Upgrading method and device for vehicle-mounted device

Abstract

The invention discloses a vehicle-mounted equipment upgrading method and equipment, and relates to the technical field of information and communication. The method comprises the following steps: receiving first signature information and first public key information from the electronic equipment, and sending an upgrade package to the electronic equipment under the condition that the first signature information and the first public key information are successfully verified. Wherein the first signature information is obtained by using a private key of the electronic equipment to sign a first upgrading request, the first upgrading request is used for requesting an upgrading package of at least one vehicle-mounted equipment, the first public key information is used for verifying the identity of the electronic equipment, and the first public key information comprises a public key certificate of a public key of the electronic equipment, or the first signature information is used for verifying the identity of the electronic equipment. The first public key information comprises a public key of the electronic equipment. Therefore, whether the received information is tampered or not can be verified through the first signature information, the identity of the electronic equipment is verified through the first public key information, and the upgrading safety of the vehicle-mounted equipment is guaranteed.

Description

Upgrading method and equipment for vehicle-mounted equipment Technical Field

[0001] The present application relates to the field of information and communication technology, and in particular to a method and device for upgrading vehicle-mounted equipment. Background Art

[0002] With the continuous advancement of computer and internet technologies, in-vehicle devices are becoming increasingly versatile. To continuously improve these features, their firmware or software requires regular upgrades. Typically, these upgrades are performed through vehicle recalls, a costly and time-consuming process.

[0003] To address this issue, over-the-air (OTA) technology has been proposed to upgrade in-vehicle devices. For example, a device external to the vehicle requests an upgrade package from a server, which then sends the requested package to the in-vehicle device, allowing it to upgrade its firmware or software. However, this method carries significant security risks.

[0004] Summary of the Invention

[0005] The embodiments of the present application provide a method and device for upgrading an in-vehicle device, which can ensure the security of upgrading the in-vehicle device.

[0006] To achieve the above objectives, the embodiments of the present application adopt the following technical solutions:

[0007] In a first aspect, a method for upgrading an in-vehicle device is provided. This method can be executed by a server; alternatively, it can be executed by a module implemented in the server, such as a chip, chip system, or circuit; or alternatively, it can be implemented by a logic module or software that implements all or part of the server's functions, without limitation. For ease of description, the following description uses server execution as an example.

[0008] The method includes: receiving first signature information and first public key information from an electronic device, the first signature information being obtained by signing a first upgrade request with a private key of the electronic device, the first upgrade request being used to request an upgrade package for at least one vehicle-mounted device, the first public key information being used to verify the identity of the electronic device, the first public key information including a public key certificate of the public key of the electronic device, or the first public key information including the public key of the electronic device; and sending the upgrade package to the electronic device if the first signature information and the first public key information are successfully verified.

[0009] Based on the method provided in the first aspect above, the server can verify the legitimacy of the electronic device through the first public key information, such as whether the electronic device has the authority to download the upgrade package, etc., and verify whether the received information has been tampered with through the first signature information to ensure the security of the vehicle-mounted equipment upgrade.

[0010] In a possible implementation, the method further includes: verifying the first signature information according to a public key of the electronic device.

[0011] Based on the above possible implementation manner, it is possible to verify whether the first signature information has been tampered with, thereby improving communication security.

[0012] In a possible implementation, the method further includes: receiving a public key of the electronic device from an in-vehicle control device; and sending the public key certificate to the in-vehicle control device, where the public key certificate is generated based on the private key of the server.

[0013] Based on the above possible implementation manner, the server may generate a public key certificate for the public key of the electronic device, so that the server can verify the legitimacy of the electronic device according to the public key certificate.

[0014] In a possible implementation, the method further includes: verifying the public key certificate according to the public key of the server.

[0015] Based on the above possible implementation, if the public key certificate is generated by the server according to its own private key, the server can verify the public key certificate according to its own public key.

[0016] In a possible implementation, the public key certificate is generated according to a private key of the vehicle-mounted control device, and the method further includes: verifying the public key certificate according to the public key of the vehicle-mounted control device.

[0017] Based on the above possible implementation manner, if the public key certificate is generated according to the private key of the vehicle-mounted control device, the server may verify the public key certificate according to the public key of the vehicle-mounted control device.

[0018] In a possible implementation, the method further includes: receiving a public key of the electronic device from an in-vehicle control device; and generating authorization information of the public key of the electronic device.

[0019] Based on the above possible implementation manner, the server may generate authorization information for the public key of the electronic device, so that the server can verify the legitimacy of the electronic device according to the authorization information.

[0020] In a possible implementation, the method further includes: verifying the public key of the electronic device according to the authorization information.

[0021] Based on the above possible implementation, the server does not need a public key certificate to verify the legitimacy of the electronic device, but verifies the legitimacy of the electronic device through the authorization information. The entire verification process does not require the use of a certificate chain, and the verification efficiency is high.

[0022] In a possible implementation, the method further includes: deleting the authorization information.

[0023] Based on the above possible implementation methods, the server can cancel the authorization of the electronic device.

[0024] In a possible implementation, the first upgrade request includes information about the at least one in-vehicle device to be upgraded.

[0025] Based on the above possible implementation, the server can verify the compatibility of the upgrade package with the at least one in-vehicle device based on the information to be upgraded. For example, if the version information of the latest released software stored on the server is the same as the version information in the information to be upgraded, the server determines that the at least one in-vehicle device does not need to be upgraded. If the version information of the latest released software stored on the server is higher than the version information in the information to be upgraded, the server determines that the at least one in-vehicle device needs to be upgraded.

[0026] In one possible implementation, the public key certificate includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

[0027] Based on the above possible implementation methods, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it means that the authorization period of the public key certificate is short-term or one-time authorization. Optionally, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it also means that the public key certificate is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the public key certificate includes the identification of the vehicle-mounted control device, it means that the public key certificate is generated or authorized by the vehicle-mounted control device. If the public key certificate includes the identification of the server, it means that the public key certificate is generated or authorized by the server. If the public key certificate includes the identification of the electronic device, it means that the public key certificate is authorized to the electronic device.

[0028] In a second aspect, a method for upgrading an in-vehicle device is provided. This method can be performed by an electronic device; alternatively, it can be performed by a module implemented in the electronic device, such as a chip, chip system, or circuit; alternatively, it can be performed by a logic module or software that implements all or part of the functions of the electronic device, without limitation. For ease of description, the following description uses the method performed by an electronic device as an example.

[0029] The method includes: sending first signature information and first public key information to a server, the first signature information is obtained by signing a first upgrade request with the private key of the electronic device, the first upgrade request is used to request an upgrade package for at least one vehicle-mounted device, the first public key information is used to verify the identity of the electronic device, the first public key information includes a public key certificate of the public key of the electronic device, or the first public key information includes the public key of the electronic device; receiving the upgrade package from the server; and sending the upgrade package to the vehicle-mounted control device.

[0030] Based on the method provided in the second aspect above, the electronic device can send the first signature information and the first public key information to the server, so that the server can verify the legitimacy of the electronic device through the first public key information, such as whether the electronic device has the authority to download the upgrade package, etc., and verify whether the received information has been tampered with through the first signature information to ensure the security of the vehicle-mounted equipment upgrade.

[0031] In a possible implementation, the method further includes: receiving the public key certificate from the vehicle-mounted control device, where the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of the server.

[0032] Based on the above possible implementation manner, the electronic device can obtain the public key certificate so as to subsequently request an upgrade package of at least one in-vehicle device from the server through the public key certificate.

[0033] In a possible implementation, the method further includes: acquiring a public key of the electronic device and a private key of the electronic device; and sending the public key of the electronic device to the vehicle-mounted control device.

[0034] Based on the above possible implementation, after the electronic device obtains its own public key, it can send the public key to the vehicle control device so that the vehicle control device or the server generates a public key certificate for the public key.

[0035] In a possible implementation, the first upgrade request includes information about the at least one in-vehicle device to be upgraded.

[0036] Based on the above possible implementation, the server can verify the compatibility of the upgrade package with the at least one in-vehicle device based on the information to be upgraded. For example, if the version information of the latest released software stored on the server is the same as the version information in the information to be upgraded, the server determines that the at least one in-vehicle device does not need to be upgraded. If the version information of the latest released software stored on the server is higher than the version information in the information to be upgraded, the server determines that the at least one in-vehicle device needs to be upgraded.

[0037] In one possible implementation, the public key certificate includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

[0038] Based on the above possible implementation methods, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it means that the authorization period of the public key certificate is short-term or one-time authorization. Optionally, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it also means that the public key certificate is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the public key certificate includes the identification of the vehicle-mounted control device, it means that the public key certificate is generated or authorized by the vehicle-mounted control device. If the public key certificate includes the identification of the server, it means that the public key certificate is generated or authorized by the server. If the public key certificate includes the identification of the electronic device, it means that the public key certificate is authorized to the electronic device.

[0039] In a possible implementation, the method further includes: receiving information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

[0040] Based on the above possible implementation methods, the electronic device can obtain the upgrade information of at least one vehicle-mounted device from the vehicle-mounted control device, so that the electronic device sends the upgrade information to the server, so that the server can verify the compatibility of the upgrade package with at least one vehicle-mounted device based on the upgrade information.

[0041] A third aspect provides a method for upgrading an in-vehicle device. This method can be performed by an in-vehicle control device; alternatively, it can be performed by a module implemented in the in-vehicle control device, such as a chip, a chip system, or a circuit; alternatively, it can be performed by a logic module or software that implements all or part of the functions of the in-vehicle control device, without limitation. For ease of description, the following description uses the in-vehicle control device as an example.

[0042] The method includes: receiving the public key of the electronic device from the electronic device; sending the public key certificate of the public key of the electronic device to the electronic device, wherein the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of the server.

[0043] Based on the method provided in the third aspect above, the vehicle-mounted control device may send the public key certificate of the electronic device's public key to the electronic device, so that the electronic device may request an upgrade package from the server based on the public key certificate.

[0044] In a possible implementation, the public key certificate is generated based on a private key of a server, and the method further includes: sending the public key of the electronic device to the server; and receiving the public key certificate from the server.

[0045] Based on the above possible implementation manner, the vehicle-mounted control device may send the public key of the electronic device to the server so that the server generates a public key certificate for the public key.

[0046] In one possible implementation, the public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

[0047] Based on the above possible implementation methods, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it means that the authorization period of the public key certificate is short-term or one-time authorization. Optionally, if the public key certificate includes the information of at least one vehicle-mounted device to be upgraded, it also means that the public key certificate is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the public key certificate includes the identification of the vehicle-mounted control device, it means that the public key certificate is generated or authorized by the vehicle-mounted control device. If the public key certificate includes the identification of the server, it means that the public key certificate is generated or authorized by the server. If the public key certificate includes the identification of the electronic device, it means that the public key certificate is authorized to the electronic device.

[0048] In a possible implementation, the method further includes: sending information about the at least one vehicle-mounted device to be upgraded to the electronic device.

[0049] Based on the above possible implementation methods, the vehicle-mounted control device can send the upgrade information of at least one vehicle-mounted device to the electronic device, so that the electronic device sends the upgrade information to the server, so that the server can verify the compatibility of the upgrade package with at least one vehicle-mounted device based on the upgrade information.

[0050] A fourth aspect provides a method for upgrading an in-vehicle device. This method can be executed by an in-vehicle control device; alternatively, it can be executed by a module implemented in the in-vehicle control device, such as a chip, a chip system, or a circuit; alternatively, it can be implemented by a logic module or software that implements all or part of the functions of the in-vehicle control device, without limitation. For ease of description, the following description uses the in-vehicle control device as an example.

[0051] The method includes: receiving a public key of the electronic device from an electronic device; and sending first indication information and the public key of the electronic device to a server, where the first indication information is used to indicate authorization information for generating the public key of the electronic device.

[0052] Based on the method provided in the fourth aspect, the vehicle control device can instruct the server to generate authorization information for the public key of the electronic device. This allows the server to verify the legitimacy of the electronic device using the authorization information, rather than using a public key certificate. This eliminates the need for a certificate chain and improves verification efficiency.

[0053] In a possible implementation, the method further includes: sending information about at least one vehicle-mounted device to be upgraded to the electronic device.

[0054] Based on the above possible implementation methods, the vehicle-mounted control device can send the upgrade information of at least one vehicle-mounted device to the electronic device, so that the electronic device sends the upgrade information to the server, so that the server can verify the compatibility of the upgrade package with at least one vehicle-mounted device based on the upgrade information.

[0055] A fifth aspect provides a method for upgrading an in-vehicle device. This method can be executed by a server; alternatively, it can be executed by a module implemented in the server, such as a chip, chip system, or circuit; or alternatively, it can be implemented by a logic module or software that implements all or part of the server's functions, without limitation. For ease of description, the following description uses server execution as an example.

[0056] The method includes: receiving second signature information from an electronic device, the second signature information is used to verify the identity of the electronic device, the second signature information is obtained by signing a first upgrade request with a proxy signature key, the proxy signature key is obtained based on a private key of an on-board control device and authorization information of the proxy signature key, the first upgrade request is used to request an upgrade package for at least one on-board device; if the second signature information is successfully verified, the upgrade package is sent to the electronic device.

[0057] Based on the method provided in the fifth aspect above, the server can verify the legitimacy of the electronic device through the second signature information, such as whether the electronic device has the authority to download the upgrade package, etc., and verify whether the received information has been tampered with, so as to ensure the security of the vehicle-mounted equipment upgrade.

[0058] In a possible implementation, the method further includes: verifying the second signature information according to the public key of the vehicle-mounted control device.

[0059] Based on the above possible implementation manner, the server may verify the second signature information according to the public key of the vehicle-mounted control device to verify the legitimacy of the electronic device and whether the received information has been tampered with.

[0060] In a possible implementation, the method further includes: storing the authorization information in an authorization information cancellation list.

[0061] Based on the above possible implementation manner, the server may cancel the authorization of the electronic device by storing the authorization information in an authorization information cancellation list.

[0062] In a possible implementation, the first upgrade request includes information about the at least one in-vehicle device to be upgraded.

[0063] Based on the above possible implementation, the server can verify the compatibility of the upgrade package with the at least one in-vehicle device based on the information to be upgraded. For example, if the version information of the latest released software stored on the server is the same as the version information in the information to be upgraded, the server determines that the at least one in-vehicle device does not need to be upgraded. If the version information of the latest released software stored on the server is higher than the version information in the information to be upgraded, the server determines that the at least one in-vehicle device needs to be upgraded.

[0064] In one possible implementation, the authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, authorization period, or authorization purpose information.

[0065] Based on the above possible implementation methods, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it indicates that the authorization period of the proxy signature key is short-term or one-time authorization. Optionally, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it also indicates that the proxy signature key is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the authorization information includes the identification of the vehicle-mounted control device, it indicates that the proxy signature key is generated or authorized by the vehicle-mounted control device. If the authorization information includes the identification of the server and the identification of the electronic device, it indicates that the proxy signature key is used for verification between the server and the electronic device.

[0066] A sixth aspect provides a method for upgrading an in-vehicle device. The method can be performed by an electronic device; alternatively, the method can be performed by a module implemented in the electronic device, such as a chip, a chip system, or a circuit; alternatively, the method can be performed by a logic module or software capable of implementing all or part of the functions of the electronic device, without limitation. For ease of description, the following description uses the method performed by an electronic device as an example.

[0067] The method includes: sending second signature information to a server, the second signature information is used to verify the identity of the electronic device, the second signature information is obtained by signing a first upgrade request with a proxy signature key, the proxy signature key is obtained based on a private key of a vehicle-mounted control device and authorization information of the proxy signature key, the first upgrade request is used to request an upgrade package for at least one vehicle-mounted device; receiving the upgrade package from the server; and sending the upgrade package to the vehicle-mounted control device.

[0068] Based on the method provided in the sixth aspect above, the electronic device can send a second signature information to the server so that the server can verify the legitimacy of the electronic device through the second signature information, such as whether the electronic device has the authority to download the upgrade package, etc., and verify whether the received information has been tampered with, so as to ensure the security of the vehicle-mounted equipment upgrade.

[0069] In a possible implementation, the method further includes: receiving the proxy signature key from the vehicle-mounted control device.

[0070] Based on the above possible implementation manner, the electronic device can obtain the proxy signature key from the vehicle-mounted control device.

[0071] In a possible implementation, the first upgrade request includes information about the at least one in-vehicle device to be upgraded.

[0072] Based on the above possible implementation, the electronic device may transmit information about at least one in-vehicle device to be upgraded to a server, so that the server can verify the compatibility of the upgrade package with the at least one in-vehicle device based on the information. For example, if the version information of the latest released software stored on the server is the same as the version information in the information to be upgraded, the server determines that the at least one in-vehicle device does not need to be upgraded; if the version information of the latest released software stored on the server is higher than the version information in the information to be upgraded, the server determines that the at least one in-vehicle device needs to be upgraded.

[0073] In one possible implementation, the authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, authorization period, or authorization purpose information.

[0074] Based on the above possible implementation methods, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it indicates that the authorization period of the proxy signature key is short-term or one-time authorization. Optionally, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it also indicates that the proxy signature key is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the authorization information includes the identification of the vehicle-mounted control device, it indicates that the proxy signature key is generated or authorized by the vehicle-mounted control device. If the authorization information includes the identification of the server and the identification of the electronic device, it indicates that the proxy signature key is used for verification between the server and the electronic device.

[0075] In a possible implementation, the method further includes: receiving information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

[0076] Based on the above possible implementation methods, the electronic device can obtain the upgrade information of at least one vehicle-mounted device from the vehicle-mounted control device, so that the electronic device sends the upgrade information to the server, so that the server can verify the compatibility of the upgrade package with at least one vehicle-mounted device based on the upgrade information.

[0077] In a seventh aspect, a method for upgrading an in-vehicle device is provided. The method can be executed by an in-vehicle control device; alternatively, the method can be executed by a module implemented in the in-vehicle control device, such as a chip, a chip system, or a circuit; alternatively, the method can be implemented by a logic module or software that implements all or part of the functions of the in-vehicle control device, without limitation. For ease of description, the following description uses the in-vehicle control device as an example.

[0078] The method comprises: obtaining a proxy signature key, where the proxy signature key is obtained according to a private key of the vehicle-mounted control device and authorization information of the proxy signature key; and sending the proxy signature key to an electronic device.

[0079] Based on the method provided in the seventh aspect above, the vehicle-mounted control device can obtain the proxy signature key and send it to the electronic device so that the server can verify the legitimacy of the electronic device through the proxy signature key.

[0080] In one possible implementation, the authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

[0081] Based on the above possible implementation methods, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it indicates that the authorization period of the proxy signature key is short-term or one-time authorization. Optionally, if the authorization information includes information about at least one vehicle-mounted device to be upgraded, it also indicates that the proxy signature key is used for upgrading the vehicle-mounted device and cannot be used for other services except the vehicle-mounted device upgrade service. If the authorization information includes the identification of the vehicle-mounted control device, it indicates that the proxy signature key is generated or authorized by the vehicle-mounted control device. If the authorization information includes the identification of the server and the identification of the electronic device, it indicates that the proxy signature key is used for verification between the server and the electronic device.

[0082] In a possible implementation, the method further includes: sending information about the at least one vehicle-mounted device to be upgraded to the electronic device.

[0083] Based on the above possible implementation methods, the vehicle-mounted control device can send the upgrade information of at least one vehicle-mounted device to the electronic device, so that the electronic device sends the upgrade information to the server, so that the server can verify the compatibility of the upgrade package with at least one vehicle-mounted device based on the upgrade information.

[0084] In an eighth aspect, a communication device is provided for implementing the above method. The communication device may be the server in the first aspect, or an apparatus comprising the server, or a module in the server in the first aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can implement part or all of the server functions; or, the communication device may be the server in the fifth aspect, or an apparatus comprising the server, or a module in the server in the fifth aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can implement part or all of the server functions; or, the communication device may be the vehicle-mounted control device in the seventh aspect, or an apparatus comprising the vehicle-mounted control device, or a module in the vehicle-mounted control device in the seventh aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can implement part or all of the vehicle-mounted control device functions. The communication device includes modules, units, or means corresponding to the above method, which may be implemented by hardware, software, or by hardware executing the corresponding software implementation. The hardware or software includes one or more modules or units corresponding to the above functions.

[0085] In conjunction with the eighth aspect, in one possible implementation, the communication device may include a processing module and a transceiver module. The processing module may be used to implement the processing functions described in the first, fifth, and seventh aspects, and any possible implementations thereof. The processing module may be, for example, a processor. The transceiver module, also referred to as a transceiver unit, may be used to implement the sending and / or receiving functions described in the first, fifth, and seventh aspects, and any possible implementations thereof. The transceiver module may be composed of a transceiver circuit, a transceiver, a transceiver, or a communication interface.

[0086] In combination with the above-mentioned eighth aspect, in a possible implementation method, the transceiver module includes a sending module and a receiving module, which are respectively used to implement the sending and receiving functions in the above-mentioned first aspect, fifth aspect, seventh aspect and any possible implementation methods thereof.

[0087] In the ninth aspect, a communication device is provided for implementing the above method. The communication device may be the electronic device in the second aspect, or a device including the electronic device, or a module in the electronic device in the second aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can implement some or all of the functions of the electronic device. The communication device includes a module, unit, or means corresponding to the above method, which may be implemented by hardware, software, or by executing the corresponding software implementation by hardware. The hardware or software includes one or more modules or units corresponding to the above functions.

[0088] In conjunction with the ninth aspect, in one possible implementation, the communication device may include a transceiver module. The transceiver module, also referred to as a transceiver unit, is configured to implement the transmitting and / or receiving functions described in the second aspect and any possible implementation thereof. The transceiver module may include a transceiver circuit, a transceiver, a transceiver, or a communication interface.

[0089] In combination with the above-mentioned ninth aspect, in a possible implementation, the transceiver module includes a sending module and a receiving module, which are respectively used to implement the sending and receiving functions in the above-mentioned second aspect and any possible implementation thereof.

[0090] In conjunction with the ninth aspect, in one possible implementation, the communication device may further include a processing module. The processing module may be configured to implement the processing functions of the second aspect and any possible implementation thereof. The processing module may be, for example, a processor.

[0091] In a tenth aspect, a communication device is provided for implementing the above-mentioned method. The communication device may be the vehicle-mounted control device of the third aspect, or an apparatus including the vehicle-mounted control device, or a module in the vehicle-mounted control device of the third aspect, such as a chip, chip system, or circuit, or a logic module or software implementation that can implement some or all of the functions of the vehicle-mounted control device; or the communication device may be the vehicle-mounted control device of the fourth aspect, or an apparatus including the vehicle-mounted control device, or a module in the vehicle-mounted control device of the fourth aspect, such as a chip, chip system, or circuit, or a logic module or software implementation that can implement some or all of the functions of the vehicle-mounted control device; or the communication device may be the electronic device of the sixth aspect, or an apparatus including the electronic device, or a module in the electronic device of the sixth aspect, such as a chip, chip system, or circuit, or a logic module or software implementation that can implement some or all of the functions of the vehicle-mounted control device. The communication device includes modules, units, or means corresponding to implementing the above-mentioned method. The modules, units, or means may be implemented in hardware, software, or by hardware executing the corresponding software implementation. The hardware or software includes one or more modules or units corresponding to the above-mentioned functions.

[0092] In conjunction with the tenth aspect, in one possible implementation, the communication device may include a transceiver module. The transceiver module, which may also be referred to as a transceiver unit, is configured to implement the sending and / or receiving functions described in the third, fourth, and sixth aspects, and any possible implementations thereof. The transceiver module may include a transceiver circuit, a transceiver, a transceiver, or a communication interface.

[0093] In combination with the above-mentioned tenth aspect, in a possible implementation method, the transceiver module includes a sending module and a receiving module, which are respectively used to implement the sending and receiving functions in the above-mentioned third aspect, fourth aspect, sixth aspect and any possible implementation methods thereof.

[0094] In the eleventh aspect, a communication device is provided, comprising: a processor; the processor is configured to couple with a memory, and after reading an instruction in the memory, execute the method described in any one of the above aspects according to the instruction. The communication device may be the server described in the first aspect, or an apparatus comprising the server, or a module in the server described in the first aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the server functions; or the communication device may be the electronic device described in the second aspect, or an apparatus comprising the electronic device, or a module in the electronic device described in the second aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the electronic device functions; or the communication device may be the vehicle-mounted control device described in the third aspect, or an apparatus comprising the vehicle-mounted control device, or a module in the vehicle-mounted control device described in the third aspect, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the vehicle-mounted control device functions; or the communication device may be the vehicle-mounted control device described in the fourth aspect, or an apparatus comprising the vehicle-mounted control device, or a vehicle-mounted control device described in the fourth aspect. A module in an on-board control device, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the on-board control device; or, the communication device can be the server in the fifth aspect above, or an apparatus including the above-mentioned server, or a module in the server in the fifth aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the server; or, the communication device can be the electronic device in the sixth aspect above, or an apparatus including the above-mentioned electronic device, or a module in the electronic device in the sixth aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the electronic device; or, the communication device can be the on-board control device in the seventh aspect above, or an apparatus including the above-mentioned on-board control device, or a module in the on-board control device in the seventh aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the on-board control device.

[0095] In combination with the above eleventh aspect, in a possible implementation, the communication device further includes a memory, which is used to store necessary program instructions and data.

[0096] In conjunction with the eleventh aspect above, in one possible implementation, the communication device is a chip or a chip system. Optionally, when the communication device is a chip system, it can be composed of a chip or include a chip and other discrete devices.

[0097] In the twelfth aspect, a communication device is provided, comprising: a processor and an interface circuit; the interface circuit is used to receive a computer program or instruction and transmit it to the processor; the processor is used to execute the computer program or instruction so that the communication device executes the method as described in any of the above aspects. The communication device can be the server in the above-mentioned first aspect, or an apparatus containing the above-mentioned server, or a module in the server in the above-mentioned first aspect, such as a chip, a chip system or a circuit, or a logical module or software implementation that can realize part or all of the server functions; or the communication device can be the electronic device in the above-mentioned second aspect, or an apparatus containing the above-mentioned electronic device, or a module in the electronic device in the above-mentioned second aspect, such as a chip, a chip system or a circuit, or a logical module or software implementation that can realize part or all of the electronic device functions; or the communication device can be the vehicle-mounted control device in the above-mentioned third aspect, or an apparatus containing the above-mentioned vehicle-mounted control device, or a module in the vehicle-mounted control device in the above-mentioned third aspect, such as a chip, a chip system or a circuit, or a logical module or software implementation that can realize part or all of the vehicle-mounted control device functions; or the communication device can be the vehicle-mounted control device in the above-mentioned fourth aspect, or an apparatus containing the above-mentioned vehicle-mounted control device, or a vehicle-mounted control device in the above-mentioned fourth aspect. A module in an on-board control device, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the on-board control device; or, the communication device can be the server in the fifth aspect above, or an apparatus including the above-mentioned server, or a module in the server in the fifth aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the server; or, the communication device can be the electronic device in the sixth aspect above, or an apparatus including the above-mentioned electronic device, or a module in the electronic device in the sixth aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the electronic device; or, the communication device can be the on-board control device in the seventh aspect above, or an apparatus including the above-mentioned on-board control device, or a module in the on-board control device in the seventh aspect above, such as a chip, a chip system or a circuit, or a logic module or software implementation that can realize part or all of the functions of the on-board control device.

[0098] In conjunction with the twelfth aspect above, in one possible implementation, the communication device is a chip or a chip system. Optionally, when the communication device is a chip system, it can be composed of a chip or include a chip and other discrete devices.

[0099] In a thirteenth aspect, a computer-readable storage medium is provided, wherein instructions are stored in the computer-readable storage medium. When the computer-readable storage medium is run on a computer, the computer can execute the method described in any one of the above aspects.

[0100] In a fourteenth aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the method described in any one of the above aspects.

[0101] In the fifteenth aspect, a vehicle is provided, which includes an on-board control device for executing the method described in the third aspect, or an on-board control device for executing the method described in the fourth aspect, or an on-board control device for executing the method described in the seventh aspect.

[0102] In the sixteenth aspect, an upgrade system is provided, which includes a server for executing the method described in the first aspect, an electronic device for executing the method described in the second aspect, and a vehicle-mounted control device for executing the method described in the third aspect.

[0103] In the seventeenth aspect, an upgrade system is provided, which includes a server for executing the method described in the first aspect, an electronic device for executing the method described in the second aspect, and a vehicle-mounted control device for executing the method described in the fourth aspect.

[0104] In the eighteenth aspect, an upgrade system is provided, which includes a server for executing the method described in the fifth aspect, an electronic device for executing the method described in the sixth aspect, and a vehicle-mounted control device for executing the method described in the seventh aspect.

[0105] Among them, the technical effects brought about by any possible implementation method in the eighth to eighteenth aspects can be referred to the technical effects brought about by any aspect in the first to second aspects or different possible implementation methods in any aspect, and will not be repeated here.

[0106] It is understandable that, provided that the solutions are not contradictory, the solutions in each aspect can be combined. BRIEF DESCRIPTION OF THE DRAWINGS

[0107] FIG1A is a schematic diagram of an upgrade system architecture provided in an embodiment of the present application;

[0108] FIG1B is a schematic diagram of a network architecture provided in an embodiment of the present application;

[0109] FIG2 is a schematic diagram of the hardware structure of a communication device provided in an embodiment of the present application;

[0110] FIG3 is a flowchart of a method for upgrading an in-vehicle device according to an embodiment of the present application;

[0111] FIG4 is a second flow chart of the method for upgrading the vehicle-mounted device provided in an embodiment of the present application;

[0112] FIG5 is a third flow chart of the method for upgrading the vehicle-mounted device provided in an embodiment of the present application;

[0113] FIG6 is a fourth flow chart of a method for upgrading an in-vehicle device according to an embodiment of the present application;

[0114] FIG7 is a fifth flow chart of a method for upgrading an in-vehicle device according to an embodiment of the present application;

[0115] FIG8 is a first structural diagram of a communication device provided in an embodiment of the present application;

[0116] FIG9 is a second structural diagram of a communication device provided in an embodiment of the present application;

[0117] FIG10 is a third structural diagram of the communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0118] The implementation of the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0119] The method provided in the embodiment of the present application can be used for various upgrade systems. The following describes the method provided in the embodiment of the present application using the upgrade system 10 shown in Figure 1A as an example. Figure 1A is only a schematic diagram and does not constitute a limitation on the applicable scenarios of the technical solution provided in this application.

[0120] FIG1A is a schematic diagram of the architecture of an upgrade system 10 provided in an embodiment of the present application. In FIG1A , the upgrade system 10 may include a server 101, an electronic device 102 communicably connected to the server 101, and an in-vehicle control device 103 communicably connected to both the server 101 and the electronic device 102.

[0121] Among them, the server 101 and the electronic device 102 can be communicatively connected via a cellular network or a Wi-Fi system. The server 101 and the vehicle-mounted control device 103 can be communicatively connected via a cellular network or a Wi-Fi system. The electronic device 102 and the vehicle-mounted control device 103 can be communicatively connected via a cellular network, a Wi-Fi system, near field communication (NFC), Bluetooth or a data cable. In the embodiment of the present application, the cellular network may include any one or more networks related to the 3rd Generation Partnership Project (3GPP), such as a 4th generation (4G) network, a 5th generation (5G) or a future evolved network.

[0122] The server in the embodiment of the present application, such as server 101, is a device with communication capabilities and computing capabilities. For example, the server is a computer, a computing device, or a cloud server.

[0123] The electronic device in the embodiment of the present application, such as the electronic device 102, is a device with communication capabilities and computing capabilities. For example, the electronic device is a terminal, a charging pile, or a universal serial bus (USB) card, etc. Among them, the terminal can also be referred to as a terminal device, and the terminal device can be a user equipment (UE). Among them, the UE includes a handheld device, a wearable device, or a computing device with wireless communication capabilities. Exemplarily, the UE can be a mobile phone, a tablet computer, or a computer with wireless transceiver capabilities. The terminal device can also be a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, or a wireless terminal in industrial control, etc.

[0124] The vehicle-mounted control device in the embodiments of the present application, such as the vehicle-mounted control device 103, is any in-vehicle device with communication and computing capabilities. For example, the vehicle-mounted control device is an OTA controller (OTA Manager), a telematics box (T-Box), a gateway, a multiple domain controller (MDC), a vehicle control unit (VCU), or an electronic control unit (ECU).

[0125] In Figure 1A, the server 101 and the vehicle-mounted control device 103 are mutually trusted devices, and the vehicle-mounted control device 103 and the electronic device 102 are mutually trusted devices. In other words, the server 101 and the vehicle-mounted control device 103 have established a trust relationship, and the vehicle-mounted control device 103 and the electronic device 102 have established a trust relationship. In this way, the electronic device 102 can request an upgrade package for at least one vehicle-mounted device from the server 101 through the identity authentication credential provided by the vehicle-mounted control device 103 to the electronic device 102 (such as the first public key information or proxy signature key mentioned below). After verifying that the identity authentication credential is legitimate, the server 101 sends the upgrade package to the electronic device 102, so that the electronic device 102 can send the upgrade package to the vehicle-mounted control device 103 at an appropriate time, and ensure the security of the vehicle-mounted device upgrade.

[0126] Optionally, the electronic device 102 may also assist in storing software information or firmware information of the in-vehicle device, such as at least one of the current version information of the software / firmware, the size of the software / firmware, or the developer information of the software / firmware.

[0127] Optionally, the electronic device 102 may also switch the security mechanism between the server 101 and the vehicle-mounted control device 103. For example, the server 101 may send information encrypted using a first algorithm to the electronic device 101. After receiving the information, the electronic device 102 decrypts the information to obtain the first information, and then sends information encrypted using a second algorithm to the vehicle-mounted control device 103. It is understood that after receiving the information encrypted using the first algorithm, the electronic device 102 may also detect the information through a security module within the electronic device 102 (e.g., installed security software) to enhance communication security.

[0128] Optionally, the electronic device 102 may also adopt a secret sharing method to jointly keep the vehicle's communication key with the vehicle-mounted control device 103 to improve vehicle communication security.

[0129] The upgrade system 10 shown in FIG1A is provided for illustrative purposes only and is not intended to limit the technical solutions of this application. Those skilled in the art will appreciate that, in a specific implementation, the upgrade system 10 may also include other devices, and the number of servers, vehicle-mounted control devices, or electronic devices may be determined based on specific needs and is not limited.

[0130] In one possible implementation, the upgrade system 10 shown in FIG. 1A may be applied to the network architecture shown in FIG. 1B .

[0131] Figure 1B shows a network architecture provided by an embodiment of the present application. In Figure 1B , the network architecture includes a server, an electronic device communicatively connected to the server, and a vehicle communicatively connected to the server and the electronic device. The vehicle includes a T-BOX, an onboard control device communicatively connected to the T-BOX, and a device to be upgraded communicatively connected to the onboard control device.

[0132] It can be understood that the server 101 in Figure 1A corresponds to a server in Figure 1B, the electronic device 102 in Figure 1A corresponds to an electronic device in Figure 1B, and the vehicle-mounted control device 103 in Figure 1A corresponds to a vehicle-mounted control device in Figure 1B.

[0133] In Figure 1B, the electronic device can be used to request an upgrade package for at least one device to be upgraded from the server, and send the requested upgrade package to the vehicle-mounted control device. The server is used to receive information from the electronic device requesting an upgrade package for at least one device to be upgraded, and verify the identity of the electronic device. If the identity of the electronic device is legal, the requested upgrade package is sent to the electronic device. The vehicle-mounted control device is used to receive an upgrade package for at least one device to be upgraded from the electronic device, and send the upgrade package to the corresponding device to be upgraded. The T-Box is used to forward information received from an external device to an internal device, and forward information from an internal device to an external device. For example, the T-Box forwards information between the server and the vehicle-mounted control device. It should be understood that the server and the vehicle-mounted control device can also communicate directly instead of through the T-Box, without limitation.

[0134] In FIG. 1B , the device to be upgraded may be any vehicle-mounted device waiting to be upgraded, for example, any device with a human machine interface (HMI), a battery management system (BMS), or an ECU.

[0135] In Figure 1B, the onboard control device is independently deployed in the vehicle. However, in specific applications, the onboard control device may not be independently deployed in the vehicle, but may serve as a functional module of one or more onboard devices. In other words, the functions of the onboard control device can be deployed on any one or more devices in the vehicle. For example, the functions of the onboard control device can be deployed on a T-BOX, a gateway, or a device to be upgraded, without limitation.

[0136] In the embodiments of the present application, "multiple" can be understood as two or more, which is uniformly explained here and will not be repeated later.

[0137] It is understood that the network architecture shown in FIG1B is for illustrative purposes only and is not intended to limit the technical solutions of this application. Those skilled in the art will appreciate that, in a specific implementation, the network architecture may also include other devices, and the number of servers, vehicle-mounted control devices, electronic devices, devices to be upgraded, or vehicles may be determined based on specific needs without limitation.

[0138] Optionally, each device in Figure 1A or Figure 1B of the embodiment of the present application (such as a server, an electronic device or a vehicle-mounted control device, etc.) can also be referred to as a communication device, which can be a general device or a dedicated device. The embodiment of the present application does not make specific limitations on this.

[0139] Optionally, the relevant functions of each device (such as a server, electronic device, or vehicle-mounted control device) in Figure 1A or Figure 1B of the embodiment of the present application can be implemented by a single device, or can be implemented by multiple devices together, or can be implemented by one or more functional modules within a single device, and the embodiment of the present application does not specifically limit this. It is understood that the above functions can be components in a hardware device, or software functions running on dedicated hardware, or a combination of hardware and software, or virtualized functions instantiated on a platform (for example, a cloud platform).

[0140] In a specific implementation, each device (e.g., a server, electronic device, or vehicle-mounted control device) in FIG. 1A or FIG. 1B of the embodiment of the present application may adopt the composition structure shown in FIG. 2 or include the components shown in FIG. 2 is a schematic diagram of the hardware structure of a communication device applicable to the embodiment of the present application. The communication device 20 includes at least one processor 201 and at least one communication interface 204 for implementing the method provided in the embodiment of the present application. The communication device 20 may also include a communication line 202 and a memory 203.

[0141] The processor 201 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0142] The communication link 202 may include a path for transmitting information between the above components, such as a bus.

[0143] Communication interface 204 is used to communicate with other devices or communication networks. Communication interface 204 can be any transceiver-like device, such as an Ethernet interface, a radio access network (RAN) interface, a wireless local area network (WLAN) interface, a transceiver, a pin, a bus, or a transceiver circuit.

[0144] The memory 203 can be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to this. The memory can be independent and coupled to the processor 201 via the communication line 202. The memory 203 can also be integrated with the processor 201. The memory provided in the embodiment of the present application can generally be non-volatile.

[0145] Among them, the memory 203 is used to store computer-executable instructions involved in executing the solutions provided in the embodiments of the present application, and is controlled by the processor 201. The processor 201 is used to execute the computer-executable instructions stored in the memory 203, thereby implementing the methods provided in the embodiments of the present application. Alternatively, optionally, in the embodiments of the present application, the processor 201 may also perform processing-related functions in the methods provided in the following embodiments of the present application, and the communication interface 204 is responsible for communicating with other devices or communication networks, which is not specifically limited in the embodiments of the present application.

[0146] Optionally, the computer-executable instructions in the embodiments of the present application may also be referred to as application code, which is not specifically limited in the embodiments of the present application.

[0147] The coupling in the embodiments of the present application is an indirect coupling or communication connection between devices, units or modules, which can be electrical, mechanical or other forms, and is used for information exchange between devices, units or modules.

[0148] As an embodiment, the processor 201 may include one or more CPUs, such as CPU0 and CPU1 in FIG. 2 .

[0149] As an embodiment, the communication device 20 may include multiple processors, such as processor 201 and processor 207 in FIG2 . Each of these processors may be a single-core (single-CPU) processor or a multi-core (multi-CPU) processor. The processor herein may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0150] As an embodiment, the communication device 20 may further include an output device 205 and / or an input device 206. The output device 205 is coupled to the processor 201 and can display information in a variety of ways. For example, the output device 205 can be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. The input device 206 is coupled to the processor 201 and can receive user input in a variety of ways. For example, the input device 206 can be a mouse, a keyboard, a touch screen device, or a sensor device.

[0151] It is understandable that the composition structure shown in Figure 2 does not constitute a limitation on the communication device. In addition to the components shown in Figure 2, the communication device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0152] The method provided in the embodiment of the present application will be described below with reference to Figures 3 to 7. Each device in the following embodiment may include the components shown in Figure 2, which will not be described in detail.

[0153] It can be understood that the method shown in Figures 3 to 7 uses a server, an electronic device, and an on-board control device as examples of the execution subjects of the interaction diagram to illustrate the method, but the present application does not limit the execution subjects of the interaction diagram. For example, the server in the method shown in Figures 3 to 7 can also be a chip, a chip system, or a processor that supports the server to implement the method, or a logic module or software that can implement all or part of the server functions; the electronic device in the method shown in Figures 3 to 7 can also be a chip, a chip system, or a processor that supports the electronic device to implement the method, or a logic module or software that can implement all or part of the electronic device functions; the on-board control device in the method shown in Figures 3 to 7 can also be a chip, a chip system, or a processor that supports the on-board control device to implement the method, or a logic module or software that can implement all or part of the on-board control device functions.

[0154] It can be understood that the message names between the devices or the names of the parameters in the messages in the following embodiments of the present application are only examples, and other names may be used in specific implementations. The embodiments of the present application do not specifically limit this.

[0155] It can be understood that in the embodiments of the present application, " / " can indicate that the objects associated with each other are in an "or" relationship, for example, A / B can indicate A or B; "and / or" can be used to describe that there are three relationships between the associated objects, for example, A and / or B can indicate: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, expressions similar to "at least one of A, B and C" or "at least one of A, B or C" are usually used to indicate any of the following: A exists alone; B exists alone; C exists alone; A and B exist at the same time; A and C exist at the same time; B and C exist at the same time; A, B and C exist at the same time. The above uses A, B and C as an example to illustrate the optional items of the item. When there are more elements in the expression, the meaning of the expression can be obtained according to the above rules.

[0156] In order to facilitate the description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" can be used to distinguish technical features with the same or similar functions. The words such as "first" and "second" do not limit the quantity and execution order, and the words such as "first" and "second" do not necessarily limit them to be different. In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" should not be interpreted as being more preferred or more advantageous than other embodiments or design. The use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0157] It will be understood that the “embodiment” mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, the various embodiments in the entire specification do not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It will be understood that in the various embodiments of the present application, the size of the sequence number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0158] It can be understood that in this application, "when", "if" and "if" all mean that corresponding processing will be taken under certain objective circumstances, and do not limit the time, nor do they require judgment actions when implementing them, nor do they mean that there are other limitations.

[0159] It is understood that some optional features in the embodiments of the present application may, in certain scenarios, be implemented independently of other features, such as the solution on which they are currently based, to solve corresponding technical problems and achieve corresponding effects. They may also be combined with other features in certain scenarios as needed. Accordingly, the devices provided in the embodiments of the present application may also implement these features or functions accordingly, which will not be described in detail here.

[0160] It can be understood that the same step or steps or technical features with the same functions in the embodiments of the present application can be referenced and borrowed from each other in different embodiments.

[0161] It is understood that in the embodiments of the present application, the server and / or the electronic device and / or the vehicle-mounted control device may perform some or all of the steps in the embodiments of the present application. These steps are merely examples, and the embodiments of the present application may also perform other steps or variations of various steps. In addition, the various steps may be performed in a different order than those presented in the embodiments of the present application, and it is possible that not all of the steps in the embodiments of the present application need to be performed.

[0162] As shown in FIG3 , an embodiment of the present application provides a method for upgrading an in-vehicle device. The method may include the following steps:

[0163] S301: The electronic device sends first signature information and first public key information to the server. Correspondingly, the server receives the first signature information and first public key information from the electronic device.

[0164] In an embodiment of the present application, the electronic device may be the electronic device 102 in FIG. 1A , and the server may be the server 101 in FIG. 1A ; or the electronic device may be the electronic device in FIG. 1B , and the server may be the server in FIG. 1B .

[0165] The first signature information and the first public key information are introduced below respectively.

[0166] In this embodiment of the present application, the first signature information is obtained by signing the first upgrade request using the private key of the electronic device. The first upgrade request is used to request an upgrade package for at least one vehicle-mounted device. The at least one vehicle-mounted device may be the device to be upgraded in Figure 1B.

[0167] As an example, the first upgrade request includes at least one flag bit, which corresponds one-to-one to at least one vehicle-mounted device. Any one of the at least one flag bit is used to request an upgrade package for the vehicle-mounted device corresponding to the flag bit.

[0168] As another example, the first upgrade request includes identification information of each of the at least one in-vehicle device.

[0169] Optionally, the first upgrade request also includes information about at least one in-vehicle device to be upgraded. Exemplarily, the information about at least one in-vehicle device to be upgraded includes at least one of the following: the name of software currently installed on the at least one in-vehicle device, version information of the software, the name of the at least one in-vehicle device, information about the developer of the software, or an identifier of the vehicle in which the at least one in-vehicle device is installed.

[0170] Optionally, the information to be upgraded can be obtained by the electronic device from the vehicle-mounted control device. For example, before S301, the vehicle-mounted control device sends the information to be upgraded to the electronic device. Correspondingly, the electronic device receives the information to be upgraded.

[0171] It will be appreciated that the information about the at least one in-vehicle device to be upgraded can enable the server to determine whether the at least one in-vehicle device requires an upgrade, or to verify the compatibility of the upgrade package with the at least one in-vehicle device. For example, if the version information of the latest released software stored on the server is the same as the version information in the information to be upgraded, the server determines that the at least one in-vehicle device does not require an upgrade; if the version information of the latest released software stored on the server is higher than the version information in the information to be upgraded, the server determines that the at least one in-vehicle device requires an upgrade.

[0172] Optionally, the server stores the information to be upgraded. In this case, the first upgrade request may not include the information to be upgraded. After receiving the first signature information, the server may search for the information to be upgraded locally to determine whether at least one vehicle-mounted device needs to be upgraded.

[0173] In an embodiment of the present application, the first public key information is used to verify the identity of the electronic device, or in other words, the first public key information is used to verify whether the electronic device is legitimate. Exemplarily, the first public key information includes a public key certificate for the electronic device's public key, or the first public key information includes the electronic device's public key. In this way, the server can verify the identity of the electronic device, or verify whether the electronic device is legitimate, based on the public key certificate or the electronic device's public key.

[0174] Among them, the public key certificate may include at least one of the following: information on at least one vehicle-mounted device to be upgraded, identification of the vehicle-mounted control device, identification of the server, identification of the electronic device, authorization period or authorization purpose information. Among them, the authorization period may include long-term, short-term or one-time authorization. One-time authorization means that the public key certificate can be verified once. Alternatively, the authorization period includes 1 month, two months, half a year or one year. It can be understood that long-term authorization can enable the public key certificate to be used for a longer period of time without the need to frequently generate public key certificates. Although short-term authorization or one-time authorization requires frequent generation of public key certificates, it has higher security. In addition, one-time authorization does not require cancellation of authorization.

[0175] Optionally, the public key certificate also includes a label that protects the integrity and source authenticity of all or part of the above information, such as a digital signature.

[0176] It is understood that if the public key certificate does not include an authorization period, the public key certificate may implicitly indicate the authorization period. For example, if the public key certificate includes information about at least one vehicle device to be upgraded, this indicates that the authorization period of the public key certificate is short-term or a one-time authorization. Alternatively, if the public key certificate includes information about at least one vehicle device to be upgraded, this indicates that the public key certificate is for vehicle device upgrades and cannot be used for services other than vehicle device upgrades.

[0177] In one possible design, the public key certificate includes at least one field, and the above information may be included in the corresponding field. For example, the public key certificate includes at least one of an Issuer field, a Validity field, or an Extended key usage field. The Issuer field may include information related to the authorizer, such as the identifier of the vehicle-mounted control device or the identifier of the server. The Validity field may include the authorization period, etc. The Extended key usage field may include information other than the authorizer information and the authorization period, such as the identifier of the electronic device, information on at least one vehicle-mounted device to be upgraded, and authorization purpose information.

[0178] It is understandable that, within the authorization period, if the server wants to cancel the authorization of the electronic device, it can use a conventional public key certificate revocation mechanism to cancel the authorization, such as putting the public key certificate into the certificate revocation list.

[0179] It can be understood that the above domains are merely examples of domains included in a public key certificate. In specific applications, a public key certificate may include more or fewer domains than the above examples, without limitation.

[0180] In one possible implementation, the public key certificate is generated based on the server's private key; or, the public key certificate is generated based on the private key of the vehicle-mounted control device, where the vehicle-mounted control device is the vehicle-mounted control device 103 in FIG1A or the vehicle-mounted control device in FIG1B .

[0181] S302: When the first signature information and the first public key information are successfully verified, the server sends an upgrade package of at least one vehicle-mounted device to the electronic device. Correspondingly, the electronic device receives the upgrade package of at least one vehicle-mounted device from the server.

[0182] It can be understood that after receiving the first signature information and the first public key information, the server can verify the first signature information and the first public key information, and if the first signature information and the first public key information are successfully verified, send an upgrade package for at least one vehicle-mounted device to the electronic device.

[0183] As an example, the server verifies the first signature information based on the public key of the electronic device. If the first signature information verification succeeds, it indicates that the first signature information has not been tampered with; or if the first signature information verification fails, it indicates that the first signature information has been tampered with.

[0184] As another example, if the first public key information includes a public key certificate of the public key of the electronic device, and the public key certificate is generated based on the private key of the server, the server verifies the public key certificate based on the public key of the server. Alternatively, if the first public key information includes a public key certificate of the public key of the electronic device, and the public key certificate is generated based on the private key of the vehicle-mounted control device, the server verifies the public key certificate based on the public key of the vehicle-mounted control device (before S302, the server can obtain the public key of the vehicle-mounted control device from the vehicle-mounted control device). It is understandable that the public key of the server or the public key of the vehicle-mounted control device can have its own public key certificate, which can be verified by the public key of other devices, and the public key of other devices can also have its own public key certificate, and so on, a certificate chain can be formed, and the legitimacy of other certificates in the certificate chain can be finally verified by the root certificate in the certificate chain. It should be understood that if the public key certificate verification is successful, it means that the electronic device is legal, or the electronic device is authorized to download the upgrade package. If the public key certificate verification fails, it means that the electronic device is illegal, or the electronic device is not authorized to download the upgrade package.

[0185] As another example, if the first public key information includes the public key of the electronic device, the server verifies the public key of the electronic device based on the authorization information of the public key of the electronic device. The authorization information of the public key of the electronic device is used to indicate whether the public key of the electronic device is authorized, or whether the electronic device is legal. For example, if the authorization information includes the public key of the electronic device, the authorization information indicates that the public key of the electronic device is authorized or the electronic device is legal; if the authorization information does not include the public key of the electronic device, the authorization information indicates that the public key of the electronic device is not authorized or the electronic device is illegal. For another example, the authorization information includes a flag bit, which indicates whether the public key of the electronic device is authorized, or whether the electronic device is legal. For another example, the authorization information includes the public key of the electronic device and a flag bit corresponding to the public key, and the flag bit is used to indicate whether the public key of the electronic device is authorized, or whether the electronic device is legal.

[0186] It can be understood that the server verifies the legitimacy of the electronic device through the authorization information, which can avoid using the certificate chain to verify the electronic device and improve the verification efficiency.

[0187] It is understandable that if the server wants to cancel the authorization of the electronic device within the authorization period, it can delete the authorization information.

[0188] S303: The electronic device sends an upgrade package of at least one vehicle-mounted device to the vehicle-mounted control device. Correspondingly, the vehicle-mounted control device receives the upgrade package of at least one vehicle-mounted device from the electronic device.

[0189] It is understandable that the electronic device may send an upgrade package of at least one vehicle-mounted device to the vehicle-mounted control device at a suitable time (such as when the network of the vehicle-mounted control device is idle or the vehicle-mounted control device is connected to the network).

[0190] It is understandable that the in-vehicle control device requests the upgrade package from the server through the electronic device has the following advantages: (1) it can save the cost of the in-vehicle network; (2) when the in-vehicle control device cannot communicate, the electronic device can obtain the upgrade package in time; (3) when the user (such as the owner of the car or the owner of the electronic device) is not in the car and cannot operate the in-vehicle control device, the electronic device can obtain the upgrade package in time.

[0191] S304: The vehicle control device sends the upgrade package of each vehicle device to at least one vehicle device respectively. Correspondingly, each vehicle device receives the upgrade package.

[0192] It is understandable that after the vehicle-mounted device receives its own upgrade package, it can be upgraded.

[0193] Among them, the actions of the electronic device or server or vehicle-mounted control device in the above S301-S304 can be executed by the processor 201 in the communication device 20 shown in Figure 2 calling the application code stored in the memory 203, and the embodiment of the present application does not impose any restrictions on this.

[0194] Based on the method shown in Figure 3, the server can verify the legitimacy of the electronic device through the first public key information, such as whether the electronic device has the authority to download the upgrade package, etc., and verify whether the received information has been tampered with through the first signature information to ensure the security of the vehicle-mounted equipment upgrade.

[0195] Optionally, in one possible scenario of the method shown in FIG3 , the public key certificate is generated by the vehicle-mounted control device or server for the electronic device. Specifically, as shown in FIG4 , if the first public key information includes a public key certificate for the public key of the electronic device, the method shown in FIG3 further includes S300a to S300c or S300A to S300E.

[0196] S300a: The electronic device obtains the public key and the private key of the electronic device.

[0197] In one possible implementation, the electronic device generates a public key and a private key of the electronic device; or, the key generation device generates a public key and a private key of the electronic device for the electronic device and sends them to the electronic device, and accordingly, the electronic device receives the public key and the private key.

[0198] S300b: The electronic device sends the public key of the electronic device to the vehicle-mounted control device. Correspondingly, the vehicle-mounted control device receives the public key of the electronic device from the electronic device.

[0199] S300c: The vehicle-mounted control device sends a public key certificate of the electronic device's public key to the electronic device, and the electronic device receives the public key certificate accordingly.

[0200] In one possible implementation, the vehicle-mounted control device, acting as the authorizer, uses its own private key to generate a public key certificate for the electronic device's public key (authorized party). Alternatively, the vehicle-mounted control device, through a certificate issuing authority, uses the vehicle-mounted control device's private key to generate a public key certificate for the electronic device's public key. This public key certificate can, understandably, serve as a letter of authorization.

[0201] As can be understood, through S300a-S300c, the vehicle-mounted control device can generate an authorization certificate (e.g., a public key certificate for the electronic device's public key) for the electronic device. The electronic device can then request an upgrade package from the server based on this authorization certificate. Because authorization certificates are unmodifiable and unforgeable, using them as proof of the electronic device's legitimacy to the server ensures secure upgrades for the vehicle-mounted device.

[0202] S300A: The electronic device obtains the public key and the private key of the electronic device.

[0203] S300B: The electronic device sends the public key of the electronic device to the vehicle-mounted control device. Correspondingly, the vehicle-mounted control device receives the public key of the electronic device from the electronic device.

[0204] The processes of S300A to S300B are similar to those of S300a to S300b , so reference may be made to the corresponding descriptions of S300a to S300b , which will not be repeated here.

[0205] S300C: The vehicle-mounted control device sends the public key of the electronic device to the server. Correspondingly, the server receives the public key of the electronic device from the vehicle-mounted control device.

[0206] S300D: The server sends the public key certificate of the electronic device to the vehicle-mounted control device, and the vehicle-mounted control device receives the public key certificate accordingly.

[0207] In one possible implementation, the server, as the authorizer, uses its own private key to generate a public key certificate for the electronic device's public key (authorized party). Alternatively, the server, through a certificate issuing authority, uses the server's private key to generate a public key certificate for the electronic device's public key. This public key certificate can, as you understand it, serve as a letter of authorization.

[0208] As an example, a vehicle-mounted control device can use its own private key as an identity authentication to log in to a server and apply for a public key certificate for the electronic device's public key. The server can then use its own private key to generate a public key certificate for the electronic device's public key, or call a third-party certificate issuing authority to use the server's private key to generate a public key certificate for the electronic device's public key.

[0209] S300E: The vehicle-mounted control device sends a public key certificate of the electronic device's public key to the electronic device, and the electronic device receives the public key certificate accordingly.

[0210] As can be understood, through S300A-S300E, the server can generate an authorization certificate (e.g., a public key certificate for the electronic device's public key) for the electronic device. The electronic device can then request an upgrade package from the server based on this authorization certificate. Because authorization certificates are immutable and unforgeable, they serve as proof of the electronic device's legitimacy to the server, ensuring secure upgrades for the in-vehicle device.

[0211] Among them, the actions of the electronic device or vehicle control device or server in the above S300a-S300E can be executed by the processor 201 in the communication device 20 shown in Figure 2 calling the application code stored in the memory 203, and the embodiment of the present application does not impose any restrictions on this.

[0212] Optionally, in a possible scenario of the method shown in Figure 3, the server may generate authorization information for the public key of the electronic device. Specifically, as shown in Figure 5, if the first public key information includes the public key of the electronic device, the method shown in Figure 3 further includes S3001 to S3004.

[0213] S3001: The electronic device obtains the public key and the private key of the electronic device.

[0214] S3002: The electronic device sends the public key of the electronic device to the vehicle-mounted control device. Correspondingly, the vehicle-mounted control device receives the public key of the electronic device from the electronic device.

[0215] The above processes of S3001 to S3002 are similar to the processes of S300a to S300b, so reference may be made to the corresponding descriptions of S300a to S300b, which will not be repeated here.

[0216] S3003: The vehicle-mounted control device sends the public key of the electronic device to the server. Correspondingly, the server receives the public key of the electronic device from the vehicle-mounted control device.

[0217] Optionally, the vehicle-mounted control device further sends first indication information to the server. Correspondingly, the server receives the first indication information. The first indication information is used to indicate authorization information for generating a public key of the electronic device.

[0218] For example, the first indication information includes 1 bit, and when the value of the 1 bit is "0" or "1", it indicates the authorization information for generating the public key of the electronic device.

[0219] S3004: The server generates authorization information of the public key of the electronic device.

[0220] For example, the vehicle control device uses its private key as an authentication method to log in to the server and request authorization for the public key of the electronic device. The server can generate and store this authorization information. Upon receiving the upgrade request from the electronic device, the server can query the authorization information to verify the legitimacy of the electronic device.

[0221] As can be understood, through the above steps S3001 to S3004, the server can generate authorization information for the public key of the electronic device. In this way, when the electronic device requests an upgrade package from the server, the server does not need to verify the legitimacy of the electronic device through the public key certificate. Instead, it verifies the legitimacy of the electronic device through the authorization information. The entire verification process does not require the use of a certificate chain, and the verification efficiency is high.

[0222] Among them, the actions of the electronic device or vehicle control device or server in the above S3001-S3004 can be executed by the processor 201 in the communication device 20 shown in Figure 2 calling the application code stored in the memory 203, and the embodiment of the present application does not impose any restrictions on this.

[0223] It is understood that in the methods shown in Figures 3 to 5 above, the server verifies the legitimacy of the electronic device's identity using a public key certificate or authorization information of the electronic device's public key. In specific applications, an identity credential can be generated for the electronic device using a proxy signature to enable the server to verify the legitimacy of the electronic device.

[0224] Among them, proxy signature involves the original signer and the proxy signer. The original signer authorizes his or her signing ability to the proxy signer by generating a proxy signing key for the proxy signer. The proxy signing key can be generated using the original signer's private key or the proxy signer's private key. If the proxy signing key is generated using the proxy signer's private key, the original signer and the proxy signer need to interact and jointly generate it; if the proxy signing key is generated without using the proxy signer's private key, it is usually generated by the original signer alone. The embodiment of the present application is introduced by taking the example of using the original signer to generate the proxy signing key alone.

[0225] As shown in FIG6 , another method for upgrading an in-vehicle device provided in an embodiment of the present application may include the following steps:

[0226] S601: The electronic device sends second signature information to the server. Correspondingly, the server receives the second signature information from the electronic device.

[0227] In an embodiment of the present application, the electronic device may be the electronic device 102 in FIG. 1A , and the server may be the server 101 in FIG. 1A ; or the electronic device may be the electronic device in FIG. 1B , and the server may be the server in FIG. 1B .

[0228] In an embodiment of the present application, the second signature information is used to verify the identity of the electronic device. The second signature information is obtained by signing the first upgrade request with a proxy signature key. The proxy signature key is obtained based on the private key of the vehicle-mounted control device and the authorization information of the proxy signature key. For example, the proxy signature key can be calculated using the hash value of the authorization information corresponding to the algorithm and the private key of the vehicle-mounted control device. The authorization information can also be referred to as a warranty. The introduction of the first upgrade request can refer to the corresponding description in S301 above and will not be repeated here.

[0229] In this embodiment of the present application, the authorization information of the proxy signature key may include at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information. The information about the at least one vehicle-mounted device to be upgraded and the authorization period can be found in the corresponding description of S301 above and are not further elaborated here.

[0230] S602: If the second signature information is successfully verified, the server sends the upgrade package of at least one vehicle-mounted device to the electronic device. Correspondingly, the electronic device receives the upgrade package of at least one vehicle-mounted device from the server.

[0231] It is understandable that after receiving the second signature information, the server can verify the second signature information, and if the second signature information is successfully verified, send an upgrade package of at least one vehicle-mounted device to the electronic device.

[0232] In one possible implementation, the server verifies the second signature information using the public key of the vehicle control device. As will be appreciated, the proxy signature key is derived from the vehicle control device's private key and the authorization information for the proxy signature key. The second signature information is obtained by signing the first upgrade request using the proxy signature key. Therefore, the server can verify the second signature information using the vehicle control device's public key.

[0233] It can be understood that if the second signature information verification is successful, it means that the electronic device is legal, or the electronic device is authorized to download the upgrade package, and the received information has not been tampered with. If the second signature information verification fails, it means that the electronic device is illegal, or the electronic device is not authorized to download the upgrade package, or the received information has been tampered with.

[0234] In one possible implementation, if the server wants to cancel the authorization of the electronic device within the authorization period, the server may store the authorization information in an authorization information cancellation list.

[0235] S603: The electronic device sends an upgrade package of at least one vehicle-mounted device to the vehicle-mounted control device. Correspondingly, the vehicle-mounted control device receives the upgrade package of at least one vehicle-mounted device from the electronic device.

[0236] S604: The vehicle control device sends the upgrade package of each vehicle device to at least one vehicle device respectively. Correspondingly, each vehicle device receives the upgrade package.

[0237] The above processes of S603 to S604 are similar to the above processes of S303 to S304. Therefore, reference may be made to the corresponding descriptions of S303 to S304, which will not be repeated here.

[0238] Among them, the actions of the electronic device or server or vehicle-mounted control device in the above S601-S604 can be executed by the processor 201 in the communication device 20 shown in Figure 2 calling the application code stored in the memory 203, and the embodiment of the present application does not impose any restrictions on this.

[0239] Based on the method shown in Figure 6, the server can verify the legitimacy of the electronic device through the second signature information, such as whether the electronic device has the authority to download the upgrade package, and verify whether the received information has been tampered with, so as to ensure the security of the vehicle-mounted device upgrade.

[0240] Optionally, in a possible scenario of the method shown in FIG6 , the vehicle-mounted control device generates a proxy signature key for the electronic device. Specifically, as shown in FIG7 , the method shown in FIG6 further includes the following steps:

[0241] S600a: The vehicle-mounted control device obtains the proxy signature key.

[0242] In one possible implementation, the vehicle control device, acting as the original signer, uses its own private key to generate a proxy signing key for the electronic device (acting as the proxy signer). The proxy signing key includes authorization information for the proxy signing key. The proxy signing key can serve as a letter of authorization, allowing the server to verify the legitimacy of the electronic device.

[0243] S600b: The vehicle-mounted control device sends the proxy signature key to the electronic device. Correspondingly, the electronic device receives the proxy signature key from the vehicle-mounted control device.

[0244] It can be understood that through S600a~S600b, the vehicle-mounted control device can generate an authorization letter (such as a proxy signature key) for the electronic device. Afterwards, the electronic device can request an upgrade package from the server based on the authorization letter. Since the authorization letter is unchangeable and unforgeable, the authorization letter is used as a certificate for the electronic device to prove the legitimacy of the electronic device to the server, which can ensure the upgrade security of the vehicle-mounted device. In addition, the generation of the above-mentioned authorization letter does not require the participation of the server, and the process is simple and practical. Moreover, the legitimacy of the digital signature (such as the second signature information) generated by the proxy signature key is verified by the public key of the original signer (vehicle-mounted control device), and does not involve the public key certificate of the authorized person (electronic device). Compared with the method of authentication through the public key certificate of the public key of the electronic device, the length of the certificate chain is reduced, which can improve the verification efficiency.

[0245] Among them, the actions of the electronic device or vehicle-mounted control device in the above S600a~S600b can be executed by the processor 201 in the communication device 20 shown in Figure 2 calling the application code stored in the memory 203, and the embodiment of the present application does not impose any restrictions on this.

[0246] The various embodiments mentioned above in this application can be combined without limitation if there is no contradiction between the solutions.

[0247] The above mainly describes the solutions provided by the embodiments of the present application from the perspective of interaction between various devices. Accordingly, the embodiments of the present application also provide a communication device, which can be a server in the above method embodiments, or a device including the above server, or a component that can be used for a server; or the communication device can be an electronic device in the above method embodiments, or a device including the above electronic device, or a component that can be used for an electronic device; or the communication device can be an in-vehicle control device in the above method embodiments, or a device including the above in-vehicle control device, or a component that can be used for an in-vehicle control device. It will be understood that in order to implement the above functions, the server, electronic device, or in-vehicle control device includes hardware structures and / or software modules corresponding to the respective functions. Those skilled in the art will readily appreciate that, in combination with the various exemplary units and algorithmic operations described in the embodiments disclosed herein, the present application can be implemented in hardware or a combination of hardware and computer software. Whether a function is implemented in hardware or in a hardware-driven manner by computer software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this application.

[0248] In the embodiment of the present application, the server, electronic device or vehicle-mounted control device can be divided into functional modules according to the above method examples. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It is understood that the division of modules in the embodiment of the present application is schematic and is only a logical functional division. In actual implementation, there may be other division methods.

[0249] For example, FIG8 shows a schematic diagram of the structure of a communication device 80, where the functional modules are divided in an integrated manner. Communication device 80 includes a transceiver module 801 and a processing module 802. Transceiver module 801, also known as a transceiver unit, performs transceiver operations and may be, for example, a transceiver circuit, a transceiver, a transceiver, or a communication interface. Processing module 802, also known as a processing unit, performs operations other than transceiver operations and may be, for example, a processing circuit or a processor.

[0250] In some embodiments, the communication device 80 may further include a storage module (not shown in FIG. 8 ) for storing program instructions and data.

[0251] Exemplarily, the communication device 80 is used to implement the function of a server. The communication device 80 is, for example, the server described in the embodiment shown in FIG3 , the embodiment shown in FIG4 , or the embodiment shown in FIG5 .

[0252] The transceiver module 801 is configured to receive first signature information and first public key information from an electronic device. The first signature information is obtained by signing a first upgrade request using the private key of the electronic device. The first upgrade request is used to request an upgrade package for at least one in-vehicle device. The first public key information is used to verify the identity of the electronic device. The first public key information includes a public key certificate for the public key of the electronic device, or the first public key information includes the public key of the electronic device. For example, the transceiver module 801 can be configured to execute S301.

[0253] The processing module 802 is configured to send the upgrade package to the electronic device through the transceiver module 801 when the first signature information and the first public key information are successfully verified. For example, the processing module 802 may be configured to execute S302.

[0254] In a possible implementation, the processing module 802 is further configured to verify the first signature information according to the public key of the electronic device.

[0255] In one possible implementation, the transceiver module 801 is also used to receive the public key of the electronic device from the vehicle-mounted control device; the transceiver module 801 is also used to send a public key certificate to the vehicle-mounted control device, and the public key certificate is generated based on the private key of the communication device 80.

[0256] In a possible implementation, the processing module 802 is further configured to verify the public key certificate according to the public key of the communication device 80 .

[0257] In a possible implementation, the public key certificate is generated according to the private key of the vehicle-mounted control device, and the processing module 802 is further configured to verify the public key certificate according to the public key of the vehicle-mounted control device.

[0258] In a possible implementation, the transceiver module 801 is further configured to receive a public key of an electronic device from an in-vehicle control device; and the processing module 802 is further configured to generate authorization information of the public key of the electronic device.

[0259] In a possible implementation, the processing module 802 is further configured to verify the public key of the electronic device according to the authorization information.

[0260] In a possible implementation, the processing module 802 is further configured to delete the authorization information.

[0261] In a possible implementation, the first upgrade request includes information about at least one vehicle-mounted device to be upgraded.

[0262] In one possible implementation, the public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, identification of the vehicle-mounted control device, identification of the communication device 80 , identification of the electronic device, authorization period, or authorization purpose information.

[0263] When used to implement the server function, for other functions that the communication device 80 can implement, please refer to the embodiment shown in Figure 3, the method embodiment shown in Figure 4 or the embodiment shown in Figure 5, and no further details will be given.

[0264] Alternatively, illustratively, the communication device 80 is used to implement the function of a server. The communication device 80 is, for example, the server described in the embodiment shown in FIG6 or the embodiment shown in FIG7 .

[0265] The transceiver module 801 is configured to receive second signature information from the electronic device. The second signature information is used to verify the identity of the electronic device. The second signature information is obtained by signing a first upgrade request using a proxy signature key. The proxy signature key is obtained based on the private key of the vehicle-mounted control device and the authorization information of the proxy signature key. The first upgrade request is used to request an upgrade package for at least one vehicle-mounted device. For example, the transceiver module 801 can be configured to execute S601.

[0266] The processing module 802 is configured to, if the second signature information is successfully verified, send the upgrade package to the electronic device via the transceiver module 801. For example, the processing module 802 may be configured to execute S602.

[0267] In a possible implementation, the processing module 802 is further configured to verify the second signature information according to the public key of the vehicle-mounted control device.

[0268] In a possible implementation, the processing module 802 is further configured to store the authorization information into an authorization information cancellation list.

[0269] In a possible implementation, the first upgrade request includes information about at least one vehicle-mounted device to be upgraded.

[0270] In one possible implementation, the authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, identification of the vehicle-mounted control device, identification of the communication device 80 , identification of the electronic device, authorization period, or authorization purpose information.

[0271] When used to implement the server function, regarding other functions that the communication device 80 can implement, reference can be made to the relevant introduction of the embodiment shown in FIG6 or the embodiment shown in FIG7 , and no further details will be given.

[0272] Alternatively, illustratively, the communication device 80 is used to implement the functions of the vehicle-mounted control device. The communication device 80 is, for example, the vehicle-mounted control device described in the embodiment shown in FIG7 .

[0273] The processing module 802 is configured to obtain a proxy signature key. The proxy signature key is obtained based on the private key of the communication device 80 and the authorization information of the proxy signature key. For example, the processing module 802 may be configured to execute S600a.

[0274] The transceiver module 801 is configured to send the proxy signature key to the electronic device. For example, the transceiver module 801 may be configured to execute S600b.

[0275] In a possible implementation, the authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the communication device 80 , an identifier of a server, an identifier of an electronic device, an authorization period, or authorization purpose information.

[0276] In a possible implementation, the transceiver module 801 is further configured to send information about at least one vehicle-mounted device to be upgraded to the electronic device.

[0277] When used to implement the functions of the vehicle-mounted control device, for other functions that the communication device 80 can implement, please refer to the relevant introduction of the embodiment shown in Figure 7, and no further details will be given.

[0278] In a simple embodiment, those skilled in the art can imagine that the communication device 80 can be in the form shown in Figure 2. For example, the processor 201 in Figure 2 can call the computer-executable instructions stored in the memory 203 to enable the communication device 80 to perform the method described in the above method embodiment.

[0279] Exemplarily, the functions / implementation processes of the transceiver module 801 and the processing module 802 in FIG8 can be implemented by the processor 201 in FIG2 calling computer-executable instructions stored in the memory 203. Alternatively, the functions / implementation processes of the processing module 802 in FIG8 can be implemented by the processor 201 in FIG2 calling computer-executable instructions stored in the memory 203, and the functions / implementation processes of the transceiver module 801 in FIG8 can be implemented by the communication interface 204 in FIG2.

[0280] For example, FIG9 illustrates a schematic diagram of the structure of a communication device 90, where the functional modules are divided in an integrated manner. Communication device 90 includes a transceiver module 901. Optionally, communication device 90 also includes a processing module 902. Transceiver module 901, also known as a transceiver unit, is configured to perform transceiver operations and may, for example, be a transceiver circuit, a transceiver, a transceiver, or a communication interface. Processing module 902, also known as a processing unit, is configured to perform operations other than transceiver operations and may, for example, be a processing circuit or a processor.

[0281] In some embodiments, the communication device 90 may further include a storage module (not shown in FIG. 9 ) for storing program instructions and data.

[0282] Exemplarily, the communication device 90 is used to implement the functions of an electronic device. The communication device 90 is, for example, the electronic device described in the embodiment shown in FIG3 , the embodiment shown in FIG4 , or the embodiment shown in FIG5 .

[0283] The transceiver module 901 is configured to send first signature information and first public key information to the server. The first signature information is obtained by signing a first upgrade request using the private key of the communication device 90. The first upgrade request is used to request an upgrade package for at least one in-vehicle device. The first public key information is used to verify the identity of the communication device 90. The first public key information includes a public key certificate for the public key of the communication device 90, or the first public key information includes the public key of the communication device 90. For example, the transceiver module 901 can be configured to execute S301.

[0284] The transceiver module 901 is further configured to receive an upgrade package from a server. For example, the transceiver module 901 may be configured to execute S302.

[0285] The transceiver module 901 is further configured to send an upgrade package to the vehicle-mounted control device. For example, the transceiver module 901 may be configured to execute S303.

[0286] In a possible implementation, the transceiver module 901 is further configured to receive a public key certificate from the vehicle-mounted control device, where the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of the server.

[0287] In a possible implementation, the processing module 902 is used to obtain the public key of the communication device 90 and the private key of the communication device 90 ; the transceiver module 901 is further used to send the public key of the communication device 90 to the vehicle-mounted control device.

[0288] In a possible implementation, the first upgrade request includes information about at least one vehicle-mounted device to be upgraded.

[0289] In one possible implementation, the public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, identification of the vehicle-mounted control device, identification of the server, identification of the communication device 90, authorization period, or authorization purpose information.

[0290] In a possible implementation, the transceiver module 901 is further configured to receive information about at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

[0291] When used to implement the functions of an electronic device, for other functions that the communication device 90 can implement, reference can be made to the embodiment shown in FIG3 , the method embodiment shown in FIG4 , or the related introduction of the embodiment shown in FIG5 , and no further details will be given.

[0292] In a simple embodiment, those skilled in the art can imagine that the communication device 90 can be in the form shown in Figure 2. For example, the processor 201 in Figure 2 can call the computer-executable instructions stored in the memory 203 to enable the communication device 90 to execute the method described in the above method embodiment.

[0293] Exemplarily, the functions / implementation processes of the transceiver module 901 and the processing module 902 in FIG9 can be implemented by the processor 201 in FIG2 calling computer-executable instructions stored in the memory 203. Alternatively, the functions / implementation processes of the processing module 902 in FIG9 can be implemented by the processor 201 in FIG2 calling computer-executable instructions stored in the memory 203, and the functions / implementation processes of the transceiver module 901 in FIG9 can be implemented by the communication interface 204 in FIG2.

[0294] For example, in the case of integrating the functional modules, FIG10 shows a schematic diagram of the structure of a communication device 100. The communication device 100 includes a transceiver module 1001. The transceiver module 1001, which may also be referred to as a transceiver unit, is used to perform transceiver operations and may be, for example, a transceiver circuit, a transceiver, a transceiver, or a communication interface.

[0295] Exemplarily, the communication device 100 is used to implement the functions of an on-vehicle control device. The communication device 100 is, for example, the on-vehicle control device described in the embodiment shown in FIG4 .

[0296] The transceiver module 1001 is configured to receive a public key of an electronic device from an electronic device. For example, the transceiver module 1001 may be configured to execute S300b or S300B.

[0297] The transceiver module 1001 is configured to send a public key certificate of the electronic device's public key to the electronic device. The public key certificate is generated based on the private key of the communication device 100, or the public key certificate is generated based on the private key of the server. For example, the transceiver module 1001 may be configured to execute S300c or S300E.

[0298] In a possible implementation, the public key certificate is generated based on the private key of the server, and the transceiver module 1001 is further used to send the public key of the electronic device to the server; the transceiver module 1001 is also used to receive the public key certificate from the server.

[0299] In one possible implementation, the public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the communication device 100 , an identifier of a server, an identifier of an electronic device, an authorization period, or authorization purpose information.

[0300] In a possible implementation, the transceiver module 1001 is further configured to send information about at least one vehicle-mounted device to be upgraded to the electronic device.

[0301] When used to implement the functions of the vehicle-mounted control device, for other functions that the communication device 100 can implement, reference can be made to the relevant introduction of the embodiment shown in FIG4 , and no further details will be given.

[0302] Alternatively, illustratively, the communication device 100 is used to implement the functions of an on-vehicle control device. The communication device 100 is, for example, the on-vehicle control device described in the embodiment shown in FIG5 .

[0303] The transceiver module 1001 is configured to receive a public key of an electronic device from an electronic device. For example, the transceiver module 1001 may be configured to execute S3002.

[0304] The transceiver module 1001 is further configured to send first indication information and the public key of the electronic device to the server, where the first indication information is used to indicate authorization information for generating the public key of the electronic device. For example, the transceiver module 1001 may be configured to execute S3003.

[0305] In a possible implementation, the transceiver module 1001 is further configured to send information about at least one vehicle-mounted device to be upgraded to the electronic device.

[0306] When used to implement the functions of the vehicle-mounted control device, for other functions that the communication device 100 can implement, reference can be made to the relevant introduction of the embodiment shown in FIG5 , and no further details will be given.

[0307] Alternatively, illustratively, the communication device 100 is used to implement the functions of an electronic device. The communication device 100 is, for example, the electronic device described in the embodiment shown in FIG6 or the embodiment shown in FIG7 .

[0308] The transceiver module 1001 is configured to send second signature information to the server. The second signature information is used to verify the identity of the communication device 100. The second signature information is obtained by signing the first upgrade request using a proxy signature key. The proxy signature key is obtained based on the private key of the vehicle-mounted control device and the authorization information of the proxy signature key. The first upgrade request is used to request an upgrade package for at least one vehicle-mounted device. For example, the transceiver module 1001 is configured to execute S601.

[0309] The transceiver module 1001 is further configured to receive an upgrade package from a server. For example, the transceiver module 1001 is further configured to execute S602.

[0310] The transceiver module 1001 is further configured to send an upgrade package to the vehicle-mounted control device. For example, the transceiver module 1001 is further configured to execute S603.

[0311] In a possible implementation, the transceiver module 1001 is further configured to receive a proxy signature key from the vehicle-mounted control device.

[0312] In a possible implementation, the first upgrade request includes information about at least one vehicle-mounted device to be upgraded.

[0313] In one possible implementation, the authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the communication device 100 , an authorization period, or authorization purpose information.

[0314] In a possible implementation, the transceiver module 1001 is further configured to receive information about at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

[0315] When used to implement the functions of an electronic device, for other functions that the communication device 100 can implement, reference can be made to the relevant introduction of the embodiment shown in FIG6 or the embodiment shown in FIG7 , and no further details will be given.

[0316] In a simple embodiment, those skilled in the art may imagine that the communication device 100 may adopt the form shown in Figure 2. For example, the processor 201 in Figure 2 may call the computer-executable instructions stored in the memory 203 to enable the communication device 100 to execute the method described in the above method embodiment.

[0317] Exemplarily, the functions / implementation process of the transceiver module 1001 in FIG10 can be implemented by the processor 201 in FIG2 calling the computer-executable instructions stored in the memory 203. Alternatively, the functions / implementation process of the transceiver module 1001 in FIG10 can be implemented by the communication interface 204 in FIG2.

[0318] It is understandable that one or more of the above modules or units can be implemented by software, hardware or a combination of the two. When any of the above modules or units is implemented by software, the software exists in the form of computer program instructions and is stored in a memory, and a processor can be used to execute the program instructions and implement the above method flow. The processor can be built into an SoC (system on chip) or an ASIC, or it can be an independent semiconductor chip. In addition to the core used to execute software instructions to perform calculations or processing within the processor, it can further include necessary hardware accelerators, such as field programmable gate arrays (FPGAs), PLDs (programmable logic devices), or logic circuits that implement dedicated logic operations.

[0319] When the above modules or units are implemented in hardware, the hardware can be any one or any combination of a CPU, a microprocessor, a digital signal processing (DSP) chip, a microcontroller unit (MCU), an artificial intelligence processor, an ASIC, a SoC, an FPGA, a PLD, a dedicated digital circuit, a hardware accelerator or a non-integrated discrete device, which can run the necessary software or not rely on the software to execute the above method flow.

[0320] Optionally, an embodiment of the present application further provides a chip system, comprising: at least one processor and an interface, wherein the at least one processor is coupled to a memory via the interface, and when the at least one processor executes a computer program or instruction in the memory, the method in any of the above method embodiments is executed. In one possible implementation, the chip system also includes a memory. Optionally, the chip system can be composed of a chip, or can include a chip and other discrete devices, which is not specifically limited in the embodiment of the present application.

[0321] Optionally, an embodiment of the present application further provides a computer-readable storage medium. All or part of the processes in the above-mentioned method embodiments can be completed by a computer program to instruct the relevant hardware, and the program can be stored in the above-mentioned computer-readable storage medium. When the program is executed, it may include the processes of the above-mentioned method embodiments. The computer-readable storage medium can be an internal storage unit of the communication device of any of the above-mentioned embodiments, such as a hard disk or memory of the communication device. The above-mentioned computer-readable storage medium can also be an external storage device of the above-mentioned communication device, such as a plug-in hard disk, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. equipped on the above-mentioned communication device. Furthermore, the above-mentioned computer-readable storage medium can also include both the internal storage unit of the above-mentioned communication device and an external storage device. The above-mentioned computer-readable storage medium is used to store the above-mentioned computer program and other programs and data required by the above-mentioned communication device. The above-mentioned computer-readable storage medium can also be used to temporarily store data that has been output or is to be output.

[0322] Optionally, embodiments of the present application further provide a computer program product. All or part of the processes in the above method embodiments may be completed by a computer program instructing the relevant hardware. The program may be stored in the above computer program product, and when executed, the program may include the processes of the above method embodiments.

[0323] Optionally, an embodiment of the present application further provides a computer instruction. All or part of the process in the above method embodiment can be completed by the computer instruction to instruct the relevant hardware (such as a computer, processor, server, electronic device or vehicle control device, etc.). The program can be stored in the above computer-readable storage medium or in the above computer program product.

[0324] Optionally, an embodiment of the present application further provides a vehicle, comprising the on-board control device in the above embodiment.

[0325] Optionally, an embodiment of the present application further provides an upgrade system, including: the server, electronic device and vehicle-mounted control device in the embodiment shown in Figure 3, the embodiment shown in Figure 4 or the embodiment shown in Figure 5.

[0326] Optionally, an embodiment of the present application further provides an upgrade system, including: the server, electronic device and vehicle-mounted control device in the embodiment shown in Figure 6 or the embodiment shown in Figure 7.

[0327] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0328] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the modules or units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0329] The units described as separate components may or may not be physically separate, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple places. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0330] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0331] The above is only a specific embodiment of the present application, but the scope of protection of this application is not limited to this. Any changes or substitutions within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for upgrading an in-vehicle device, characterized in that: Applied to a server, the method includes: Receiving first signature information and first public key information from an electronic device, where the first signature information is obtained by signing a first upgrade request using a private key of the electronic device, the first upgrade request is used to request an upgrade package for at least one in-vehicle device, and the first public key information is used to verify the identity of the electronic device, the first public key information including a public key certificate of the public key of the electronic device, or the first public key information including the public key of the electronic device; When the first signature information and the first public key information are successfully verified, the upgrade package is sent to the electronic device.

2. The method according to claim 1, characterized in that The method further comprises: The first signature information is verified according to the public key of the electronic device.

3. The method according to claim 1 or 2, characterized in that The method further comprises: receiving a public key of the electronic device from an onboard control device; The public key certificate is sent to the vehicle-mounted control device, where the public key certificate is generated based on the private key of the server.

4. The method according to claim 3, characterized in that The method further comprises: The public key certificate is verified based on the server's public key.

5. The method according to claim 1 or 2, characterized in that The public key certificate is generated based on the private key of the vehicle-mounted control device, and the method further includes: The public key certificate is verified based on the public key of the in-vehicle control device.

6. The method according to claim 1 or 2, characterized in that The method further comprises: receiving a public key of the electronic device from an onboard control device; Generate authorization information for the public key of the electronic device.

7. The method according to claim 6, characterized in that The method further comprises: The public key of the electronic device is verified according to the authorization information.

8. The method according to claim 6 or 7, characterized in that The method further comprises: Delete the authorization information.

9. The method according to any one of claims 1 to 8, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

10. The method according to any one of claims 1 to 9, characterized in that The public key certificate includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

11. A method for upgrading an in-vehicle device, characterized in that: Applied to electronic equipment, the method includes: Sending first signature information and first public key information to a server, where the first signature information is obtained by signing a first upgrade request using a private key of the electronic device, the first upgrade request is used to request an upgrade package for at least one in-vehicle device, and the first public key information is used to verify the identity of the electronic device, the first public key information including a public key certificate of the public key of the electronic device, or the first public key information including the public key of the electronic device; receiving the upgrade package from the server; Send the upgrade package to the vehicle-mounted control device.

12. The method according to claim 11, characterized in that The method further comprises: The public key certificate is received from the vehicle-mounted control device, where the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of the server.

13. The method according to claim 12, characterized in that The method further comprises: Obtaining a public key of the electronic device and a private key of the electronic device; The public key of the electronic device is sent to the vehicle-mounted control device.

14. The method according to any one of claims 11 to 13, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

15. The method according to any one of claims 11 to 14, characterized in that The public key certificate includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

16. The method according to claim 14 or 15, characterized in that The method further comprises: Receive information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

17. A method for upgrading an in-vehicle device, characterized in that: Applied to an in-vehicle control device, the method includes: receiving a public key of the electronic device from the electronic device; A public key certificate of the public key of the electronic device is sent to the electronic device, where the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of a server.

18. The method according to claim 17, characterized in that The public key certificate is generated based on the private key of the server, and the method further includes: Sending the public key of the electronic device to the server; The public key certificate is received from the server.

19. The method according to claim 17 or 18, characterized in that The public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

20. The method according to claim 19, wherein The method further comprises: Sending the upgrade information of the at least one vehicle-mounted device to the electronic device.

21. A method for upgrading an on-vehicle device, characterized in that: Applied to an in-vehicle control device, the method includes: receiving a public key of the electronic device from the electronic device; Sending first indication information and the public key of the electronic device to a server, where the first indication information is used to indicate authorization information for generating the public key of the electronic device.

22. The method according to claim 21, characterized in that The method further comprises: Sending information about at least one vehicle-mounted device to be upgraded to the electronic device.

23. A method for upgrading an on-vehicle device, characterized in that: Applied to a server, the method includes: receiving second signature information from an electronic device, the second signature information being used to verify the identity of the electronic device, the second signature information being obtained by signing a first upgrade request using a proxy signature key, the proxy signature key being obtained based on a private key of an onboard control device and authorization information of the proxy signature key, the first upgrade request being used to request an upgrade package for at least one onboard device; If the second signature information is successfully verified, the upgrade package is sent to the electronic device.

24. The method according to claim 23, wherein The method further comprises: The second signature information is verified according to the public key of the vehicle-mounted control device.

25. The method according to claim 23 or 24, characterized in that The method further comprises: The authorization information is stored in an authorization information cancellation list.

26. The method according to any one of claims 23 to 25, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

27. The method according to any one of claims 23 to 26, characterized in that The authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

28. A method for upgrading an on-vehicle device, characterized in that: Applied to electronic equipment, the method includes: Sending second signature information to the server, where the second signature information is used to verify the identity of the electronic device, the second signature information being obtained by signing the first upgrade request using a proxy signature key, where the proxy signature key is obtained based on a private key of the on-board control device and authorization information of the proxy signature key, and the first upgrade request is used to request an upgrade package for at least one on-board device; receiving the upgrade package from the server; Send the upgrade package to the vehicle-mounted control device.

29. The method according to claim 28, characterized in that The method further comprises: The proxy signing key is received from the in-vehicle control device.

30. The method according to claim 28 or 29, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

31. The method according to any one of claims 28 to 30, characterized in that The authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

32. The method according to claim 30 or 31, characterized in that The method further comprises: Receive information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

33. A method for upgrading a vehicle-mounted device, characterized in that: Applied to an in-vehicle control device, the method includes: Obtaining a proxy signature key, where the proxy signature key is obtained based on the private key of the vehicle-mounted control device and authorization information of the proxy signature key; The proxy signature key is sent to the electronic device.

34. The method according to claim 33, wherein The authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of a server, an identifier of the electronic device, an authorization period, or authorization purpose information.

35. The method according to claim 34, wherein The method further comprises: Sending the upgrade information of the at least one vehicle-mounted device to the electronic device.

36. A communication device, characterized in that: The communication device includes: a transceiver module and a processing module; The transceiver module is configured to receive first signature information and first public key information from an electronic device, wherein the first signature information is obtained by signing a first upgrade request using a private key of the electronic device, the first upgrade request being used to request an upgrade package for at least one in-vehicle device, and the first public key information being used to verify the identity of the electronic device, the first public key information including a public key certificate of the public key of the electronic device, or the first public key information including the public key of the electronic device; The processing module is configured to send the upgrade package to the electronic device through the transceiver module when the first signature information and the first public key information are successfully verified.

37. The communication device according to claim 36, wherein: The processing module is further configured to verify the first signature information according to the public key of the electronic device.

38. The communication device according to claim 36 or 37, characterized in that The transceiver module is further configured to receive the public key of the electronic device from the vehicle-mounted control device; The transceiver module is further configured to send the public key certificate to the vehicle-mounted control device, where the public key certificate is generated based on the private key of the communication device.

39. The communication device according to claim 38, wherein The processing module is further configured to verify the public key certificate according to the public key of the communication device.

40. The communication device according to claim 36 or 37, characterized in that The public key certificate is generated based on the private key of the vehicle control device. The processing module is further configured to verify the public key certificate according to the public key of the vehicle-mounted control device.

41. The communication device according to claim 36 or 37, characterized in that The transceiver module is further configured to receive the public key of the electronic device from the vehicle-mounted control device; The processing module is further configured to generate authorization information of the public key of the electronic device.

42. The communication device according to claim 41, wherein The processing module is further configured to verify the public key of the electronic device according to the authorization information.

43. The communication device according to claim 41 or 42, characterized in that The processing module is further configured to delete the authorization information.

44. The communication device according to any one of claims 36 to 43, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

45. The communication device according to any one of claims 36 to 44, characterized in that The public key certificate includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identification of the vehicle-mounted control device, an identification of the communication device, an identification of the electronic device, an authorization period, or authorization purpose information.

46. ​​A communication device, characterized in that The communication device includes: a transceiver module; The transceiver module is configured to send first signature information and first public key information to a server, wherein the first signature information is obtained by signing a first upgrade request using a private key of the communication device, the first upgrade request being used to request an upgrade package for at least one in-vehicle device, and the first public key information is used to verify the identity of the communication device, the first public key information including a public key certificate of the public key of the communication device, or the first public key information including the public key of the communication device; The transceiver module is further configured to receive the upgrade package from the server; The transceiver module is further configured to send the upgrade package to the vehicle-mounted control device.

47. The communication device according to claim 46, characterized in that The transceiver module is further used to receive the public key certificate from the vehicle-mounted control device, where the public key certificate is generated based on the private key of the vehicle-mounted control device, or the public key certificate is generated based on the private key of the server.

48. The communication device according to claim 47, characterized in that The communication device further includes: a processing module; The processing module is configured to obtain a public key of the communication device and a private key of the communication device; The transceiver module is further configured to send the public key of the communication device to the vehicle-mounted control device.

49. The communication device according to any one of claims 46 to 48, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

50. The communication device according to any one of claims 46 to 49, characterized in that The public key certificate includes at least one of the following: information of the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the communication device, an authorization period, or authorization purpose information.

51. The communication device according to claim 49 or 50, characterized in that The transceiver module is further configured to receive information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

52. A communication device, characterized in that The communication device includes: a transceiver module; The transceiver module is configured to receive the public key of the electronic device from the electronic device; The transceiver module is further configured to send a public key certificate of the electronic device's public key to the electronic device, where the public key certificate is generated based on the private key of the communication device, or the public key certificate is generated based on the private key of a server.

53. The communication device according to claim 52, characterized in that The public key certificate is generated based on the server's private key. The transceiver module is further configured to send the public key of the electronic device to the server; The transceiver module is further configured to receive the public key certificate from the server.

54. The communication device according to claim 52 or 53, characterized in that The public key certificate includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the communication device, an identifier of the server, an identifier of the electronic device, an authorization period, or authorization purpose information.

55. The communication device according to claim 54, characterized in that The transceiver module is further configured to send the upgrade information of the at least one vehicle-mounted device to the electronic device.

56. A communication device, characterized in that The communication device includes: a transceiver module; The transceiver module is configured to receive the public key of the electronic device from the electronic device; The transceiver module is further configured to send first indication information and the public key of the electronic device to a server, where the first indication information is used to indicate authorization information for generating the public key of the electronic device.

57. The communication device according to claim 56, characterized in that The transceiver module is further configured to send information about at least one vehicle-mounted device to be upgraded to the electronic device.

58. A communication device, characterized in that The communication device includes: a transceiver module and a processing module; The transceiver module is configured to receive second signature information from an electronic device, the second signature information being used to verify the identity of the electronic device, the second signature information being obtained by signing a first upgrade request using a proxy signature key, the proxy signature key being obtained based on a private key of an on-board control device and authorization information of the proxy signature key, the first upgrade request being used to request an upgrade package for at least one on-board device; The processing module is configured to send the upgrade package to the electronic device through the transceiver module when the second signature information is successfully verified.

59. The communication device according to claim 58, characterized in that The processing module is further configured to verify the second signature information according to the public key of the vehicle-mounted control device.

60. The communication device according to claim 58 or 59, characterized in that The processing module is further configured to store the authorization information into an authorization information cancellation list.

61. The communication device according to any one of claims 58 to 60, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

62. The communication device according to any one of claims 58 to 61, characterized in that The authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the communication device, an identifier of the electronic device, an authorization period, or authorization purpose information.

63. A communication device, characterized in that The communication device includes: a transceiver module; the transceiver module is configured to send second signature information to the server, the second signature information being used to verify the identity of the communication device, the second signature information being obtained by signing a first upgrade request using a proxy signature key, the proxy signature key being obtained based on a private key of the on-board control device and authorization information of the proxy signature key, the first upgrade request being used to request an upgrade package for at least one on-board device; The transceiver module is further configured to receive the upgrade package from the server; The transceiver module is further configured to send the upgrade package to the vehicle-mounted control device.

64. The communication device according to claim 63, characterized in that The transceiver module is further configured to receive the proxy signature key from the vehicle-mounted control device.

65. The communication device according to claim 63 or 64, characterized in that The first upgrade request includes information about the at least one in-vehicle device to be upgraded.

66. The communication device according to any one of claims 63 to 65, characterized in that The authorization information includes at least one of the following: information about the at least one vehicle-mounted device to be upgraded, an identifier of the vehicle-mounted control device, an identifier of the server, an identifier of the communication device, an authorization period, or authorization purpose information.

67. The communication device according to claim 65 or 66, characterized in that The transceiver module is further configured to receive information about the at least one vehicle-mounted device to be upgraded from the vehicle-mounted control device.

68. A communication device, characterized in that The communication device includes: a processing module and a transceiver module; The processing module is configured to obtain a proxy signature key, where the proxy signature key is obtained based on a private key of the communication device and authorization information of the proxy signature key; The transceiver module is used to send the proxy signature key to the electronic device.

69. The communication device according to claim 68, characterized in that The authorization information includes at least one of the following: information about at least one vehicle-mounted device to be upgraded, an identifier of the communication device, an identifier of a server, an identifier of the electronic device, an authorization period, or authorization purpose information.

70. The communication device according to claim 69, characterized in that The transceiver module is further configured to send the upgrade information of the at least one vehicle-mounted device to the electronic device.

71. A communication device, characterized in that include: A processor, the processor being coupled to a memory, the memory being used to store programs or instructions, which, when the programs or instructions are executed by the processor, causes the apparatus to perform the method according to any one of claims 1 to 10, or the method according to any one of claims 11 to 16, or the method according to any one of claims 17 to 20, or the method according to any one of claims 21 to 22, or the method according to any one of claims 23 to 27, or the method according to any one of claims 28 to 32, or the method according to any one of claims 33 to 35.

72. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instructions are executed, the computer performs the method as claimed in any one of claims 1 to 10, or the method as claimed in any one of claims 11 to 16, or the method as claimed in any one of claims 17 to 20, or the method as claimed in any one of claims 21 to 22, or the method as claimed in any one of claims 23 to 27, or the method as claimed in any one of claims 28 to 32, or the method as claimed in any one of claims 33 to 35.

73. A computer program product, comprising computer program code, characterized in that: When the computer program code is run on a computer, the computer executes the method according to any one of claims 1 to 10, or the method according to any one of claims 11 to 16, or the method according to any one of claims 17 to 20, or the method according to any one of claims 21 to 22, or the method according to any one of claims 23 to 27, or the method according to any one of claims 28 to 32, or the method according to any one of claims 33 to 35.

74. A chip, characterized in that include: A processor, the processor being coupled to a memory, the memory being used to store programs or instructions, which, when executed by the processor, causes the chip to execute the method according to any one of claims 1 to 10, or the method according to any one of claims 11 to 16, or the method according to any one of claims 17 to 20, or the method according to any one of claims 21 to 22, or the method according to any one of claims 23 to 27, or the method according to any one of claims 28 to 32, or the method according to any one of claims 33 to 35.

75. A vehicle, characterized in that include: The communication device of any one of claims 52 to 55, or the communication device of any one of claims 56 to 57, or the communication device of any one of claims 68 to 70.

Images