Multi-application implementation and management method, system and terminal of intelligent network connection automobile security chip

Abstract

The invention provides a multi-application implementation and management method, system and terminal for an intelligent network connection automobile security chip, and the method comprises the steps: building a security channel through a management platform when an APDU instruction is input, and carrying out the implementation of the APDU instruction through the management platform after the security channel is built; and the management platform adopts an application management and instruction distribution mechanism to judge an input APDU instruction and perform interaction with data stored in a security chip storage space of the intelligent networked automobile security chip, so as to execute corresponding APP management operation and realize multi-application realization and management of the intelligent networked automobile security chip. The method is high in flexibility, life cycles of all APPs are independently managed, and the APPs can be added and deleted at any time; the security is high, and a security channel mechanism is introduced, so that the security management of the application is realized; and the independence is high, APP development is decoupled from a chip bottom layer technology, and in addition, multi-party application development and integration can be realized.

Description

Technical Field

[0001] The present invention relates to the technical field of connected vehicle safety chips, and in particular to a multi-application implementation and management method, system and terminal for an intelligent connected vehicle safety chip. Background Art

[0002] The smart connected car security chip is a chip designed and developed specifically for smart connected cars. It is a key component in the automotive system, designed to provide higher security and reliability. In the security chip, the carrier of application implementation is APDU (application protocol processing unit, also known as instruction). The use of APDU alone or in combination to complete the corresponding function is the implementation of the application, which is referred to as APP in this invention.

[0003] The security chip for smart connected cars has the feature of multiple applications coexisting. First, it has cryptographic algorithm functions, which are used to encrypt and decrypt communications between vehicles to ensure the secure transmission and storage of data. Secondly, the security chip also has a firewall function, which can monitor and prevent potential network attacks and intrusions. In addition, it also supports authentication and access control mechanisms, allowing only authorized devices and users to access the vehicle system. In order to realize the multi-application functional characteristics of the security chip for smart connected cars, it is necessary to carry a variety of APPs in the security chip.

[0004] There are two main ways to implement multiple applications in security chips:

[0005] The first is the Native COS method. Native COS is a secure chip operating system developed directly based on chip hardware, which implements multiple applications based on the file system and instruction set, such as Figure 1 Native COS is the implementation architecture of Native COS. It is usually written in C or assembly language and is tightly integrated with a specific hardware platform. The development of Native COS requires more low-level knowledge, but it can provide higher performance and lower resource usage. Native COS is suitable for application scenarios with high performance requirements or limited resources. Before the chip leaves the factory, all implemented APPs must be pre-installed in the chip memory.

[0006] When the security chip uses the Native COS method, the APP development is closely integrated with the hardware platform and is generally completed by the chip design manufacturer. Using this method, the APP code can directly operate the hardware resources. Although it can provide higher performance and lower resource usage, it has the following defects:

[0007] 1. Development is difficult and requires a full understanding of the underlying chip platform;

[0008] 2. Multiple application requirements need to be implemented through extended instruction sets and file systems, which has many development restrictions;

[0009] 3. Multiple applications must be implemented by a single provider, and multi-party application integration cannot be achieved;

[0010] 4. All applications have the same life cycle, and flexible application management cannot be achieved;

[0011] The second method is Java COS. Java COS is a secure chip operating system based on Java technology, which implements multiple applications in the form of Java Applet, such as Figure 2 It is the implementation architecture of Java COS. It allows developers to use the Java programming language to develop applications and run them on the security chip. Java COS provides a set of APIs (application programming interfaces) that allow developers to access the functions and storage space of the security chip. Java COS has cross-platform characteristics and can run on cards from different chip manufacturers, providing higher flexibility and scalability. Chips based on the JavaCOS platform may not be pre-installed with Applets when leaving the factory. Applets can be installed or deleted according to actual conditions during the subsequent use of the chip.

[0012] When the security chip uses the JavaCOS method, since the application is initiated in the Java Applet method and implemented on the JavaCOS platform, it can overcome the shortcomings of Native COS development difficulty, inflexible App management, and inability to achieve multi-party application integration. However, due to the introduction of the Java virtual machine mechanism, there are the following disadvantages:

[0013] 1. The application is executed in a virtual machine interpretation mode and cannot directly access the underlying resources, resulting in significant performance loss;

[0014] 2. The JavaCOS virtual machine code is large, occupies a lot of platform resources, requires higher chip performance, and increases chip costs;

[0015] 3. The logic of JavaCOS virtual machine is complex and difficult to develop;

[0016] 4. JavaApplet code and data are integrated, and it is impossible to upgrade the code function alone without affecting the data;

[0017] 5. Developing a JavaCOS virtual machine requires Oracle authorization, which has high licensing fees, high chip costs, and high mass production risks. Summary of the invention

[0018] In view of the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide a multi-application implementation and management method, system and terminal of a smart connected vehicle safety chip to solve the above-mentioned problems of the prior art.

[0019] To achieve the above-mentioned purpose and other related purposes, the present invention provides a multi-application implementation and management method for a smart connected vehicle safety chip, the method comprising: when an APDU instruction is input, a management platform establishes a security channel; after the security channel is established, the management platform uses an application management and instruction distribution mechanism to judge the input APDU instruction and interact with the data stored in the security chip storage space of the smart connected vehicle safety chip to perform corresponding APP management operations; wherein the types of the APP management operations include: APP installation operation, APP deletion operation and APP activation operation.

[0020] In one embodiment of the present invention, the security chip storage space includes: a ROM area, which is used to store all code parts except the APP; an NVM area, including: a management platform data area and a code area for storing APP codes and a data area for storing APP data for all installed APPs; wherein the management platform data area includes: a secure channel key area for storing secret key data and an APP information area for storing an APP information list; a RAM area, including: a stack area and a heap area; wherein the heap area includes: heap areas of all installed APPs and a management platform heap area.

[0021] In one embodiment of the present invention, the APP information list includes: APP information of all installed APPs; wherein, the APP information is configured by the management platform when the corresponding APP is installed; the APP information includes: APP status information, APP ID, Select entry information, APP space information, code area starting address, code area space size, data area starting address and data area space size.

[0022] In one embodiment of the present invention, the establishment of the secure channel by the management platform includes: authenticating the administrator identity of the current security chip operator based on the key data stored in the secure channel key area, and establishing the secure channel when the current security chip operator is authenticated as the administrator.

[0023] In one embodiment of the present invention, the application management and instruction distribution mechanism includes: when the input APDU instruction is judged to be an APP installation type, the corresponding APP installation operation is executed; when the input APDU instruction is judged to be an APP deletion type, the corresponding APP deletion operation is executed; when the input APDU instruction is judged not to be an APP installation type or an APP deletion type, the corresponding APP activation operation is executed.

[0024] In one embodiment of the present invention, the APP installation operation includes: configuring the APP information of the APP in the APP information list in the APP information area based on the configuration information of the APP to be installed corresponding to the APDU instruction; downloading the code and data of the APP to be installed, and storing the downloaded data in the corresponding configured code area and data area of ​​the NVM area and the heap area of ​​the corresponding APP in the RAM area based on the APP information of the APP; setting the APP to a registered state.

[0025] In one embodiment of the present invention, the APP deletion operation includes: determining whether the APDU instruction corresponds to the APP selected for deletion; if so, canceling the registration status of the APP, deleting the APP information of the APP in the APP information list in the NVM area, and deleting the code area and data area of ​​the APP, and deleting the heap area of ​​the corresponding APP in the RAM area; if not, canceling the registration status of all APPs, deleting the APP information of all APPs in the APP information list in the NVM area, and deleting the code area and data area of ​​all APPs, and deleting the heap area of ​​all APPs in the RAM area.

[0026] In one embodiment of the present invention, the APP activation operation includes: determining whether an installed APP is set as the default APP; if so, activating the default APP and executing the first activation process; if not, activating the management platform and executing the first activation process; wherein, the first activation process includes: determining whether the APDU instruction corresponds to activating other APPs; if so, executing the second activation process; if not, using the currently activated default APP or management platform to process the APDU instruction. The second activation process includes: determining whether the APDU instruction corresponds to activating the management platform; if so, the management platform processes the activation of the management platform, and uses the activated management platform to process the APDU instruction; if not, the management platform processes other APPs corresponding to the activation of the APDU instruction, and uses the currently activated APP to process the APDU instruction.

[0027] In one embodiment of the present invention, the APP code area of ​​each installed APP respectively stores an established application instruction table, including: APDU instruction codes of all supported APDU instructions and APDU instruction code entries; wherein, the process of APP processing APDU instructions includes: based on the APDU instruction indicator code of the APDU instruction, searching the APDU instruction code entry of the corresponding APDU instruction in the application instruction table of the corresponding APP, and obtaining data for executing the APDU instruction through the APDU instruction code entry.

[0028] In one embodiment of the present invention, each APP is developed using C language, and its development method includes: configuring the storage space information of the APP based on the configuration file sent by the management platform; wherein the storage space information includes: code area storage space information, data area storage space information and RAM storage space information; designing the application instruction table of the APP based on the instruction table attribute structure definition of the configuration file; setting the APP's achievable APDU function; based on the APP's storage space information, application instruction table and APDU function, compiling the APP's binary code, and outputting the App's binary code and App configuration information; wherein the App configuration information includes: APP ID, Select entry address, APP space information, code area storage space information and data area storage space information.

[0029] To achieve the above-mentioned purpose and other related purposes, the present invention provides a multi-application implementation and management system for a smart connected vehicle safety chip, the system comprising: a communication module for receiving input APDU instructions; a management platform, which is communicatively connected to the communication module, and is used to establish a security channel using a security channel mechanism when an APDU instruction is input; after establishing the security channel, an application management and instruction distribution mechanism is used to judge the input APDU instructions and interact with the data stored in the security chip storage space of the smart connected vehicle safety chip to perform corresponding APP management operations; wherein the types of APP management operations include: APP installation operations, APP deletion operations, and APP activation operations.

[0030] To achieve the above-mentioned purpose and other related purposes, the present invention provides a multi-application implementation and management terminal of a smart connected vehicle safety chip, comprising: a memory and a processor; the memory is used to store a computer program; the processor is connected to the memory and is used to run the computer program to execute the described method.

[0031] As described above, the present invention is a multi-application implementation and management method, system and terminal of a smart connected car safety chip, which has the following beneficial effects: the present invention establishes a secure channel by the management platform when an APDU instruction is input, and after the secure channel is established, the management platform uses the application management and instruction distribution mechanism to judge the input APDU instruction and interact with the data stored in the security chip storage space of the smart connected car safety chip to perform the corresponding APP management operation, thereby realizing the implementation and management of multiple applications of the smart connected car safety chip. The present invention is not only highly flexible, with all APP life cycles independently managed, and APPs can be added and deleted at any time; it is also highly secure, with a secure channel mechanism introduced to realize secure management of applications; and it is highly independent, with APP development decoupled from the underlying chip technology, and can also realize multi-party application development and integration. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a schematic diagram of the Native COS platform architecture in the prior art.

[0033] Figure 2 The figure shows a schematic diagram of the Java COS platform architecture in the prior art.

[0034] Figure 3 FIG. 4 is a schematic diagram showing the structural division of the NVM area in an embodiment of the present invention.

[0035] Figure 4 It is a schematic diagram showing the structural division of the RAM area in one embodiment of the present invention.

[0036] Figure 5 Shown is a schematic diagram of the structure of the APP information area in one embodiment of the present invention.

[0037] Figure 6 Shown is a flow chart of a method for implementing and managing multiple applications of a safety chip for an intelligent connected vehicle in one embodiment of the present invention.

[0038] Figure 7 Shown is a flowchart of an APP installation operation and an APP deletion operation in one embodiment of the present invention.

[0039] Figure 8 Shown is a schematic flow chart of an APP activation operation in an embodiment of the present invention.

[0040] Fig. 9 Shown is a schematic diagram of the structure of an APP in an embodiment of the present invention.

[0041] Fig.10 Shown is a schematic diagram of the structure of an application instruction table in one embodiment of the present invention.

[0042] Fig.11 Shown is a structural schematic diagram of a multi-application implementation and management system of a smart connected vehicle safety chip in one embodiment of the present invention.

[0043] Fig.12 Shown is an architecture diagram of a multi-application implementation and management system for a smart connected vehicle safety chip in one embodiment of the present invention.

[0044] Fig.13 Shown is a schematic diagram of the structure of a multi-application implementation and management terminal of a smart connected vehicle safety chip in one embodiment of the present invention. DETAILED DESCRIPTION

[0045] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0046] It should be noted that in the following description, reference is made to the accompanying drawings, which describe several embodiments of the present invention. It should be understood that other embodiments may also be used, and that mechanical composition, structural, electrical and operational changes may be made without departing from the spirit and scope of the present invention. The following detailed description should not be considered restrictive, and the scope of the embodiments of the present invention is limited only by the claims of the published patents. The terms used herein are only for describing specific embodiments and are not intended to limit the present invention. Spatially related terms, such as "upper", "lower", "left", "right", "below", "below", "lower", "above", "upper", etc., may be used in the text to facilitate the description of the relationship between an element or feature shown in the figure and another element or feature.

[0047] Throughout the specification, when a part is said to be "connected" to another part, this includes not only the case of "direct connection" but also the case of "indirect connection" by placing other elements therebetween. In addition, when a part is said to "include" a certain constituent element, unless otherwise stated, it does not exclude other constituent elements, but means that other constituent elements may be included.

[0048] The terms first, second and third mentioned herein are used to describe various parts, components, regions, layers and / or segments, but are not limited thereto. These terms are only used to distinguish a certain part, component, region, layer or segment from other parts, components, regions, layers or segments. Therefore, the first part, component, region, layer or segment described below may refer to the second part, component, region, layer or segment within the scope of the present invention.

[0049] Furthermore, as used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless there is an indication to the contrary in the context. It should be further understood that the terms "comprise", "include" indicate the presence of the described features, operations, elements, components, items, kinds, and / or groups, but do not exclude the presence, occurrence or addition of one or more other features, operations, elements, components, items, kinds, and / or groups. The terms "or" and "and / or" used herein are interpreted as inclusive, or mean any one or any combination. Therefore, "A, B or C" or "A, B and / or C" means "any of the following: A; B; C; A and B; A and C; B and C; A, B and C". Exceptions to this definition will only occur when the combination of elements, functions or operations is inherently mutually exclusive in some way.

[0050] In order to meet the application needs of intelligent connected vehicles for flexible management of multiple applications on security chips, it is necessary to design and implement a new application implementation and management mechanism that integrates the advantages of the above-mentioned Native COS and Java COS and overcomes their existing defects.

[0051] Therefore, the multi-application implementation and management method of a smart connected car safety chip of the present invention is to establish a secure channel by the management platform when the APDU instruction is input, and after the secure channel is established, the management platform uses the application management and instruction distribution mechanism to judge the input APDU instruction and interact with the data stored in the security chip storage space of the smart connected car safety chip to perform the corresponding APP management operation, so as to realize the implementation and management of multiple applications of the smart connected car safety chip. The present invention is not only highly flexible, but also has independent management of all APP life cycles, and can realize the addition and deletion of APPs at any time; it is also highly secure, establishes a secure channel, and realizes the security management of applications; and has strong independence, and APP development is decoupled from the underlying chip technology, and can also realize multi-party application development and integration.

[0052] At the same time, in order to make the purpose, technical solution and advantages of the present invention more clear, the technical solution in the embodiment of the present invention is further described in detail through the following embodiments and in combination with the accompanying drawings. It should be understood that the specific embodiments described here are only used to explain the present invention and are not used to limit the invention.

[0053] Before further describing the present invention in detail, the nouns and terms involved in the embodiments of the present invention are explained. The nouns and terms involved in the embodiments of the present invention are applicable to the following interpretations:

[0054] <1> APDU (Application Protocol data unit) is an application protocol processing unit, also known as an instruction.

[0055] <2> APP, the APP of the present invention is an application in which a carrier in a security chip is APDU, and the APDU is used alone or in combination and the corresponding functions of the APDU are completed.

[0056] <3> An applet is a small application written in the Java programming language that can be included in an HTML (an application of the standard universal markup language) page, in much the same way as an image is included in a page.

[0057] The following is a detailed description of the embodiments of the present invention with reference to the accompanying drawings so that those skilled in the art can easily implement the present invention. The present invention can be embodied in many different forms and is not limited to the embodiments described herein.

[0058] In order to better describe the multi-application implementation and management method of the smart connected vehicle safety chip, it is necessary to first specifically describe the design of the security chip storage space of the applied smart connected vehicle safety chip, and illustrate it in combination with the following figures and embodiments.

[0059] In one embodiment, the security chip storage space of the smart connected vehicle security chip is divided into a ROM area, an NVM area, and a RAM area.

[0060] The ROM area accounts for a relatively small proportion of the chip cost and is used to store codes that will not be modified during use. In the present invention, in order to reduce the chip cost, all code parts except the APP are stored in the ROM area.

[0061] The NVM area is an area that can be repeatedly erased and written during the use of the chip, and is suitable for storing code and data that need to be modified. Figure 3 In the present invention, the NVM area includes: a management platform data area and the code area and data area of ​​each installed APP, which are used to store the management platform data, the code and data of each APP respectively; it can be seen that the code area and the data area are managed independently in the App information area. Among them, the management platform data area includes: a secure channel key area for storing secret key data, wherein the secure channel key is used to realize the secure channel establishment function; and an APP information area for storing the APP information list.

[0062] RAM area is used to store dynamic data during program operation; RAM area includes stack area and heap area; in order to realize multiple applications, RAM area needs to be planned and divided in advance; among them, Figure 4 As shown, the heap area includes: the heap area of ​​all installed apps and the management platform heap area.

[0063] In a preferred embodiment, Figure 5As shown, the APP information list includes: APP information of all installed APPs; wherein, the APP information is configured by the management platform when the corresponding APP is installed; the APP information includes: APP status information, APP ID, Select entry information, APP space information, code area starting address, code area space size, data area starting address and data area space size.

[0064] Based on the above security chip storage space, the implementation method of multi-application implementation and management method of smart connected vehicle security chip is now explained.

[0065] like Figure 6 A flowchart showing a method for implementing and managing multiple applications of a smart connected vehicle safety chip in an embodiment of the present invention is shown.

[0066] The method comprises:

[0067] Step 1: When the APDU command is input, the management platform establishes a secure channel.

[0068] In one embodiment, the establishing of a secure channel by the management platform includes:

[0069] Based on the secret key data stored in the secure channel key area, the administrator identity of the current security chip operator is identified, and a secure channel is established when the current security chip operator is identified as an administrator to ensure that operations such as adding, deleting, and activating applications are legal and valid. Only after the secure channel is established can APP management operations be performed.

[0070] Step S2: After establishing the security channel, the management platform uses the application management and instruction distribution mechanism to judge the input APDU instructions and interact with the data stored in the security chip storage space of the smart connected vehicle safety chip to perform corresponding APP management operations.

[0071] In detail, the types of APP management operations include: APP installation operation, APP deletion operation and APP activation operation.

[0072] In one embodiment, the application management and instruction distribution mechanism includes:

[0073] When the input APDU instruction is judged as the APP installation type, the corresponding APP installation operation is executed;

[0074] When the input APDU instruction is judged to be an APP deletion type, the corresponding APP deletion operation is executed;

[0075] When the input APDU instruction is judged not to be an APP installation type or an APP deletion type, the corresponding APP activation operation is executed; in detail, when the input APDU instruction is judged not to be an APP installation type or an APP deletion type, the corresponding APP activation operation is executed.

[0076] Specifically, the application management and instruction distribution mechanism is implemented as follows:

[0077] First, determine whether the input APDU instruction is of the APP installation type; if so, execute the corresponding APP installation operation; if not, determine whether the input APDU instruction is of the APP deletion type; if it is the APP deletion type, execute the corresponding APP deletion operation; if it is not the APP deletion type, execute the corresponding APP activation operation.

[0078] In a specific embodiment, if Figure 7 , the APP installation operation includes:

[0079] Based on the configuration information of the APP to be installed corresponding to the APDU instruction, the APP information of the APP is configured in the APP information list in the APP information area; wherein the configuration information includes: APP ID, Select entry address, APP space information, code area storage space information and data area storage space information.

[0080] Download the code and data of the APP to be installed, and store the downloaded data in the correspondingly configured code area and data area of ​​the NVM area and the heap area of ​​the corresponding APP in the RAM area based on the APP information of the APP;

[0081] Set the APP to registered status.

[0082] In a specific embodiment, if Figure 7 , the APP deletion operation includes:

[0083] Determine whether the APDU instruction corresponds to the APP selected for deletion;

[0084] If yes, cancel the registration status of the APP, delete the APP information of the APP in the APP information list in the NVM area, and delete the data in the code area and data area of ​​the APP, and delete the data in the heap area of ​​the corresponding APP in the RAM area;

[0085] If not, the registration status of all APPs is released, and the APP information of all APPs in the APP information list in the NVM area and the data in the code area and data area of ​​all APPs are deleted, and the data in the heap area of ​​all APPs in the RAM area are deleted.

[0086] In one embodiment, the APP activation operation includes:

[0087] Determine whether to set an installed APP as the default APP;

[0088] If yes, activate the default APP and execute the first activation process;

[0089] If not, activate the management platform and execute the first activation process;

[0090] The first activation process includes:

[0091] Determine whether the APDU command corresponds to activating other apps;

[0092] If yes, execute the second activation process;

[0093] If not, the currently activated default APP or management platform is used to process the APDU instruction.

[0094] The second activation process includes:

[0095] Determine whether the APDU instruction corresponds to the activation management platform;

[0096] If so, the management platform will activate the management platform and use the activated management platform to process the APDU instruction.

[0097] If not, the management platform processes other activated APPs corresponding to the activation APDU instruction and uses the currently activated APP to process the APDU instruction.

[0098] Specifically, Figure 8 , the APP activation operation includes:

[0099] Determine whether to set an installed APP as the default APP when powered on;

[0100] If a default APP is set, use the Select command to activate the default APP; then determine whether the APDU command corresponds to activating other APPs; if it corresponds to activating other APPs, determine whether the APDU command corresponds to activating the management platform; if it corresponds to activating the management platform, the management platform will handle the activation of the management platform, and use the activated management platform to process the APDU command; if it does not correspond to activating the management platform, the management platform will use the Select command to activate other APPs corresponding to the APDU command, and use the currently activated APP to process the APDU command; if it does not correspond to activating other APPs, the currently activated default APP will be used to process the APDU command.

[0101] If the default APP is not set, the management platform is activated; then it is determined whether the APDU instruction corresponds to activating other APPs; if it corresponds to activating other APPs, it is determined whether the APDU instruction corresponds to activating the management platform; if it corresponds to activating the management platform, the management platform processes the activation of the management platform, and the activated management platform is used to process the APDU instruction; if it does not correspond to activating other APPs, the currently activated default APP or management platform is used to process the APDU instruction. If it does not correspond to activating the management platform, the management platform uses the Select instruction to activate other APPs corresponding to the APDU instruction, and the currently activated APP is used to process the APDU instruction; if it does not correspond to activating other APPs, the currently activated management platform is used to process the APDU instruction.

[0102] In one embodiment, the management platform relies on the independent management mechanism of the code area and the data area implemented in the APP information area, so that the App code function can be upgraded separately on the basis of retaining the APP data.

[0103] In order to better illustrate the installation of the APP and the way the APP processes APDU instructions, the design and development of the APP is first explained in conjunction with a specific embodiment.

[0104] In one embodiment, the APP of the present invention is developed using C language, and the development and debugging environment is the IDE corresponding to the chip platform. The structure of the APP of the present invention is as follows Fig. 9 As shown, it is composed of a code area and a data area. The data in the code area and the data in the data area will be stored in the code area and the data area of ​​the APP in the NVM area respectively after installation.

[0105] The APP needs to establish an application instruction table in the code area according to the preset structure to indicate all supported APDU instructions. Fig.10 , the application instruction table must contain the APDU instruction code and instruction entry of the supported APDU instructions, and its starting address is configured as the entry where the application is selected.

[0106] Based on the above APP design, the process of each APP processing APDU instructions includes:

[0107] Based on the APDU instruction indicator code of the APDU instruction, the APDU instruction code entry corresponding to the APDU instruction is searched in the application instruction table of the corresponding APP, and data for executing the APDU instruction is obtained through the APDU instruction code entry.

[0108] In one embodiment, the data required for the development of the APP are configuration files, basic function libraries, chip algorithm libraries, and driver libraries; wherein the configuration files are feedback from the management platform, and the information contained mainly includes the available storage space (NVM area and RAM area) of the APP, the definition of the attribute structure of the application instruction table, etc.;

[0109] The basic function library in the intelligent connected vehicle safety chip defines and implements the basic functions provided by the management platform, such as file structure, transaction mechanism, etc. The chip algorithm library and driver library in the intelligent connected vehicle safety chip are chip hardware-related functions for use in APP development.

[0110] APP development methods include:

[0111] Based on the configuration file sent by the management platform, configure the storage space information of the APP; wherein the storage space information includes: code area storage space information, data area storage space information and RAM storage space information;

[0112] Designing an application instruction table of the APP based on the instruction table attribute structure definition of the configuration file;

[0113] Use the basic function library to set the achievable APDU functions of the APP;

[0114] Using the chip algorithm library and driver library, based on the APP's storage space information, application instruction table and APDU function, compile the APP's binary code and output the APP's binary code and APP configuration information;

[0115] The binary code of the APP is the code and preset data that can be installed on the chip; the App configuration information includes: APP ID, Select entry address, APP space information, code area storage space information, and data area storage space information. During the APP installation process, the information contained in the configuration information will be submitted to the management platform.

[0116] Similar to the principles of the above embodiments, the present invention provides a multi-application implementation and management system for a smart connected vehicle safety chip.

[0117] The following provides specific embodiments in conjunction with the accompanying drawings:

[0118] like Fig.11 A structural schematic diagram showing a multi-application implementation and management system of a smart connected vehicle safety chip in an embodiment of the present invention.

[0119] The system comprises:

[0120] Communication module 1, used for receiving input APDU instructions;

[0121] The management platform 2 is communicatively connected with the communication module 1, and is used to establish a secure channel when an APDU instruction is input; after the secure channel is established, the input APDU instruction is judged and the data stored in the security chip storage space of the smart connected vehicle safety chip is interacted with to perform corresponding APP management operations; wherein the types of the APP management operations include: APP installation operation, APP deletion operation and APP activation operation.

[0122] In one embodiment, the security chip storage space includes: a ROM area, which is used to store all code parts except the APP; an NVM area, including: a management platform data area and a code area for storing APP codes and a data area for storing APP data for all installed APPs; wherein the management platform data area includes: a secure channel key area for storing secret key data and an APP information area for storing an APP information list; a RAM area, including: a stack area and a heap area; wherein the heap area includes: heap areas of all installed APPs and a management platform heap area.

[0123] In one embodiment, the APP information list includes: APP information of all installed APPs; wherein, the APP information is configured by the management platform when the corresponding APP is installed; the APP information includes: APP status information, APPID, Select entry information, APP space information, code area starting address, code area space size, data area starting address and data area space size.

[0124] In one embodiment, establishing the secure channel includes: authenticating the administrator identity of the current security chip operator based on the secret key data stored in the secure channel key area, and establishing the secure channel when the current security chip operator is authenticated as the administrator identity.

[0125] In one embodiment, the input APDU instruction is judged and the data stored in the security chip storage space of the smart connected vehicle safety chip is interacted to execute the corresponding APP management operation, including: when the input APDU instruction is judged to be an APP installation type, the corresponding APP installation operation is executed; when the input APDU instruction is judged to be an APP deletion type, the corresponding APP deletion operation is executed; when the input APDU instruction is judged to be neither an APP installation type nor an APP deletion type, the corresponding APP activation operation is executed.

[0126] In one embodiment, the APP installation operation includes: configuring the APP information of the APP in the APP information list in the APP information area based on the configuration information of the APP to be installed corresponding to the APDU instruction; downloading the code and data of the APP to be installed, and storing the downloaded data in the corresponding configured code area and data area of ​​the NVM area and the heap area of ​​the corresponding APP in the RAM area based on the APP information of the APP; setting the APP to a registered state.

[0127] In one embodiment, the APP deletion operation includes: determining whether the APDU instruction corresponds to an APP selected for deletion; if so, canceling the registration status of the APP, deleting the APP information of the APP in the APP information list in the NVM area, as well as the code area and data area of ​​the APP, and deleting the heap area of ​​the corresponding APP in the RAM area; if not, canceling the registration status of all APPs, deleting the APP information of all APPs in the APP information list in the NVM area, as well as the code area and data area of ​​all APPs, and deleting the heap area of ​​all APPs in the RAM area.

[0128] In one embodiment, the APP activation operation includes: determining whether an installed APP is set as the default APP; if so, activating the default APP and executing the first activation process; if not, activating the management platform and executing the first activation process; wherein the first activation process includes: determining whether the APDU instruction corresponds to activating other APPs; if so, executing the second activation process; if not, using the currently activated default APP or management platform to process the APDU instruction. The second activation process includes: determining whether the APDU instruction corresponds to activating the management platform; if so, the management platform processes the activation of the management platform, and uses the activated management platform to process the APDU instruction. If not, the management platform processes the activation of other APPs corresponding to the APDU instruction, and uses the currently activated APP to process the APDU instruction.

[0129] In one embodiment, if Fig.12 As shown, the system also has a basic function library, a chip algorithm library and a driver library, which are used for the secure channel mechanism to establish a secure channel and data calls for APP development.

[0130] In one embodiment, the APP code area of ​​each installed APP respectively stores an established application instruction table, including: APDU instruction codes of all supported APDU instructions and APDU instruction code entries; wherein, the process of APP processing APDU instructions includes: based on the APDU instruction indicator code of the APDU instruction, searching for the APDU instruction entry of the corresponding APDU instruction in the application instruction table of the corresponding APP, and obtaining data for executing the APDU instruction through the APDU instruction code entry.

[0131] In one embodiment, each APP is developed using C language, and its development method includes: configuring the storage space information of the APP based on the configuration file sent by the management platform; wherein the storage space information includes: code area storage space information, data area storage space information and RAM storage space information; designing the application instruction table of the APP based on the instruction table attribute structure definition of the configuration file; setting the APP's achievable APDU function; based on the APP's storage space information, application instruction table and APDU function, compiling the APP's binary code, and outputting the APP's binary code and APP configuration information; wherein the APP configuration information includes: APP ID, Select entry address, APP space information, code area storage space information and data area storage space information.

[0132] like Fig.13 A schematic diagram showing the structure of a multi-application implementation and management terminal of a smart connected vehicle safety chip in an embodiment of the present invention.

[0133] The multi-application implementation and management terminal 130 of the intelligent networked vehicle safety chip includes: a memory 131 and a processor 132. The memory 131 is used to store computer programs; the processor 132 runs the computer program to implement Figure 6 The multi-application implementation and management method of the intelligent connected vehicle safety chip.

[0134] Optionally, the number of the memory 131 can be one or more, the number of the processor 132 can be one or more, and Fig.13 Take one as an example.

[0135] Optionally, the processor 132 in the multi-application implementation and management terminal 130 of the intelligent networked vehicle safety chip will be as follows: Figure 6 In the above steps, one or more instructions corresponding to the process of the application are loaded into the memory 131, and the processor 132 runs the application stored in the first memory 131, thereby achieving the following Figure 6 Various functions in the multi-application implementation and management method of the intelligent connected vehicle safety chip.

[0136] Optionally, the memory 131 may include but is not limited to high-speed random access memory and non-volatile memory. For example, one or more disk storage devices, flash memory devices or other non-volatile solid-state storage devices; the processor 132 may include but is not limited to a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0137] Optionally, the processor 132 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0138] The present invention also provides a computer-readable storage medium storing a computer program, wherein the computer program is executed as follows: Figure 6 The multi-application implementation and management method of the intelligent networked vehicle safety chip shown. The computer-readable storage medium may include, but is not limited to, a floppy disk, an optical disk, a CD-ROM (read-only optical disk memory), a magneto-optical disk, a ROM (read-only memory), a RAM (random access memory), an EPROM (erasable programmable read-only memory), an EEPROM (electrically erasable programmable read-only memory), a magnetic card or an optical card, a flash memory, or other types of media / machine-readable media suitable for storing machine-executable instructions. The computer-readable storage medium may be a product that is not connected to a computer device, or a component that is connected to a computer device for use.

[0139] As can be seen from the above, the advantages of the present invention are:

[0140] 1. High flexibility, all APP life cycles are managed independently, and APPs can be added and deleted at any time;

[0141] 2. Excellent performance. The APP is written in C language, with small code size, excellent performance and strong portability;

[0142] 3. High security, introducing a secure channel mechanism to achieve secure management of applications;

[0143] 4. Strong independence, APP development is decoupled from the underlying chip technology, and multi-party application development and integration can be achieved.

[0144] 5. Strong usability, supports retaining APP data and changing APP code area separately.

[0145] In summary, the multi-application implementation and management method, system and terminal of the intelligent networked automobile safety chip of the present invention, when the APDU instruction is input, the management platform establishes a security channel, and after the security channel is established, the management platform uses the application management and instruction distribution mechanism to judge the input APDU instruction and interact with the data stored in the security chip storage space of the intelligent networked automobile safety chip, so as to perform the corresponding APP management operation, thereby realizing the implementation and management of multiple applications of the intelligent networked automobile safety chip. The present invention is not only highly flexible, but also has independent management of all APP life cycles, and can realize the addition and deletion of APPs at any time; it is also highly secure, and introduces a security channel mechanism to realize the security management of applications; and it is highly independent, and APP development is decoupled from the underlying chip technology, and multi-party application development and integration can be realized. Therefore, the present invention effectively overcomes the various shortcomings of the prior art and has a high industrial utilization value.

[0146] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the technology may modify or change the above embodiments without violating the spirit and scope of the present invention. Therefore, all equivalent modifications or changes made by a person of ordinary skill in the art without departing from the spirit and technical ideas disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A multi-application implementation and management method for a smart connected vehicle safety chip, characterized in that: The method comprises: When the APDU command is input, the management platform establishes a secure channel; After establishing the security channel, the management platform uses the application management and instruction distribution mechanism to judge the input APDU instructions and interact with the data stored in the security chip storage space of the smart connected vehicle safety chip to perform corresponding APP management operations; among which, the types of APP management operations include: APP installation operation, APP deletion operation and APP activation operation.

2. The multi-application implementation and management method of the intelligent networked vehicle safety chip according to claim 1 is characterized in that: The security chip storage space includes: ROM area, used to store all code parts except APP; The NVM area includes: a management platform data area and a code area for storing APP codes and a data area for storing APP data for all installed APPs; wherein the management platform data area includes: a secure channel key area for storing secret key data and an APP information area for storing an APP information list; The RAM area includes: the stack area and the heap area; the heap area includes: the heap area of ​​all installed apps and the management platform heap area.

3. The multi-application implementation and management method of the intelligent networked vehicle safety chip according to claim 2 is characterized in that: The APP information list includes: APP information of all installed APPs; wherein, the APP information is configured by the management platform when the corresponding APP is installed; the APP information includes: APP status information, APP ID, Select entry information, APP space information, code area starting address, code area space size, data area starting address and data area space size.

4. The multi-application implementation and management method of the intelligent networked vehicle safety chip according to claim 2 is characterized in that: The establishment of a secure channel by the management platform includes: Based on the secret key data stored in the security channel key area, the administrator identity of the current security chip operator is authenticated, and a security channel is established when the current security chip operator is authenticated as the administrator.

5. The method for realizing and managing multiple applications of a security chip for an intelligent networked vehicle according to claim 3, characterized in that: Application management and instruction distribution mechanisms include: When the input APDU instruction is judged as the APP installation type, the corresponding APP installation operation is executed; When the input APDU instruction is judged as the APP deletion type, the corresponding APP deletion operation is executed; When the input APDU instruction is judged not to be an APP installation type or an APP deletion type, the corresponding APP activation operation is performed.

6. The method for realizing and managing multiple applications of a security chip for an intelligent networked vehicle according to claim 5, characterized in that: The APP installation operation includes: Based on the configuration information of the APP to be installed corresponding to the APDU instruction, configure the APP information of the APP in the APP information list in the APP information area; Download the code and data of the APP to be installed, and store the downloaded data in the correspondingly configured code area and data area of ​​the NVM area and the heap area of ​​the corresponding APP in the RAM area based on the APP information of the APP; Set the APP to registered status.

7. The method for realizing and managing multiple applications of a security chip for an intelligent networked vehicle according to claim 5, characterized in that: The APP deletion operation includes: Determine whether the APDU instruction corresponds to an APP selected for deletion; If yes, cancel the registration status of the APP, delete the APP information of the APP in the APP information list in the NVM area, the code area and the data area of ​​the APP, and delete the heap area of ​​the corresponding APP in the RAM area; If not, the registration status of all APPs is released, and the APP information of all APPs in the APP information list in the NVM area and the code area and data area of ​​all APPs are deleted, and the heap area of ​​all APPs in the RAM area is deleted.

8. The method for realizing and managing multiple applications of a security chip for an intelligent networked vehicle according to claim 5, characterized in that: The APP activation operation includes: Determine whether to set an installed APP as the default APP; If yes, activate the default APP and execute the first activation process; If not, activate the management platform and execute the first activation process; The first activation process includes: Determine whether the APDU command corresponds to activating other apps; If yes, execute the second activation process; If not, the currently activated default APP or management platform is used to process the APDU command; The second activation process includes: Determine whether the APDU instruction corresponds to the activation management platform; If so, the management platform will activate the management platform and use the activated management platform to process the APDU instruction. If not, the management platform processes other activated APPs corresponding to the activation APDU instruction and uses the currently activated APP to process the APDU instruction.

9. The method for realizing and managing multiple applications of a security chip for an intelligent networked vehicle according to claim 8, characterized in that: The APP code area of ​​each installed APP stores the established application instruction table, including: APDU instruction codes of all supported APDU instructions and APDU instruction code entries; Among them, the process of APP processing APDU instructions includes: Based on the APDU instruction indicator code of the APDU instruction, the APDU instruction code entry corresponding to the APDU instruction is searched in the application instruction table of the corresponding APP, and data for executing the APDU instruction is obtained through the APDU instruction code entry.

10. A multi-application implementation and management system for a smart connected vehicle safety chip, characterized in that: The system comprises: Communication module, used to receive input APDU instructions; The management platform is communicatively connected with the communication module and is used to establish a secure channel when an APDU instruction is input; after the secure channel is established, the input APDU instruction is judged and the data stored in the security chip storage space of the smart connected vehicle safety chip is interacted with to perform corresponding APP management operations; wherein the types of the APP management operations include: APP installation operation, APP deletion operation and APP activation operation.

11. A multi-application implementation and management terminal for a smart connected vehicle safety chip, characterized in that: include: Memory and processor; The memory is used to store computer programs; The processor, connected to the memory, is configured to run the computer program to perform the method according to claims 1 to 9.

Images