The present invention aims to improve a system and method for protecting software package encryption, so as to achieve the technical purpose of improving the security of software package encryption transmission.

[0006] In order to achieve the above object, the technical solution adopted by the present invention is:

[0007] The present invention provides a system for encrypting and protecting a software package, comprising a certificate issuing agency, a remote upgrade server and a vehicle end, wherein the output end of the remote upgrade server is connected to the input end of the certificate issuing agency, the output end of the certificate issuing agency is connected to the input end of the remote upgrade server, and the output end of the remote upgrade server is connected to the input end of the vehicle end.

[0008] The remote upgrade server outputs the public key and identity information to the certificate issuing agency, the certificate issuing agency outputs the digital certificate to the remote upgrade server, and the remote upgrade server outputs the encrypted upgrade package, digital certificate and digital envelope to the vehicle end.

[0009] The vehicle end includes a remote upgrade terminal and an automobile electronic control unit. The output end of the remote upgrade server is connected to the input end of the remote upgrade terminal, and the output end of the remote upgrade terminal is connected to the input end of the automobile electronic control unit.

[0010] The remote upgrade terminal passes through the gateway and is connected to the automobile electronic control unit through a bus.

[0011] The certificate issuing agency is connected to a remote upgrade server via a wireless network, and the remote upgrade server is connected to the vehicle end via a mobile communication network.

[0012] The present invention provides a method for encrypting and protecting a software package:

[0013] Step 1: The certificate issuing authority issues a digital certificate to the remote update server;

[0014] Step 2: The remote upgrade server first encrypts the software package using a symmetric key, and then transmits the digital certificate, the encrypted software package, and the digital envelope to the remote upgrade terminal;

[0015] Step 3: The remote upgrade terminal verifies the digital certificate with the public key of the certificate issuing agency to confirm the identity of the remote upgrade server. After confirming the identity of the remote upgrade server, the vehicle end decrypts the digital envelope to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted software package input by the remote upgrade server. The remote upgrade terminal transmits the upgrade package to the vehicle's electronic control unit.

[0016] In step one, the remote upgrade server uploads the public key and identity information of the remote upgrade server to the certificate issuing agency. The certificate issuing agency encrypts the public key and identity information of the remote upgrade server uploaded by the remote upgrade server through the private key of the certificate issuing agency to obtain a digital certificate, and the certificate issuing agency transmits the digital certificate to the remote upgrade server.

[0017] In step 2, the remote upgrade server encrypts the symmetric key using the vehicle's public key to obtain a digital envelope.

[0018] In step three, the vehicle end decrypts the digital envelope using the vehicle end's private key to obtain the symmetric key.

[0019] The technical effects of the present invention are:

[0020] (1) The present invention improves the security of information transmission between the remote upgrade server and the vehicle end, eliminating the risk of the transmitted information being obtained by a third party.

[0021] (2) The present invention verifies the identity of the remote upgrade server through a digital certificate issued by a certificate issuing agency, preventing malicious devices from disguising themselves as remote upgrade servers and sending viruses to the vehicle end, thereby improving the security of the system.

[0022] (3) In the present invention, the remote upgrade terminal transmits the symmetric key to the vehicle end through the digital envelope technology, thereby ensuring the security of the symmetric key transmission.

[0023] (4) After the symmetric key in the present invention is securely transmitted to the vehicle, the remote upgrade server can use the symmetric key to encrypt and decrypt the information to be transmitted, thereby reducing the verification process of information transmission and improving the efficiency of information transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] This specification includes the following drawings, which show the following contents:

[0025] Figure 1 A logical structure diagram of a system and method for encrypting and protecting a software package according to the present invention;

[0026] Figure 1 The markings are: 1. Certificate issuing authority; 2. Remote upgrade server; 3. Vehicle end. DETAILED DESCRIPTION

[0027] The specific implementation methods of the present invention are further explained in detail below by describing the embodiments with reference to the accompanying drawings, with the aim of helping those skilled in the art to have a more complete, accurate and in-depth understanding of the inventive concept and technical solution of the present invention and facilitating their implementation.

[0028] The present invention provides a system for encrypting and protecting a software package, comprising a certificate issuing agency 1, a remote upgrade server 2 and a vehicle end 3, wherein the output end of the remote upgrade server 2 is connected to the input end of the certificate issuing agency 1, the output end of the certificate issuing agency 1 is connected to the input end of the remote upgrade server 2, and the output end of the remote upgrade server 2 is connected to the input end of the vehicle end 3.

[0029] The remote upgrade server 2 outputs the public key and identity information to the certificate issuing authority 1, the certificate issuing authority 1 outputs the digital certificate to the remote upgrade server 2, and the remote upgrade server 2 outputs the encrypted upgrade package, digital certificate and digital envelope to the vehicle end 3.

[0030] The vehicle end 3 includes a remote upgrade terminal and an automotive electronic control unit. The output end of the remote upgrade server 2 is connected to the input end of the remote upgrade terminal, and the output end of the remote upgrade terminal is connected to the input end of the automotive electronic control unit. The remote upgrade terminal passes through the gateway and is connected to the automotive electronic control unit through a bus. The certificate issuing authority 1 is connected to the remote upgrade server 2 through a wireless network, and the remote upgrade server 2 is connected to the vehicle end 3 through a mobile communication network.

[0031] The present invention provides a method for encrypting and protecting a software package:

[0032] Step 1: The certificate issuing authority 1 issues a digital certificate to the remote update server 2.

[0033] Step 2: The remote upgrade server 2 first encrypts the software package using a symmetric key, and then transmits the digital certificate, the encrypted software package and the digital envelope to the remote upgrade terminal.

[0034] Step 3: The remote upgrade terminal verifies the digital certificate through the public key of the certificate issuing agency 1 to determine the identity of the remote upgrade server 2. After determining the identity of the remote upgrade server 2, the vehicle end 3 decrypts the digital envelope to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted software package input by the remote upgrade server 2. The remote upgrade terminal transmits the upgrade package to the vehicle electronic control unit.

[0035] In step one, the remote upgrade server 2 uploads the public key and identity information of the remote upgrade server 2 to the certificate issuing agency 1. The certificate issuing agency 1 encrypts the public key and identity information of the remote upgrade server 2 uploaded by the remote upgrade server 2 through the private key of the certificate issuing agency 1 to obtain a digital certificate. The certificate issuing agency 1 transmits the digital certificate to the remote upgrade server 2.

[0036] In step 2, the remote upgrade server 2 encrypts the symmetric key using the public key of the vehicle end 3 to obtain a digital envelope.

[0037] In step three, the vehicle end 3 decrypts the digital envelope using the private key of the vehicle end 3 to obtain the symmetric key.

[0038] The following is a detailed description of a system and method for encrypting and protecting a software package according to the present invention.

[0039] The present invention discloses a system for software package encryption protection, including a certificate issuing agency 1, a remote upgrade server 2 and a vehicle end 3, wherein the vehicle end 3 includes a remote upgrade terminal and a vehicle electronic control unit. The certificate issuing agency 1 is used to issue a digital certificate to the remote upgrade server 2, and the digital certificate proves the identity of the remote server. In the present invention, the vehicle end 3 verifies the identity of the remote upgrade server 2 before receiving the information input by the remote upgrade server 2. Specifically, the vehicle end 3 downloads the public key of the certificate issuing agency 1 through the wireless network, and the vehicle end 3 verifies the digital certificate through the public key to confirm that the received information is sent by the remote upgrade server 2. The present invention proves the identity of the remote upgrade server 2 through the digital certificate issued by the certificate issuing agency 1, prevents malicious devices from disguising the remote upgrade server 2 and sending viruses to the vehicle end 3, and improves the security of the system.

[0040] The remote upgrade server 2 is used to securely transmit the software package to the remote upgrade terminal of the vehicle end 3. The specific operation of securely transmitting the software package is that the remote upgrade server 2 encrypts the software package through a symmetric key, and the remote upgrade server 2 encrypts the symmetric key through the public key of the vehicle end 3 to generate a digital envelope, wherein the public key of the vehicle end 3 is obtained by the remote upgrade server 2 through the wireless network. The remote upgrade server 2 transmits the digital certificate, the encrypted upgrade package and the digital envelope to the vehicle end 3, wherein the digital certificate is used to verify the identity of the remote upgrade server 2, the encrypted upgrade package ensures the secure transmission of the upgrade package, and the digital envelope is used to securely transmit the symmetric key to the vehicle end 3 to prevent the symmetric key from being obtained and causing the data to be cracked. In the present invention, the remote upgrade terminal transmits the symmetric key to the vehicle end 3 through the digital envelope technology, thereby ensuring the security of the symmetric key transmission.

[0041] The remote upgrade terminal is used to determine the identity of the information sender. Specifically, the remote upgrade terminal verifies the digital certificate through the public key of the certificate issuing agency 1 to obtain the identity information of the sender. At the same time, the remote upgrade server 2 is used to decrypt the encrypted software package obtained. Specifically, the remote upgrade server 2 decrypts the digital envelope through the private key of the vehicle end 3 to obtain the symmetric key, and then decrypts the encrypted software package input by the remote upgrade server 2 through the symmetric key. Finally, the remote upgrade terminal transmits the software upgrade package to the vehicle electronic control unit.

[0042] The certificate issuing authority 1 is connected to the remote upgrade server 2 via a wireless network, the remote upgrade server 2 is connected to the remote upgrade terminal via a mobile communication network, and the remote upgrade terminal is connected to the vehicle electronic control unit via a gateway and a bus.

[0043] The following is a detailed description of a method for encrypting and protecting a software package according to the present invention.

[0044] The certificate issuing authority 1 issues a digital certificate to the remote upgrade server 2. Specifically, the remote upgrade server 2 uploads the public key and identity information of the remote upgrade server 2 to the certificate issuing authority 1, and the certificate issuing authority 1 encrypts the public key and identity information of the remote upgrade server 2 uploaded by the remote upgrade server 2 through the private key of the certificate issuing authority 1 to obtain a digital certificate, and the certificate issuing authority 1 transmits the digital certificate to the remote upgrade server 2.

[0045] The remote upgrade server 2 encrypts the software package with a symmetric key. The remote upgrade server 2 obtains the public key of the vehicle end 3 from the wireless network, and the remote upgrade server 2 encrypts the symmetric key with the public key of the vehicle end 3 to obtain a digital envelope. The remote upgrade server 2 transmits the digital certificate, the encrypted software package and the digital envelope to the remote upgrade terminal.

[0046] Before receiving the software package information, the remote upgrade terminal in the vehicle end 3 will verify the identity of the sender. Specifically, the remote upgrade terminal verifies the digital certificate through the public key of the certificate issuing agency 1 to determine the identity of the remote upgrade server 2. After determining the identity of the remote upgrade server 2, the vehicle end 3 decrypts the digital envelope through the private key of the vehicle end 3 to obtain a symmetric key, and then decrypts the encrypted software package input by the remote upgrade server 2 through the symmetric key. The remote upgrade terminal transmits the upgrade package to the vehicle electronic control unit. After the symmetric key in the present invention is securely transmitted to the vehicle end 3, the remote upgrade server 2 can encrypt and decrypt the information to be transmitted through the symmetric key, which reduces the verification process of information transmission and improves the efficiency of information transmission.

[0047] The present invention improves the security of information transmission between the remote upgrade server 2 and the vehicle end 3, and eliminates the risk of the transmitted information being acquired by a third party.

[0048] The present invention is described above by way of example in conjunction with the accompanying drawings. Obviously, the specific implementation of the present invention is not limited to the above-mentioned methods. As long as various non-substantial improvements are made using the method concept and technical solution of the present invention; or the above concept and technical solution of the present invention are directly applied to other occasions without improvement, they are all within the protection scope of the present invention.

Claims

1. A system for encrypting and protecting a software package, characterized in that: It includes a certificate issuing agency, a remote upgrade server and a vehicle end, wherein the output end of the remote upgrade server is connected to the input end of the certificate issuing agency, the output end of the certificate issuing agency is connected to the input end of the remote upgrade server, and the output end of the remote upgrade server is connected to the input end of the vehicle end.

2. A software package encryption protection system as claimed in claim 1, characterized in that: The remote upgrade server outputs the public key and identity information to the certificate issuing agency, the certificate issuing agency outputs the digital certificate to the remote upgrade server, and the remote upgrade server outputs the encrypted upgrade package, digital certificate and digital envelope to the vehicle end.

3. A software package encryption protection system as claimed in claim 1, characterized in that: The vehicle end includes a remote upgrade terminal and an automobile electronic control unit. The output end of the remote upgrade server is connected to the input end of the remote upgrade terminal, and the output end of the remote upgrade terminal is connected to the input end of the automobile electronic control unit.

4. A software package encryption protection system as claimed in claim 3, characterized in that: The remote upgrade terminal passes through the gateway and is connected to the automobile electronic control unit through a bus.

5. A software package encryption protection system as claimed in claim 1, characterized in that: The certificate issuing agency is connected to a remote upgrade server via a wireless network, and the remote upgrade server is connected to the vehicle end via a mobile communication network.

6. A method for encrypting and protecting a software package as claimed in any one of claims 1 to 5, characterized in that: Step 1: The certificate issuing authority issues a digital certificate to the remote update server; Step 2: The remote upgrade server first encrypts the software package using a symmetric key, and then transmits the digital certificate, the encrypted software package, and the digital envelope to the remote upgrade terminal; Step 3: The remote upgrade terminal verifies the digital certificate with the public key of the certificate issuing agency to confirm the identity of the remote upgrade server. After confirming the identity of the remote upgrade server, the vehicle end decrypts the digital envelope to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted software package input by the remote upgrade server. The remote upgrade terminal transmits the upgrade package to the vehicle's electronic control unit.

7. A method for encrypting and protecting a software package as claimed in claim 6, characterized in that: In step one, the remote upgrade server uploads the public key and identity information of the remote upgrade server to the certificate issuing agency. The certificate issuing agency encrypts the public key and identity information of the remote upgrade server uploaded by the remote upgrade server through the private key of the certificate issuing agency to obtain a digital certificate, and the certificate issuing agency transmits the digital certificate to the remote upgrade server.

8. A method for encrypting and protecting a software package as claimed in claim 6, characterized in that: In step 2, the remote upgrade server encrypts the symmetric key using the vehicle's public key to obtain a digital envelope.

9. A method for encrypting and protecting a software package as claimed in claim 6, characterized in that: In step three, the vehicle end decrypts the digital envelope using the vehicle end's private key to obtain the symmetric key.

Images