Method and device for installing application

Abstract

The invention relates to the technical field of computers, and discloses an application installation method and device, computer equipment and a storage medium, and the method comprises the steps that a vehicle sends a signature request to a server, so that the server sends a first installation package of a target application and a target signature of the target application to the vehicle; receiving a target signature and a second installation package of the target application, and decrypting the target signature to obtain a hash value of the first combined information; applying a second Hash algorithm to a second installation package of the target application to obtain a Hash value of the second installation package of the target application, obtaining second combination information according to the identifier of the vehicle, the identifier of the target application and the Hash value of the second installation package of the target application, and applying the first Hash algorithm to the second combination information, obtaining a hash value of the second combined information; and when it is determined that the hash value of the first combined information is the same as the hash value of the second combined information, installing the target application by using a second installation package of the target application.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to a method, apparatus, computer equipment, server, and storage medium for installing an application. Background Art

[0002] As the intelligence of vehicles continues to improve, more and more applications (APPs), such as APPs for vehicle-mounted systems, need to be installed on vehicles. However, when a vehicle downloads an APP installation package, the APP installation package sent by the provider of the APP installation package may be intercepted by an illegal program, which tampers with the APP installation package. The illegal program sends the illegal installation package of the APP obtained by tampering to the vehicle, and the vehicle uses the illegal installation package of the APP to install the APP, which has an adverse effect on the safety of the vehicle, such as the vehicle-mounted system of the vehicle being controlled by the illegal program. How to improve the safety of installing applications on vehicles has become a problem that needs to be solved. Summary of the invention

[0003] In view of this, embodiments of the present disclosure provide a method, apparatus, computer device, server, and storage medium for installing an application.

[0004] In a first aspect, an embodiment of the present disclosure provides a method for installing an application, the method comprising:

[0005] The vehicle sends a signature request to the server, so that the server generates a target signature of the target application and sends a first installation package of the target application and the target signature to the vehicle, the signature request including: an identifier of the vehicle and an identifier of the target application, wherein the target signature is obtained by the server encrypting a hash value of the first combination information, the hash value of the first combination information is obtained by the server applying a first hash algorithm to the first combination information, and the first combination information is obtained by the server according to the signature request and the hash value of the first installation package;

[0006] Receiving the target signature and a second installation package of the target application, and decrypting the target signature to obtain a hash value of the first combination information;

[0007] Applying the second hash algorithm to the second installation package to obtain a hash value of the second installation package, and obtaining second combined information according to the signature request and the hash value of the second installation package, and applying the first hash algorithm to the second combined information to obtain a hash value of the second combined information;

[0008] When it is determined that the hash value of the first combination information is the same as the hash value of the second combination information, the target application is installed using the second installation package.

[0009] In a possible implementation, obtaining the second combined information according to the signature request and the hash value of the second installation package includes:

[0010] The vehicle identifier, the target application identifier, and the hash value of the second installation package are concatenated to obtain second combination information.

[0011] In a possible implementation, decrypting the target signature to obtain a hash value of the first combined information includes:

[0012] The target signature is decrypted according to the target public key to obtain a hash value of the first combination information, wherein the target signature is obtained by encrypting the hash value of the first combination information according to a target private key corresponding to the target public key.

[0013] In a possible implementation, before the vehicle sends a signature request to the server, the method further includes:

[0014] A target public key sent by the server is received, wherein the target public key and the target private key are generated by the server.

[0015] In a possible implementation, it also includes:

[0016] When it is determined that the hash value of the first combination information is different from the hash value of the second combination information, a reminder message is displayed, wherein the reminder message indicates that the second installation package of the target application is an unsafe installation package.

[0017] In a second aspect, an embodiment of the present disclosure provides a method for installing an application, the method comprising:

[0018] Receiving a signature request sent by a vehicle, the signature request including: an identification of the vehicle and an identification of a target application;

[0019] Applying the second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application;

[0020] Obtaining first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application;

[0021] Applying a first hash algorithm to the first combined information to obtain a hash value of the first combined information;

[0022] Encrypting the hash value of the first combined information to obtain a target signature of the target application;

[0023] A first installation package of a target application and the target signature are sent to the vehicle.

[0024] In a possible implementation, encrypting the hash value of the first combined information to obtain the target signature of the target application includes:

[0025] The hash value of the first combination information is encrypted according to the target private key corresponding to the target public key to obtain the target signature of the target application.

[0026] In a possible implementation, the method further includes: before receiving the signature request sent by the vehicle, generating a target public key and a target private key corresponding to the target public key; and sending the target public key to the vehicle.

[0027] In a third aspect, an embodiment of the present disclosure provides a device for installing an application, the device for installing an application is installed on a vehicle, and the device for installing an application includes:

[0028] A first sending unit is used to send a signature request to a server, so that the server generates a target signature of a target application and sends a first installation package of the target application and the target signature to the vehicle, wherein the signature request includes: an identifier of the vehicle and an identifier of the target application, wherein the target signature is obtained by the server encrypting a hash value of first combination information, the hash value of the first combination information is obtained by the server applying a first hash algorithm to the first combination information, and the first combination information is obtained by the server according to the signature request and the hash value of the first installation package;

[0029] A first processing unit is used to receive the target signature and a second installation package of the target application, and decrypt the target signature to obtain a hash value of the first combination information;

[0030] A second processing unit is configured to apply a second hash algorithm to the second installation package to obtain a hash value of the second installation package, obtain second combined information according to the signature request and the hash value of the second installation package, and apply the first hash algorithm to the second combined information to obtain a hash value of the second combined information;

[0031] The installation unit is configured to install the target application using the second installation package when it is determined that the hash value of the first combination information is the same as the hash value of the second combination information.

[0032] In a possible implementation, the second processing unit is further used to concatenate the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application to obtain second combined information.

[0033] In one possible implementation, the first processing unit is further used to decrypt the target signature according to the target public key to obtain a hash value of the first combined information, wherein the target signature is obtained by encrypting the hash value of the first combined information according to a target private key corresponding to the target public key.

[0034] In a possible implementation, the device for installing the application further includes:

[0035] The public key receiving unit is used to receive a target public key sent by the server before the vehicle sends a signature request to the server, wherein the target public key and the target private key are generated by the server.

[0036] In a possible implementation, the device for installing the application further includes:

[0037] The reminder unit is configured to display reminder information when it is determined that the hash value of the first combination information is different from the hash value of the second combination information, wherein the reminder information indicates that the second installation package of the target application is an unsafe installation package.

[0038] In a fourth aspect, an embodiment of the present disclosure provides a device for installing an application, the device for installing an application is installed on a server, and the device for installing an application includes:

[0039] A receiving unit, used to receive a signature request sent by a vehicle, the signature request including: an identification of the vehicle and an identification of a target application;

[0040] A third processing unit, configured to apply a second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application;

[0041] A fourth processing unit, configured to obtain first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application;

[0042] A fifth processing unit, configured to apply a first hash algorithm to the first combination information to obtain a hash value of the first combination information;

[0043] An encryption unit, used to encrypt the hash value of the first combination information to obtain a target signature of a target application;

[0044] The second sending unit is used to send a first installation package of the target application and a target signature of the target application to the vehicle.

[0045] In a possible implementation, the encryption unit is further used to encrypt the hash value of the first combination information according to the target private key corresponding to the target public key to obtain the target signature of the target application.

[0046] In a possible implementation, the device for installing the application further includes:

[0047] The public key generation and sending unit is used to generate a target public key and a target private key corresponding to the target public key before receiving a signature request sent by the vehicle; and send the target public key to the vehicle.

[0048] In a fifth aspect, an embodiment of the present disclosure provides a computer device, which is installed on a vehicle. The computer device includes: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the method of the above-mentioned first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0049] In a sixth aspect, an embodiment of the present disclosure provides a server, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, computer instructions being stored in the memory, and the processor executing the method of the above-mentioned second aspect or any corresponding embodiment thereof by executing the computer instructions.

[0050] In a seventh aspect, an embodiment of the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method of the first aspect or any corresponding implementation manner thereof.

[0051] In an eighth aspect, an embodiment of the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method of the second aspect or any corresponding implementation manner thereof.

[0052] In a ninth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the method of the first aspect or any corresponding embodiment thereof.

[0053] In a tenth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the method of the second aspect or any corresponding embodiment thereof.

[0054] The method for installing applications provided by the embodiments of the present disclosure takes into account the following situation: the first installation package of the target application sent by the server may be intercepted and tampered with by an illegal program, resulting in the installation package of the target application received by the vehicle, i.e., the second installation package, being an illegal installation package obtained through tampering. The vehicle uses the illegal installation package of the target application to install the target application, which has an adverse effect on the safety of the vehicle.

[0055] In the method for installing an application provided by the embodiment of the present disclosure, if the received installation package of the target application, i.e., the second installation package of the target application, is actually the first installation package of the target application sent by the server, then the hash value of the second installation package of the target application is the same as the hash value of the first installation package of the target application, and the hash value of the first combination information is the same as the hash value of the second combination information. It can be determined that the received installation package of the target application is a safe installation package, and the target application is installed using the second installation package of the target application, i.e., the first installation package of the target application. If the received installation package of the target application, i.e., the second installation package of the target application, is an illegal installation package of the target application obtained by tampering with the first installation package of the target application through an illegal program, then the hash value of the second installation package of the target application is different from the hash value of the first installation package of the target application, and the hash value of the first combination information is different from the hash value of the second combination information. It can be determined that the received installation package of the target application is an unsafe installation package, and the target application will not be installed using the second installation package of the target application. Thus, the safety of installing applications on vehicles is improved.

[0056] In addition, the following situation is also considered: if the server directly sends the hash value of the first installation package of the target application, the vehicle compares the calculated hash value of the received second installation package of the target application with the received hash value, and if the vehicle determines that the calculated hash value of the received second installation package of the target application is consistent with the received hash value, then the target application is installed using the second installation package of the target application. An illegal program may intercept the hash value of the first installation package of the target application, and use different hash calculations to calculate the hash value of the first installation package of the target application to determine the hash algorithm for calculating the hash value of the first installation package of the target application, and use the hash algorithm for calculating the hash value of the first installation package of the target application to calculate the hash value of the illegal installation package of the target application obtained by tampering with the first installation package of the target application, and the illegal program sends the illegal installation package of the target application and the hash value of the illegal installation package of the target application to the vehicle. The vehicle determines that the calculated hash value of the received second installation package of the target application, i.e., the illegal installation package, is consistent with the received hash value, and uses the illegal installation package of the target application to install the target application.

[0057] In the method for installing applications provided by the disclosed embodiment, the server does not directly send the hash value of the first installation package of the target application to the vehicle, but obtains the first combination information based on the vehicle identification, the target application identification, and the hash value of the first installation package of the target application, encrypts the hash value of the first combination information, obtains the target signature, and the server sends the target signature to the vehicle, thereby preventing an illegal program from sending an illegal installation package of the target application and the hash value of the illegal installation package of the target application to the vehicle, further improving the security of installing applications on the vehicle. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the specific embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the specific embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0059] Figure 1 is an interactive schematic diagram of an example of a method for installing an application provided by an embodiment of the present disclosure;

[0060] Figure 2 is a flowchart of a method for installing an application provided by an embodiment of the present disclosure;

[0061] Figure 3 is a flowchart of another method for installing an application provided by an embodiment of the present disclosure;

[0062] Figure 4 It is a schematic diagram of the structure of a computer device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without making creative work are within the scope of protection of the present disclosure.

[0064] refer to Figure 1 , which shows an interactive schematic diagram of an example of a method for installing an application provided by an embodiment of the present disclosure.

[0065] The user in the vehicle opens the application market APP installed in the vehicle. The vehicle computer screen displays the interface of the application market APP.

[0066] The user in the vehicle clicks a button in the interface of the application market APP indicating downloading of the installation package of the target APP.

[0067] The application market APP installed on the vehicle sends an installation instruction for the target APP to the application service APP.

[0068] After the application service APP receives the installation instruction for the target APP, the application service APP generates a signature request, which includes: the vehicle identification and the target APP identification.

[0069] The application service APP sends the signature request to the cloud application market application running on the cloud server. The cloud application market application finds the first installation package of the target APP according to the identifier of the target application.

[0070] The cloud application market application applies the second hash algorithm to the first installation package of the target APP to obtain a hash value of the first installation package of the target APP.

[0071] The cloud application market application obtains the first combination information according to the identification of the vehicle, the identification of the target APP, and the hash value of the first installation package of the target APP.

[0072] The cloud application market application applies the first hash algorithm to the first combination information to obtain a hash value of the first combination information.

[0073] The cloud application market application encrypts the hash value of the first combination information to obtain a target signature of the target application.

[0074] The cloud application market application sends the target signature of the target application and the first installation package of the target application to the application service APP.

[0075] The application service APP receives the target signature of the target APP and the second installation package of the target application.

[0076] The application service APP decrypts the target signature of the target APP to obtain a hash value of the first combination information.

[0077] The application service APP applies the second hash algorithm to the second installation package of the target application to obtain a hash value of the second installation package of the target application.

[0078] The application service APP obtains the second combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application.

[0079] The application service APP applies the first hash algorithm to the second combination information to obtain a hash value of the second combination information.

[0080] When the application service APP determines that the hash value of the first combination information is the same as the hash value of the second combination information, the target APP is installed using the second installation package of the target APP.

[0081] refer to Figure 2 , which shows a flow chart of a method for installing an application provided by an embodiment of the present disclosure. The method can be executed by a vehicle.

[0082] In step S201 , the vehicle sends a signature request to the server, so that the server generates a target signature of a target application and sends a first installation package of the target application and the target signature of the target application to the vehicle.

[0083] The vehicle may be any vehicle to which the method for installing an application provided by the embodiments of the present disclosure may be applied.

[0084] The target application can be any application that needs to be installed on the vehicle.

[0085] The signature request sent by the vehicle to the server includes: the identification of the vehicle and the identification of the target application.

[0086] In a possible implementation, the identifier of the vehicle is: a vehicle identification number (VIN) of the vehicle.

[0087] In a possible implementation, the identifier of the target application includes: a name of the target application and a version number of the target application.

[0088] In a possible implementation, before the vehicle sends the signature request to the server, the method further includes: the vehicle and the server establish a transport layer security protocol (TLS) link. Data transmission between the vehicle and the server is performed through the TLS link.

[0089] The server stores an installation package of the target application, and the installation package of the target application on the server is a safe installation package.

[0090] In the embodiment of the present disclosure, the installation package of the target application stored on the server is called the first installation package of the target application.

[0091] After the server receives the signature request sent by the vehicle to the server, the server may send a first installation package of the target application and a target signature of the target application to the vehicle in response to the signature request.

[0092] The target signature of the target application is obtained by encrypting the hash value of the first combination information by the server.

[0093] The hash value of the first combination information is obtained by the server applying the first hash algorithm to the first combination information. As an example, the server can use the first combination information as input data of the first hash algorithm, and the first hash algorithm outputs the hash value of the first combination information.

[0094] As an example, the first hash algorithm is one of the SHA1-224 algorithm, the SHA1-256 algorithm, the SHA1-384 algorithm, the SHA1-512 algorithm, the SHA2-256 algorithm, the SHA2-384 algorithm, the SHA2-512 algorithm, and the SHA3-256 algorithm.

[0095] The first combination information is obtained by the server according to the identification of the vehicle in the signature request, the identification of the target application in the signature request, and the hash value of the first installation package of the target application.

[0096] The hash value of the first installation package of the target application is obtained by the server applying the second hash algorithm to the first installation package of the target application. As an example, the server uses the identifier of the first installation package of the target application as input data of the second hash algorithm to obtain the hash value of the first installation package of the target application output by the second hash algorithm.

[0097] As an example, the second hash algorithm is one of the SHA1-224 algorithm, the SHA1-256 algorithm, the SHA1-384 algorithm, the SHA1-512 algorithm, the SHA2-256 algorithm, the SHA2-384 algorithm, the SHA2-512 algorithm, and the SHA3-256 algorithm.

[0098] In a possible implementation, in order to obtain the first combination information, the server concatenates the character strings of each of the vehicle identifier, the target application identifier, and the hash value of the first installation package of the target application within a preset position range.

[0099] In a possible implementation, in order to obtain the first combination information, the server concatenates the vehicle identifier, the target application identifier, and the hash value of the first installation package of the target application to obtain the second combination information. The position of each of the vehicle identifier, the target application identifier, and the hash value of the first installation package of the target application in the first combination information may be preset.

[0100] In step S202, the vehicle receives a target signature of a target application and a second installation package of the target application, and decrypts the target signature of the target application to obtain a hash value of the first combination information.

[0101] In the embodiment of the present disclosure, the received installation package of the target application is called a second installation package of the target application.

[0102] It should be noted that the second installation package of the target application may be the first installation package of the target application sent by the server. The first installation package of the target application may also be an illegal installation package of the target application obtained by tampering with the first installation package of the target application through an illegal program.

[0103] In one possible implementation, the server encrypts the hash value of the first combination information according to the key used by the target symmetric encryption algorithm to obtain the target signature of the target application. In step S202, the vehicle decrypts the target signature of the target application according to the key used by the target symmetric encryption algorithm to obtain the hash value of the first combination information. The target symmetric encryption algorithm can be any symmetric encryption algorithm.

[0104] In a possible implementation, the server encrypts the hash value of the first combination information according to the target private key corresponding to the target public key, and obtains the target signature of the target application for the vehicle to decrypt. Among them, the target public key is the public key used by the target asymmetric encryption algorithm, and the target private key corresponding to the target public key is the private key used by the target asymmetric encryption algorithm. The target asymmetric encryption algorithm can be any asymmetric encryption algorithm. As an example, the target asymmetric encryption algorithm is one of the RSA1024 algorithm, the RSA 2048 algorithm, and the RSA 4096 algorithm. In step S202, the vehicle decrypts the target signature of the target application according to the target public key to obtain the hash value of the first combination information. The hash value of the first combination information is encrypted according to the target private key corresponding to the target public key. Decrypting the target signature of the target application according to the target public key is more difficult to crack than encrypting and decrypting the target signature of the target application according to the key used by the target symmetric encryption algorithm, thereby further improving the security of the installed application.

[0105] In one possible implementation, before the vehicle sends a signature request to the server, the vehicle receives a target public key sent by the server, wherein the target public key and a target private key corresponding to the target public key are generated by the server. Before the vehicle sends a signature request to the server, the vehicle receives the target public key sent by the server, so that the vehicle does not need to generate a key for decryption, saving vehicle resources.

[0106] In step S203, the vehicle applies the second hash algorithm to the second installation package of the target application to obtain a hash value of the second installation package of the target application, and obtains second combined information based on the signature request and the hash value of the second installation package of the target application, and applies the first hash algorithm to the second combined information to obtain a hash value of the second combined information.

[0107] In the embodiment of the present disclosure, the first hash algorithm and the second hash algorithm may be the same or different.

[0108] It should be noted that the process of obtaining the second combination information is the same as the process of obtaining the first combination information. In other words, the first combination information and the second combination information are obtained in the same way.

[0109] In one possible implementation, in order to obtain the second combined information, the character strings of each of the vehicle identifier in the signature request, the target application identifier in the signature request, and the hash value of the second installation package of the target application within a preset position range are concatenated.

[0110] In one possible implementation, in order to obtain the second combined information, the identification of the vehicle in the signature request, the identification of the target application in the signature request, and the hash value of the second installation package of the target application are concatenated to obtain the second combined information. The second combined information includes: the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application. In other words, the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application are respectively used as part of the second combined information. Among them, the position of each of the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application in the second combined information can be pre-set.

[0111] The vehicle identifier, the target application identifier, and the hash value of the second installation package of the target application are concatenated to obtain the second combination information. The second combination information can be obtained quickly, thereby increasing the speed of installing the target application.

[0112] As an example, the first hash algorithm is the SHA-256 algorithm. The second combined information = (identification of the target application | hash value of the second installation package of the target application | identification of the vehicle). The hash value of the second combined information = SHA-256 (second combined information). Wherein, | represents concatenation.

[0113] In step S204, when it is determined that the hash value of the first combination information is the same as the hash value of the second combination information, the target application is installed using the second installation package of the target application.

[0114] If the received installation package of the target application, that is, the second installation package of the target application, is actually the first installation package of the target application sent by the server, the hash value of the second installation package of the target application is the same as the hash value of the first installation package of the target application, and the hash value of the first combination information is the same as the hash value of the second combination information. It can be determined that the received second installation package of the target application is a safe installation package, and the target application is installed using the second installation package of the target application, that is, the first installation package of the target application.

[0115] If the received installation package of the target application, that is, the second installation package of the target application, is an illegal installation package of the target application obtained by tampering with the first installation package of the target application through an illegal program, the hash value of the second installation package of the target application is different from the hash value of the first installation package of the target application, and the hash value of the first combination information is different from the hash value of the second combination information. It can be determined that the received installation package of the target application is an unsafe installation package, and the second installation package of the target application will not be used to install the target application.

[0116] The second installation package of the target application includes a code for installing the target application, and when it is determined that the hash value of the first combined information is the same as the hash value of the second combined information, the vehicle executes the code for installing the target application, thereby installing the target application.

[0117] In an optional implementation, the method further includes: when it is determined that the hash value of the first combination information is different from the hash value of the second combination information, a reminder message is displayed, wherein the reminder message indicates that the second installation package of the target application is an unsafe installation package. This facilitates the user in the vehicle to know that the second installation package of the target application is an unsafe installation package, so as to take relevant measures, such as temporarily not downloading the installation package of the target application again, and the vehicle temporarily not sending a signature request to the server.

[0118] refer to Figure 3 , which shows a flow chart of another method for installing an application provided by an embodiment of the present disclosure. The method can be executed by a server.

[0119] In step S301, the server receives a signature request sent by a vehicle.

[0120] The server may be any server to which the method for installing an application provided by the embodiments of the present disclosure can be applied.

[0121] The signature request sent by the vehicle includes: the identification of the vehicle and the identification of the target application.

[0122] In step S302, the server applies the second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application.

[0123] The server stores a first installation package of a target application, and the first installation package of the target application is a secure installation package.

[0124] In step S303, the server obtains first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application.

[0125] In step S304, the server applies the first hash algorithm to the first combination information to obtain a hash value of the first combination information.

[0126] In step S305, the server encrypts the hash value of the first combination information to obtain a target signature of the target application.

[0127] In a possible implementation, in step S305, the server encrypts the hash value of the first combination information according to the target private key corresponding to the target public key to obtain the target signature of the target application.

[0128] Among them, the target public key is used to decrypt the target signature of the target application. The target public key is the public key used by the target asymmetric encryption algorithm. The target private key corresponding to the target public key is the private key used by the target asymmetric encryption algorithm. The target asymmetric encryption algorithm can be any asymmetric encryption algorithm.

[0129] In a possible implementation, the method further includes: before step S301, generating a target public key and a target private key corresponding to the target public key; and sending the target public key to the vehicle.

[0130] In step S306, the server sends a first installation package of the target application and a target signature of the target application to the vehicle.

[0131] The embodiments of the present disclosure provide a device for installing an application. The device for installing an application is installed on a vehicle, and the device for installing an application is used to implement the above-mentioned embodiments and preferred implementation modes, and those that have been described will not be repeated here. As used below, the term "unit" may be a combination of software and / or hardware that implements a predetermined function. Although the systems described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceivable.

[0132] The device for installing the application includes:

[0133] A first sending unit is used to send a signature request to a server, so that the server generates a target signature of a target application and sends a first installation package of the target application and the target signature to the vehicle, wherein the signature request includes: an identifier of the vehicle and an identifier of the target application, wherein the target signature is obtained by the server encrypting a hash value of first combination information, the hash value of the first combination information is obtained by the server applying a first hash algorithm to the first combination information, and the first combination information is obtained by the server according to the signature request and the hash value of the first installation package;

[0134] A first processing unit is used to receive the target signature and a second installation package of the target application, and decrypt the target signature to obtain a hash value of the first combination information;

[0135] A second processing unit is configured to apply a second hash algorithm to the second installation package to obtain a hash value of the second installation package, obtain second combined information according to the signature request and the hash value of the second installation package, and apply the first hash algorithm to the second combined information to obtain a hash value of the second combined information;

[0136] The installation unit is configured to install the target application using the second installation package when it is determined that the hash value of the first combination information is the same as the hash value of the second combination information.

[0137] In a possible implementation, the second processing unit is further used to concatenate the identification of the vehicle, the identification of the target application, and the hash value of the second installation package of the target application to obtain second combined information.

[0138] In one possible implementation, the first processing unit is further used to decrypt the target signature according to the target public key to obtain a hash value of the first combined information, wherein the target signature is obtained by encrypting the hash value of the first combined information according to a target private key corresponding to the target public key.

[0139] In a possible implementation, the device for installing the application further includes:

[0140] The public key receiving unit is used to receive a target public key sent by the server before the vehicle sends a signature request to the server, wherein the target public key and the target private key are generated by the server.

[0141] In a possible implementation, the device for installing the application further includes:

[0142] The reminder unit is configured to display reminder information when it is determined that the hash value of the first combination information is different from the hash value of the second combination information, wherein the reminder information indicates that the second installation package of the target application is an unsafe installation package.

[0143] The disclosed embodiments provide a device for installing an application. The device for installing an application is installed on a server, and the device for installing an application is used to implement the above-mentioned embodiments and preferred implementation modes, which have been described and will not be repeated here. As used below, the term "unit" may be a combination of software and / or hardware that implements a predetermined function. Although the systems described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0144] The device for installing the application includes:

[0145] A receiving unit, used to receive a signature request sent by a vehicle, the signature request including: an identification of the vehicle and an identification of a target application;

[0146] A third processing unit, configured to apply a second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application;

[0147] A fourth processing unit, configured to obtain first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application;

[0148] A fifth processing unit, configured to apply a first hash algorithm to the first combination information to obtain a hash value of the first combination information;

[0149] An encryption unit, used to encrypt the hash value of the first combination information to obtain a target signature of a target application;

[0150] The second sending unit is used to send a first installation package of the target application and a target signature of the target application to the vehicle.

[0151] In a possible implementation, the encryption unit is further used to encrypt the hash value of the first combination information according to the target private key corresponding to the target public key to obtain the target signature of the target application.

[0152] In a possible implementation, the device for installing the application further includes:

[0153] The public key generation and sending unit is used to generate a target public key and a target private key corresponding to the target public key before receiving a signature request sent by the vehicle; and send the target public key to the vehicle.

[0154] In this embodiment, the device is presented in the form of a functional unit, where the unit refers to an ASIC circuit, a processor and a memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0155] The further functional description of each of the above units is the same as that of the above corresponding embodiments and will not be repeated here.

[0156] refer to Figure 4 , which shows a schematic diagram of the structure of a computer device provided by an embodiment of the present disclosure, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses for communication, and can be installed on a common motherboard or installed in other ways as needed. The processor can process instructions executed in the computer device, including instructions stored in or on the memory to display graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides part of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system).

[0157] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0158] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0159] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0160] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0161] The computer device further includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means.

[0162] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0163] The embodiments of the present disclosure also provide a computer-readable storage medium. The above-mentioned method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium and downloaded through a network, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0164] A portion of the embodiments of the present disclosure may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can execute or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes, but is not limited to, source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0165] Although the embodiments of the present disclosure have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for installing an application, characterized in that: Applied to a vehicle, the method comprises: The vehicle sends a signature request to the server, so that the server generates a target signature of the target application and sends a first installation package of the target application and the target signature to the vehicle, the signature request includes: an identifier of the vehicle and an identifier of the target application, wherein the target signature is obtained by the server encrypting a hash value of first combination information, the hash value of the first combination information is obtained by the server applying a first hash algorithm to the first combination information, and the first combination information is obtained by the server according to the signature request and the hash value of the first installation package; Receiving the target signature and a second installation package of the target application, and decrypting the target signature to obtain a hash value of the first combination information; Applying a second hash algorithm to the second installation package to obtain a hash value of the second installation package, and obtaining second combined information according to the signature request and the hash value of the second installation package, and applying the first hash algorithm to the second combined information to obtain a hash value of the second combined information; When it is determined that the hash value of the first combination information is the same as the hash value of the second combination information, the target application is installed using the second installation package.

2. The method according to claim 1, characterized in that The second combined information obtained according to the signature request and the hash value of the second installation package includes: The vehicle identifier, the target application identifier, and the hash value of the second installation package are concatenated to obtain second combined information.

3. The method according to claim 1, characterized in that Decrypting the target signature to obtain a hash value of the first combination information includes: The target signature is decrypted according to the target public key to obtain a hash value of the first combination information, wherein the target signature is obtained by encrypting the hash value of the first combination information according to a target private key corresponding to the target public key.

4. The method according to claim 3, characterized in that: Before the vehicle sends the signature request to the server, the method further includes: A target public key sent by the server is received, wherein the target public key and the target private key are generated by the server.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: When it is determined that the hash value of the first combination information is different from the hash value of the second combination information, a reminder message is displayed, wherein the reminder message indicates that the second installation package of the target application is an unsafe installation package.

6. A method for installing an application, characterized in that: Applied to the server, the method further comprises: Receiving a signature request sent by a vehicle, the signature request including: an identification of the vehicle and an identification of a target application; Applying the second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application; Obtaining first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application; Applying a first hash algorithm to the first combined information to obtain a hash value of the first combined information; Encrypting the hash value of the first combined information to obtain a target signature of the target application; A first installation package of a target application and the target signature are sent to the vehicle.

7. A device for installing an application, characterized in that: Installed on the vehicle, including: a first sending unit, configured to send a signature request to a server, so that the server generates a target signature of a target application and sends a first installation package of the target application and the target signature to the vehicle, wherein the signature request includes: an identifier of the vehicle and an identifier of the target application, wherein the target signature is obtained by the server encrypting a hash value of first combination information, the hash value of the first combination information is obtained by the server applying a first hash algorithm to the first combination information, and the first combination information is obtained by the server according to the signature request and the hash value of the first installation package; A first processing unit, configured to receive the target signature and a second installation package of the target application, and decrypt the target signature to obtain a hash value of the first combination information; a second processing unit, configured to apply a second hash algorithm to the second installation package to obtain a hash value of the second installation package, obtain second combined information according to the signature request and the hash value of the second installation package, and apply the first hash algorithm to the second combined information to obtain a hash value of the second combined information; The installation unit is configured to install the target application using the second installation package when it is determined that the hash value of the first combination information is the same as the hash value of the second combination information.

8. A device for installing an application, characterized in that: Installed on the server, including: A receiving unit, configured to receive a signature request sent by a vehicle, the signature request including: an identification of the vehicle and an identification of a target application; A third processing unit, configured to apply a second hash algorithm to the first installation package of the target application to obtain a hash value of the first installation package of the target application; A fourth processing unit, configured to obtain first combination information according to the identification of the vehicle, the identification of the target application, and the hash value of the first installation package of the target application; A fifth processing unit, configured to apply a first hash algorithm to the first combination information to obtain a hash value of the first combination information; An encryption unit, used to encrypt the hash value of the first combination information to obtain a target signature of a target application; The second sending unit is used to send a first installation package of the target application and a target signature of the target application to the vehicle.

9. A computer device, characterized in that: Installed on the vehicle, including: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method according to any one of claims 1 to 5 by executing the computer instructions.

10. A server, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method of claim 6 by executing the computer instructions.

Images