Vehicle upgrade data packet test method and device, electronic equipment and storage medium

Abstract

The invention discloses a test method and device for a vehicle upgrade data packet, electronic equipment and a storage medium. The method comprises the steps that in response to a received test instruction of a vehicle upgrading data packet, data upgrading is carried out on a first vehicle based on a target upgrading packet, a first upgrading result of the first vehicle is determined, and the target upgrading packet is a data packet obtained after data tampering is carried out on an original upgrading packet generated by a cloud end; the original upgrade package is used for performing data upgrade on the first vehicle, and the first upgrade result is used for representing whether data upgrade of the first vehicle succeeds or not; based on the first upgrading result, a data tampering result is determined, and the data tampering result is used for representing whether data tampering on the original upgrading package succeeds or not; and determining a security test result of the original upgrade package based on the data tampering result. According to the method and the device, the technical problem of relatively low accuracy of testing the vehicle upgrading data packet in related technologies is solved.

Description

Technical Field

[0001] The present invention relates to the fields of vehicle technology and data security, and in particular to a method, device, electronic device and storage medium for testing a vehicle upgrade data packet. Background Art

[0002] With the increasing popularity of intelligent connected vehicles, over-the-air (OTA) vehicle upgrades have become an important means of updating in-vehicle systems. However, in practice, upgrade data packets may be vulnerable to cyberattacks, resulting in tampering with their contents, thus affecting the safety and stability of vehicle functions. Furthermore, with the increasing complexity of intelligent vehicle software and the diversification of network environments, the security and effectiveness of upgrade data packets are increasingly challenged by evolving attack vectors.

[0003] Before sending an upgrade data package to a user's vehicle, the manufacturer usually needs to conduct a security test on the upgrade data package to be sent. Current security testing methods for upgrade data packages have limitations. For example, they usually only verify whether the vehicle identification code and configuration information before and after the upgrade are consistent in form. In addition, current testing methods are usually performed in a pure development and testing environment, which is quite different from the actual application environment of the upgrade data package. As a result, the accuracy of testing vehicle upgrade data packages in related technologies is relatively low.

[0004] To address the above-mentioned problems, no effective solutions have been proposed so far. Summary of the Invention

[0005] Embodiments of the present invention provide a method, device, electronic device, and storage medium for testing a vehicle upgrade data package, to at least solve the technical problem of low accuracy in testing a vehicle upgrade data package in the related art.

[0006] According to one aspect of an embodiment of the present invention, a method for testing a vehicle upgrade data packet is provided, the method comprising: in response to receiving a test instruction of a vehicle upgrade data packet, performing a data upgrade on a first vehicle based on a target upgrade package, and determining a first upgrade result for the first vehicle, wherein the target upgrade package is a data packet obtained by tampering with the data of an original upgrade package generated in the cloud, the original upgrade package is used to perform a data upgrade on the first vehicle, and the first upgrade result is used to characterize whether the data upgrade of the first vehicle is successful; based on the first upgrade result, determining a data tampering result, wherein the data tampering result is used to characterize whether the data tampering of the original upgrade package is successful; and based on the data tampering result, determining a security test result of the original upgrade package.

[0007] In an embodiment of the present invention, the target upgrade package is a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process of transmitting the original upgrade package to the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the first vehicle during the upgrade process of upgrading the data of the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process and tampering with the received upgrade package by the first vehicle during the upgrade process.

[0008] In an embodiment of the present invention, data tampering of the original upgrade package includes: data tampering of upgrade configuration information related to the first vehicle in the original upgrade package, wherein the upgrade configuration information includes at least one of the following: a vehicle identification code of the first vehicle and configuration information of an upgrade controller in the first vehicle, and the upgrade controller is used to monitor the data upgrade process of the first vehicle.

[0009] In an embodiment of the present invention, based on the first upgrade result, the data tampering result is determined, including: when the first upgrade result is that the data upgrade of the first vehicle is successful, determining the data tampering result is that the data tampering of the original upgrade package is unsuccessful; when the first upgrade result is that the data upgrade of the first vehicle is unsuccessful, determining the data tampering result is that the data tampering of the original upgrade package is successful.

[0010] In an embodiment of the present invention, based on the data tampering result, the security test result of the original upgrade package is determined, including: when the data tampering result is that the data tampering of the original upgrade package is unsuccessful, determining the security test result is that the security of the original upgrade package reaches a preset security level; when the data tampering result is that the data tampering of the original upgrade package is successful, determining the security test result is that the security of the original upgrade package does not reach the preset security level.

[0011] In an embodiment of the present invention, the method further includes: performing vehicle data upgrade on at least one second vehicle based on the target upgrade package to obtain at least one second upgrade result, wherein at least one of the plurality of second vehicles is used to represent at least one vehicle of a different vehicle type from the first vehicle; and determining a data tampering result based on the first upgrade result and at least one second upgrade result.

[0012] In an embodiment of the present invention, the method further includes: when the security test result shows that the security of the original upgrade package reaches a preset security level, the original upgrade package is sent to the user vehicle, and the vehicle data of the user vehicle is upgraded based on the original upgrade package.

[0013] In an embodiment of the present invention, the method also includes: when the security test result shows that the security of the original upgrade package does not reach a preset security level, sending an algorithm adjustment instruction to the cloud, wherein the algorithm adjustment instruction is used to adjust the encryption algorithm of the original upgrade package; testing the new upgrade package based on the first vehicle and / or at least one second vehicle to obtain a new data tampering result, wherein the new upgrade package is a data packet obtained by encrypting the original upgrade package based on the adjusted encryption algorithm.

[0014] According to another aspect of an embodiment of the present invention, a testing device for a vehicle upgrade data packet is also provided, which includes: a first determination module for performing a data upgrade on a first vehicle based on a target upgrade package in response to a test instruction received from a vehicle upgrade data packet, and determining a first upgrade result of the first vehicle, wherein the target upgrade package is a data packet obtained after data tampering with an original upgrade package generated in the cloud, the original upgrade package is used to perform a data upgrade on the first vehicle, and the first upgrade result is used to characterize whether the data upgrade of the first vehicle is successful; a second determination module for determining a data tampering result based on the first upgrade result, wherein the data tampering result is used to characterize whether the data tampering of the original upgrade package is successful; and a third determination module for determining a security test result of the original upgrade package based on the data tampering result.

[0015] According to another aspect of an embodiment of the present invention, an electronic device is provided, including: a memory storing an executable program; and a processor for running the program, wherein the program executes the methods of various embodiments of the present invention when running.

[0016] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided. The computer-readable storage medium includes a stored executable program, wherein when the executable program is running, the device where the computer-readable storage medium is located is controlled to execute the methods in various embodiments of the present invention.

[0017] According to another aspect of an embodiment of the present invention, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0018] According to another aspect of an embodiment of the present invention, a computer program product is provided, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0019] According to another aspect of the embodiments of the present invention, a computer program is provided. When the computer program is executed by a processor, the methods in various embodiments of the present invention are implemented.

[0020] In an embodiment of the present invention, in response to receiving a test instruction of a vehicle upgrade data packet, data of a first vehicle is upgraded based on a target upgrade package, and a first upgrade result of the first vehicle is determined. The target upgrade package is a data packet obtained after data tampering with an original upgrade package generated in the cloud. The original upgrade package is used to perform data upgrade on the first vehicle, and the first upgrade result is used to characterize whether the data upgrade of the first vehicle is successful; then, based on the first upgrade result, the data tampering result is determined, and the data tampering result is used to characterize whether the data tampering of the original upgrade package is successful; finally, the security test result of the original upgrade package can be determined based on the data tampering result. It is easy to notice that this application selects the first vehicle, that is, the original upgrade package is tested for tamper resistance through an actual vehicle, which can simulate the data tampering situation that the user vehicle may encounter when performing data upgrade based on the upgrade data packet sent by the cloud in the actual application scenario. By actively tampering with the original upgrade package and determining the data tampering result of the original upgrade package based on the vehicle upgrade result of the first vehicle, and then determining the security test result of the original upgrade package, the tamper resistance security performance of the original upgrade package is reflected based on the actual upgrade status of the actual vehicle, that is, whether the security mechanism of the original upgrade package can effectively resist data tampering. This testing process can be closer to the actual application status of the original upgrade package, improves the reliability and accuracy of the test, and the obtained security test results of the original upgrade package are more targeted and instructive, which helps manufacturers to quickly iterate the security mechanism of the original upgrade package, thereby solving the technical problem of low accuracy in testing vehicle upgrade data packets in related technologies. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0022] Figure 1 is a flow chart of a method for testing a vehicle upgrade data package according to an embodiment of the present invention;

[0023] Figure 2 is a schematic diagram of an optional vehicle upgrade data package testing process according to an embodiment of the present invention;

[0024] Figure 3 2 is a schematic diagram of a vehicle upgrade data package testing device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0026] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] According to one aspect of an embodiment of the present invention, a method for testing a vehicle upgrade data package is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0028] Figure 1 FIG. 1 is a flow chart of a method for testing a vehicle upgrade data package according to an embodiment of the present invention. Figure 1 As shown, the method includes the following steps:

[0029] Step S102 , in response to receiving a test instruction of a vehicle upgrade data packet, performing data upgrade on a first vehicle based on a target upgrade package, and determining a first upgrade result of the first vehicle.

[0030] Among them, the target upgrade package is a data packet obtained after data tampering with the original upgrade package generated in the cloud. The original upgrade package is used to upgrade the data of the first vehicle, and the first upgrade result is used to indicate whether the data upgrade of the first vehicle is successful.

[0031] The aforementioned test instructions may refer to instructions or commands issued by a tester or a test system, and may be used to initiate the testing process for a vehicle upgrade data package. The test instructions may include specific information, such as the test time, the required test environment, the specific vehicle model or identification to be tested, and the type of test, such as whether to conduct a malicious tampering test for the vehicle identification code and configuration information. In actual applications, test instructions may be sent via the test system or triggered directly on a cloud-based test platform. For example, when a tester determines that a security test is required for a developed upgrade data package, they may create a test case in the test management software, specify the test vehicle and test method, and then send this test instruction to the cloud.

[0032] The aforementioned first vehicle may refer to a specific vehicle selected for testing. During the testing process, the first vehicle may receive upgrade data packets sent from the cloud and perform subsequent upgrades. The selection of the first vehicle may be based on various factors, including vehicle type, controller configuration, and upgrade history. For example, in the early stages of the testing process, a vehicle with basic configuration may be selected as the first vehicle for preliminary functionality and safety testing.

[0033] The cloud can refer to a server cluster or data center that provides data packet transmission services, responsible for storing and distributing vehicle upgrade data packets. The cloud can handle large amounts of data transmission while ensuring data security and integrity. In specific application scenarios, the cloud can manage and control the generation, encryption, storage, and distribution of upgrade data packets, and can also monitor various test operations during the upgrade process, such as data tampering attempts.

[0034] The aforementioned original upgrade package may refer to a vehicle upgrade data package that undergoes security testing before being actually distributed to the user's vehicle. The original upgrade package may contain all information required for the upgrade, including the new software version, key configuration changes, and vehicle identification code verification information. The original upgrade package may be encrypted during transmission. To test the security of the original upgrade package, the cloud may generate an upgrade package containing the vehicle identification code and controller configuration information of a specific first vehicle. The original upgrade package may be tested for malicious tampering by testers to assess its ability to withstand attacks. The specific size of the original upgrade package may be determined based on actual needs and is not limited here.

[0035] The above-mentioned target upgrade package may refer to an upgrade data packet obtained by actively tampering with the original upgrade package during the test process of this application. Due to the anti-tampering capabilities of different original upgrade packages and the different methods of data tampering, the process of manually tampering with the original upgrade package may be successful or unsuccessful, that is, the target upgrade package may be different from the original upgrade package due to successful data tampering, and the target upgrade package may be the same as the original upgrade package due to unsuccessful data tampering, which is not limited here; the timing of manually tampering with the original upgrade package can also be determined according to actual needs, such as during the process of transmitting the original upgrade package to the first vehicle, or after the first vehicle receives the original upgrade package, in the process of upgrading the first vehicle based on the original upgrade package, or the original upgrade package may be tampered with in multiple stages, which is not limited here.

[0036] Data tampering, as described above, can involve a tester altering data within the original upgrade package to simulate a malicious attack or security threat environment. This can include modifying the vehicle identification number, controller configuration information, or other critical data fields within the upgrade package. Within a test environment, data tampering can be performed automatically by the tester or the test system, using specialized tools, or manually modifying the data package. This is not limited here.

[0037] The first upgrade result mentioned above may refer to upgrade result information of the first vehicle after the upgrade operation is performed on the first vehicle based on the target upgrade package, and may be whether the vehicle data upgrade of the first vehicle is successful.

[0038] In an optional embodiment, in response to a test instruction issued by a tester or professional testing software or platform, the test instruction may include detailed requirements for the upgrade test, including the version of the original upgrade package, the specific vehicle being tested, and the purpose of the test, for example, verifying the original upgrade package's ability to resist data tampering. Based on the content of the test instruction, a first vehicle that meets the test requirements can be selected. The first vehicle can be a vehicle with specific configurations, such as a specific hardware version, operating system version, and installed software version, so that the test can be conducted against pre-set functional and safety standards. The first vehicle can also perform a series of preparatory tasks before the test, including ensuring the proper functioning of the vehicle communication module, connecting the vehicle to the cloud-based test network environment, and installing the required test software or applications. The cloud can then generate a corresponding upgrade data package (i.e., the original upgrade package) based on the characteristics of the first vehicle, such as the vehicle identification number and controller hardware version. The process of generating the original upgrade package may include designing the data package, filling in content (such as new software or updated configuration files), encryption, and integrity verification. During the test, the original upgrade package can be manually tampered with to obtain a target upgrade package. The timing of manual data tampering can be determined based on actual needs.

[0039] That is, data tampering with the original upgrade package during the test process can be considered a vehicle data upgrade of the first vehicle based on the target upgrade package. During the various stages of the first vehicle data upgrade, for example, during the transmission of the upgrade data packet between the cloud and the first vehicle, or during the first vehicle's upgrade based on the original upgrade package, the tester can tamper with the target upgrade package. Data tampering can target the vehicle identification number, controller configuration information, or other key data fields. For example, the vehicle identification number can be modified to be inconsistent with the actual vehicle information, or the controller configuration can be changed to simulate software incompatibility. The tampering operation can be performed using a dedicated testing tool to ensure that the tampering is controllable, thereby enabling precise testing of the original upgrade package's behavior under specific conditions. The data tampering process can be successful, meaning the original upgrade package has been tampered with, or unsuccessful, meaning the original upgrade package has not been tampered with. During the first vehicle's data upgrade based on the target upgrade package, changes in the first vehicle's vehicle status and the progress of the upgrade process can be closely monitored, and various upgrade activities can be recorded, including but not limited to the upgrade start and end times, and any anomalies detected during the upgrade process. After the data upgrade process is completed, the results of the vehicle upgrade can be automatically or manually verified to obtain a first upgrade result, which may include successful vehicle data upgrade and unsuccessful vehicle data upgrade. For example, if the vehicle data upgrade fails to complete, or the vehicle data status after completion does not meet expectations, it can be determined that the data upgrade has failed.

[0040] During the above process, selecting the first vehicle for testing allows for the utilization of the first vehicle's specific hardware and software configuration. This allows for personalized testing tailored to the specific vehicle model and configuration, ensuring that the testing process for the original upgrade package is more aligned with actual usage scenarios, thereby improving testing efficiency and accuracy. By performing data tampering testing on the original upgrade package, it is possible to assess its performance in the face of data tampering and its ability to withstand attacks. This will facilitate subsequent targeted improvements to the original upgrade package's security and reduce vehicle failures or safety risks caused by tampering with the upgrade data packet.

[0041] Step S104: determining a data tampering result based on the first upgrade result.

[0042] The data tampering result is used to indicate whether the data tampering of the original upgrade package is successful.

[0043] The above-mentioned data tampering result may refer to whether the data tampering of the original upgrade package is successful. Since the anti-tampering capabilities of different original upgrade packages and the methods of data tampering may be different, the data tampering result may represent whether the process of human tampering with the original upgrade package may be successful or unsuccessful.

[0044] In an optional embodiment, the result of data tampering of the original upgrade package can be determined based on the actual vehicle upgrade result of the first vehicle, that is, the first upgrade result. Specifically, if the data upgrade of the first vehicle is unsuccessful, that is, the original upgrade package cannot be effectively prevented from being tampered with, the result of data tampering can be determined as successful data tampering of the original upgrade package; if the data upgrade of the vehicle is successful, that is, the original data upgrade package can be effectively prevented from being tampered with during the upgrade process, the result of data tampering can be determined as unsuccessful data tampering of the original upgrade package.

[0045] In the above process, by performing a tampering test on the original upgrade package during the test, the first upgrade result of the first vehicle can intuitively determine whether the data tampering of the original upgrade package is successful, and can determine whether the original upgrade package can be transmitted and applied intact, thereby verifying the functional integrity of the original upgrade package in the case of data tampering.

[0046] Step S106: Determine the security test result of the original upgrade package based on the data tampering result.

[0047] The aforementioned security test results may refer to the evaluation conclusions drawn after testing the original upgrade package. The security test results can reflect the original upgrade package's performance in the face of data tampering and its ability to resist attacks. For example, the manufacturer can perform security testing on the original upgrade package to be distributed to user vehicles. Original upgrade packages that pass the security test can be distributed to user vehicles. Original upgrade packages that fail the security test can be adjusted to pass the security test before being distributed to user vehicles. This ensures that the original upgrade package has strong resistance to data tampering in actual use.

[0048] In an optional embodiment, the security test result of the original upgrade package can be determined based on the data tampering result of the original upgrade package. If the data tampering result indicates that the original upgrade package was successfully tampered with, that is, the original upgrade package failed to effectively prevent data tampering, then it can be determined that the security test result indicates that the anti-tampering performance of the original upgrade package does not meet the required requirements. In this case, the original upgrade package can be improved or adjusted, such as adjusting the encryption algorithm of the original upgrade package. If the data tampering result indicates that the original upgrade package was not successfully tampered with, that is, the original upgrade package can effectively prevent tampering during the upgrade process, it can be determined that the original upgrade package has good anti-tampering capabilities and can be safely distributed to the actual user vehicle to perform vehicle data upgrade on the user vehicle.

[0049] During the above process, by performing a tamper test on the original upgrade package during the first vehicle data upgrade, the security performance of the original upgrade package can be effectively evaluated, ensuring that the original upgrade package can protect data information from security threats when faced with actual data tampering in a real environment. The data tampering results can be used to determine whether the original upgrade package can be transmitted and applied intact, and verify the functional integrity of the original upgrade package in the presence of tampering. The resulting security test results can guide the direction of subsequent security technology improvements to the upgrade data package. For example, if the test reveals that the security of the original upgrade package does not meet the required security requirements, the encryption algorithm and upgrade verification mechanism of the original upgrade package can be improved or adjusted accordingly to enhance the security protection level of the original upgrade package.

[0050] In an embodiment of the present invention, in response to receiving a test instruction of a vehicle upgrade data packet, data of a first vehicle is upgraded based on a target upgrade package, and a first upgrade result of the first vehicle is determined. The target upgrade package is a data packet obtained after data tampering with an original upgrade package generated in the cloud. The original upgrade package is used to perform data upgrade on the first vehicle, and the first upgrade result is used to characterize whether the data upgrade of the first vehicle is successful; then, based on the first upgrade result, the data tampering result is determined, and the data tampering result is used to characterize whether the data tampering of the original upgrade package is successful; finally, the security test result of the original upgrade package can be determined based on the data tampering result. It is easy to notice that this application selects the first vehicle, that is, the original upgrade package is tested for tamper resistance through an actual vehicle, which can simulate the data tampering situation that the user vehicle may encounter when performing data upgrade based on the upgrade data packet sent by the cloud in the actual application scenario. By actively tampering with the original upgrade package and determining the data tampering result of the original upgrade package based on the vehicle upgrade result of the first vehicle, and then determining the security test result of the original upgrade package, the tamper resistance security performance of the original upgrade package is reflected based on the actual upgrade status of the actual vehicle, that is, whether the security mechanism of the original upgrade package can effectively resist data tampering. This testing process can be closer to the actual application status of the original upgrade package, improves the reliability and accuracy of the test, and the obtained security test results of the original upgrade package are more targeted and instructive, which helps manufacturers to quickly iterate the security mechanism of the original upgrade package, thereby solving the technical problem of low accuracy in testing vehicle upgrade data packets in related technologies.

[0051] In an embodiment of the present invention, the target upgrade package is a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process of transmitting the original upgrade package to the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the first vehicle during the upgrade process of upgrading the data of the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process and tampering with the received upgrade package by the first vehicle during the upgrade process.

[0052] In an optional embodiment, data tampering can be performed while the target upgrade package is being transmitted from the cloud to the first vehicle. Specific implementation steps may include designing the specific tampering content based on the test objectives, such as modifying a field in the vehicle identification code or controller configuration information. The tampering operation can be controlled within a test environment to ensure predictable test results. Actual network transmission environments can be simulated, including but not limited to normal networks, low-bandwidth networks, high-latency networks, or intermittent networks, to test the security and integrity of data packets under different network conditions. While the original upgrade package is being transmitted to the first vehicle, data tampering can be performed using a testing tool or platform, such as replacing certain key information in the original upgrade package or inserting forged data. After receiving the tampered upgrade package, i.e., the target upgrade package, the first vehicle can perform a vehicle data upgrade based on the target upgrade package. Performing data tampering while the original upgrade package is being transmitted from the cloud to the first vehicle can test the upgrade package's resistance to network attacks during transmission and verify its integrity and ability to remain untampered before reaching the vehicle.

[0053] In another optional embodiment, after the first vehicle receives the original upgrade package, the original upgrade package can be tampered with during the process of the original upgrade package performing a data upgrade on the first vehicle. The specific implementation may include: pre-upgrade preparation, which can confirm the software version, hardware status, and network connection status of the first vehicle to ensure that the upgrade environment is consistent with expectations; when the first vehicle begins to execute the upgrade instructions based on the original upgrade package, data tampering can be performed in real time, which may be tampering with the vehicle identification code, configuration information, or other key parameters in the original upgrade package. During the upgrade process, the upgrade status of the first vehicle can be continuously monitored to observe how the vehicle responds, whether the upgrade is interrupted or continued, etc. Finally, based on the data status of the first vehicle after the upgrade, the impact of the tampering operation on the upgrade process of the original upgrade package can be analyzed to evaluate the robustness and security of the original upgrade package during the vehicle upgrade process. By introducing data tampering during the vehicle upgrade process, the anti-tampering ability and resistance of the original upgrade package during the vehicle data upgrade process can be tested, thereby ensuring the security performance of the original upgrade package during the vehicle data upgrade process.

[0054] In another optional embodiment, data tampering can also be performed during the process of transmitting the original upgrade package from the cloud to the vehicle; then, when the first vehicle starts to execute the upgrade instruction, the data is tampered again to simulate multiple stages of group and attack to achieve multi-stage testing. The tampering operation can be performed in both the transmission of the original upgrade package and the vehicle upgrade stage to test the responsiveness and protection performance of the original upgrade package at different stages. The first upgrade result of the first vehicle can be collected and analyzed, and the security of the original upgrade package can be comprehensively evaluated. This can cover the entire link of the original upgrade package for vehicle data upgrade, from the transmission of the original upgrade package to the vehicle data upgrade, and comprehensively evaluate the security of the original upgrade package, which will help to discover potential security vulnerabilities, ensure all-round protection of the vehicle during data upgrade, and improve the reliability of the entire upgrade process.

[0055] The above process can test the original upgrade package's ability to defend against malicious tampering at different stages or multiple stages. By tampering with the original upgrade package during transmission from the cloud to the first vehicle, the upgrade data package's ability to resist cyberattacks during transmission can be tested, testing the original upgrade package's ability to remain intact and untampered before reaching the vehicle. By introducing data tampering during the vehicle upgrade process, the original upgrade package's ability to resist tampering and defend against malicious tampering can be tested, ensuring the security of the original upgrade package during the vehicle data upgrade process. During data transmission, the cloud tampered with the original upgrade package, and during the upgrade process, the first vehicle tampered with the received upgrade package, resulting in a data packet, which was then transmitted from the original upgrade package to the vehicle data for upgrade. This comprehensive assessment of the security of the original upgrade package helps identify potential security vulnerabilities, ensures comprehensive protection for the vehicle during data upgrades, and improves the reliability of the entire upgrade process, thereby ensuring the security and robustness of intelligent connected vehicles during data upgrades.

[0056] In an embodiment of the present invention, data tampering of the original upgrade package includes: data tampering of upgrade configuration information related to the first vehicle in the original upgrade package, wherein the upgrade configuration information includes at least one of the following: a vehicle identification code of the first vehicle and configuration information of an upgrade controller in the first vehicle, and the upgrade controller is used to monitor the data upgrade process of the first vehicle.

[0057] The above-mentioned vehicle identification code may refer to the vehicle identification number (VIN), which can be a unique identifier consisting of multiple digits and letters. The vehicle identification code may include information such as the vehicle manufacturer, manufacturing year, body type, engine model, vehicle serial number, etc. During the vehicle data upgrade process, the vehicle identification code can be used to ensure that the upgrade data packet is sent to the correct vehicle, preventing non-target vehicles from receiving and executing the upgrade, thereby ensuring the accuracy and security of the upgrade.

[0058] The aforementioned configuration information may refer to the software version, hardware version, vendor information, and specific upgrade-related settings for each electronic controller in the intelligent connected vehicle. For example, if a vehicle is equipped with different versions of an electronic controller, the original upgrade package may include software compatible with these electronic controller versions. The specific configuration information can be determined based on actual needs and is not limited here.

[0059] In an optional embodiment, the test environment can be prepared, including a cloud, a first vehicle, and the first vehicle's network connection. The original upgrade package can include a vehicle identification code (VIN) and configuration information for the controller to be upgraded. A pre-designed script or tool can then be used to tamper with the VIN and / or controller configuration information in the original upgrade package. The VIN or configuration information in the original upgrade package can be tampered with while the original upgrade package is being transmitted to the first vehicle, or while the original upgrade package is being used to upgrade vehicle data. The tampering can include modifying one or more characters in the VIN, changing the version number in the configuration information, or inserting incorrect controller information. The tampering can be minor, such as changing a single digit in the VIN, or significant, such as altering the controller model or version number. The tampered original upgrade package can be transmitted from the cloud to the first vehicle. Upon receipt of the original upgrade package, the first vehicle begins the upgrade process. The upgrade behavior of the first vehicle after receiving the original upgrade package can be monitored to detect anomalies in the VIN or configuration information and take appropriate safety measures, such as terminating the upgrade, issuing a warning, or requesting reauthentication. Any anomaly detection and response actions can be recorded for subsequent analysis.

[0060] By simulating real-world data tampering, this process assesses the security protection capabilities of the original upgrade package, ensuring that the original upgrade package used in real-world applications can effectively resist potential threats and protect vehicles from damage. Testing can help identify weaknesses in the original upgrade package's security, including encryption, decryption, and integrity verification functions, providing clear direction for subsequent security improvements. Based on the security test results, targeted improvements can be made to the original upgrade package, such as enhancing encryption algorithms, improving decryption and verification processes, and implementing stricter authentication mechanisms, to enhance overall security and user experience.

[0061] In an embodiment of the present invention, based on the first upgrade result, the data tampering result is determined, including: when the first upgrade result is that the data upgrade of the first vehicle is successful, determining the data tampering result is that the data tampering of the original upgrade package is unsuccessful; when the first upgrade result is that the data upgrade of the first vehicle is unsuccessful, determining the data tampering result is that the data tampering of the original upgrade package is successful.

[0062] In an optional embodiment, the data tampering result of the target upgrade package can be determined based on the first upgrade result. If the first vehicle can still successfully complete the upgrade when using the target upgrade package, and the system functions normally after the upgrade, without any vehicle identification code or configuration information errors, etc., it can be determined that the security mechanism of the original upgrade package is effective and can resist malicious tampering attacks. In other words, the data tampering result is that the data tampering of the original upgrade package was unsuccessful. If the first vehicle does not complete the upgrade when using the target upgrade package, or the first vehicle identifies an abnormality in the target upgrade package during the upgrade process, such as the upgrade being terminated and a warning being issued, it can be determined that the security protection measures of the original upgrade package do not or are insufficient to prevent malicious tampering. In this case, the data tampering result can be determined as successful data tampering of the original upgrade package.

[0063] In the above process, testing and evaluating the original upgrade package based on the first upgrade result of the first vehicle helps to identify and remediate security vulnerabilities. The first upgrade result of the first vehicle can intuitively determine whether the data tampering of the original upgrade package is successful, whether the original upgrade package can be transmitted and applied intact, and verify the functional integrity of the original upgrade package in the case of data tampering.

[0064] In an embodiment of the present invention, based on the data tampering result, the security test result of the original upgrade package is determined, including when the data tampering result is that the data tampering of the original upgrade package is unsuccessful, determining that the security test result is that the security of the original upgrade package reaches a preset security level; when the data tampering result is that the data tampering of the original upgrade package is successful, determining that the security test result is that the security of the original upgrade package does not reach the preset security level.

[0065] The above-mentioned preset security level may refer to a pre-set standard or requirement for measuring the security and protection capability of the original upgrade package. The preset security level may be determined based on actual needs and is not limited here.

[0066] In an optional embodiment, the security test result of the original upgrade package can be determined based on the data tampering result of the original upgrade package. If the data tampering result indicates that the original upgrade package has not been successfully tampered with, that is, the original upgrade package can effectively prevent tampering during the upgrade process, it can be determined that the original upgrade package has good anti-tampering capabilities and can be safely distributed to the actual user vehicle to upgrade the user vehicle's vehicle data. It can be determined that the security mechanism of the original upgrade package is effective and can resist malicious tampering attacks, that is, the security of the original upgrade package has reached a preset security level. If the data tampering result indicates that the original upgrade package has been successfully tampered with, that is, the original upgrade package has not been effectively prevented from being tampered with, if it can be determined that the security test result is that the anti-tampering performance of the original upgrade package does not meet the required requirements, then it can be determined that the security protection measures of the original upgrade package are insufficient to identify and prevent malicious tampering, and it can be determined that the security of the original upgrade package does not meet the preset security level.

[0067] In the above process, by setting a preset security level and testing and evaluating the original upgrade package based on the data tampering results, it helps to identify and address security vulnerabilities, ensure that the original upgrade package has sufficient security protection during transmission and application, and prevent data from being maliciously tampered with. Testers can continuously improve the upgrade process and data protection strategy based on the security test results to cope with increasingly complex security threats.

[0068] In an embodiment of the present invention, based on the target upgrade package, vehicle data of at least one second vehicle is upgraded to obtain at least one second upgrade result, wherein at least one of the plurality of second vehicles is used to represent at least one vehicle of a different vehicle type from the first vehicle; based on the first upgrade result and at least one second upgrade result, the data tampering result is determined.

[0069] The at least one second vehicle mentioned above may refer to one or more vehicles selected for subsequent testing, in addition to the first vehicle used for the initial test. The at least one second vehicle may be of a different vehicle type than the first vehicle, i.e., may be a different model, have different hardware configurations, operating system versions, or other key features. Selecting multiple vehicle types for testing allows for broad compatibility verification, ensuring that the original upgrade package can adapt to different vehicle hardware and software environments, and enables comprehensive security assessments. Repeated testing on different vehicles can verify whether the original upgrade package contains model-specific vulnerabilities and examine the general applicability of the target upgrade package to the security of various vehicles.

[0070] The above-mentioned at least one second upgrade result may refer to the vehicle data upgrade results of one or more second vehicles obtained after testing at least one second vehicle. Each test result can reflect the performance of the original upgrade package on different vehicles. The content of at least one test result may include but is not limited to whether the upgrade is successful, safety checks and compatibility assessments, etc., which can be determined according to actual needs and are not limited here.

[0071] In an optional embodiment, at least one second vehicle representing a different vehicle type may be selected, and the hardware configuration, software platform, communication protocol, etc. of these second vehicles may differ from those of the first vehicle. Subsequently, data upgrades may be performed on each second vehicle based on the original upgrade package, and data tampering may be performed on the original upgrade package to determine whether the data upgrade of the second vehicle is successful, and at least one test result may be obtained. The data upgrade results of each second vehicle may be recorded, which may include but are not limited to whether the vehicle data upgrade is successful, changes in vehicle status, vehicle log output, etc. Based on the at least one second test result, the performance of the original upgrade package on different second vehicles may be analyzed, such as the anti-interference ability and self-protection mechanism when facing tampering with the vehicle identification code and configuration information. Finally, the data tampering result may be determined based on the first upgrade result and the at least one second upgrade result. For example, the at least one second upgrade result may be aggregated with the original first upgrade result to obtain the data tampering result.

[0072] By testing in diverse vehicle environments, this process allows for a more comprehensive detection of potential vulnerabilities in the original upgrade package, fostering improvements to its defense mechanisms and enhancing its ability to withstand external threats. This also ensures the original upgrade package's compatibility with a wide range of vehicle models, mitigating the technical challenges associated with vehicle diversity and avoiding the complexity and cost of maintaining multiple upgrade versions.

[0073] In an embodiment of the present invention, the security test results are updated based on multiple test results, including: when the security test result shows that the security of the original upgrade package reaches a preset security level, the original upgrade package is sent to the user vehicle, and the vehicle data of the user vehicle is upgraded based on the original upgrade package.

[0074] The above-mentioned user vehicles may refer to vehicles that will receive and perform data upgrades in actual applications after the testing work is completed, that is, smart connected vehicles that users drive daily. User vehicles can cover a variety of different models, hardware configurations and software versions, which can be determined according to actual needs and are not limited here.

[0075] In an optional embodiment, based on previous test results on the first and second vehicles, if the security of the original upgrade package is determined to have met a preset security level, the preset security level can be set according to the vehicle manufacturer's security policies and standards and may include, but is not limited to, data packet encryption strength, authentication mechanisms, and detection and resistance to malicious tampering. After the original upgrade package is determined to meet the security standards, further improvements can be made to the original upgrade package. These improvements may include further compressing the upgrade data packet, improving the transmission protocol to speed up downloads, or enhancing the data packet's self-detection capabilities to ensure that the original upgrade package can detect anomalies promptly during the upgrade process on the user's vehicle. Next, eligible user vehicles can be screened from the user database. User vehicles can be selected based on factors such as vehicle model, software version, and hardware configuration. An upgrade notification can then be sent to the user via the in-vehicle infotainment system, a mobile app, or email, informing the user of the scheduled upgrade time and other information. The original upgrade package can then be distributed to the selected user vehicle via the cloud. Upon receipt of the upgrade data packet, the user vehicle can automatically execute the upgrade according to the preset security process. The upgrade process can include steps such as data packet decryption, integrity verification, and verification of the vehicle identification number and configuration information to ensure upgrade security and data accuracy. After the upgrade is complete, the system can automatically verify the results, checking whether the vehicle identification number and configuration information are consistent with those before the upgrade, and whether the vehicle functions normally. The system can also record log information during the upgrade process for tracing and analysis if any problems arise.

[0076] During the above process, the original upgrade package is only sent to the user's vehicle after ensuring that its security reaches the preset security level. This helps to enhance the security of the user's vehicle data upgrade service. Through intelligent scheduling and distribution, large-scale vehicle data upgrades can be efficiently completed without interfering with the user's normal use of the vehicle, thereby improving the overall efficiency of vehicle data upgrades and user satisfaction.

[0077] In an embodiment of the present invention, when the security test result shows that the security of the original upgrade package does not reach a preset security level, an algorithm adjustment instruction is sent to the cloud, wherein the algorithm adjustment instruction is used to adjust the encryption algorithm of the original upgrade package; the new upgrade package is tested based on the first vehicle and / or at least one second vehicle to obtain a new data tampering result, wherein the new upgrade package is a data packet obtained by encrypting the original upgrade package based on the adjusted encryption algorithm.

[0078] In an optional embodiment, if the security test results indicate that the security of the original upgrade package does not meet the preset security level, an algorithm adjustment instruction can be sent to the cloud. The cloud can determine the current encryption algorithm of the original upgrade package and evaluate its effectiveness against malicious tampering. This can include checking encryption strength and anomaly detection mechanisms during the decryption process. Based on the evaluation results, the encryption algorithm of the original upgrade package can be adjusted. This can include selecting a more secure encryption standard, increasing key length, introducing a more complex data integrity check mechanism, or combining multiple encryption techniques to increase the difficulty of cracking. The original upgrade package can then be re-encrypted using the adjusted encryption algorithm to obtain a new upgrade package. The new upgrade package can then be re-tested on the first vehicle and / or at least one second vehicle to ensure that the adjusted encryption algorithm can support the secure transmission of the new upgrade package to the user vehicle and complete the upgrade process for the user vehicle. Specifically, the effectiveness of the adjusted encryption algorithm can be analyzed based on the vehicle test results of the first vehicle and / or at least one second vehicle. If the new upgrade package can resist tampering during the upgrade process and ensure the vehicle upgrade is successful, the encryption algorithm is effective. If new vulnerabilities or issues are discovered, the algorithm can be further adjusted to ensure that the new upgrade package meets security requirements.

[0079] During this process, adjusting the encryption algorithm in the cloud significantly improves the security of the original upgrade package during transmission and upgrades, protecting user vehicles from data tampering attacks and ensuring smooth vehicle data upgrades. Adjusting the encryption algorithm to target known or potential attack vectors strengthens the original upgrade package's resilience, ensuring data integrity and vehicle safety. By balancing encryption strength and efficiency, the vehicle upgrade process can be secure and rapid, improving user satisfaction.

[0080] The technical solution proposed in this application is described below in conjunction with an optional embodiment. This application proposes a testing method for preventing malicious tampering of vehicle identification codes and configuration information during the transmission and upgrade process of vehicle data upgrade packages. Vehicle remote upgrade technology refers to the remote management of firmware, data, and applications on vehicle component terminals via mobile communication networks. Currently, vehicle remote upgrade technology has gradually become a common upgrade method for intelligent connected vehicle software updates. The vehicle identification code contains information such as the vehicle manufacturer, year, model, body type and code, engine code, and assembly location. Controller configuration information includes information such as the controller's hardware version and supplier. Correct interpretation of the vehicle identification code and controller configuration information helps accurately identify the vehicle model and the corresponding controller for that model, enabling accurate diagnosis and repair. Vehicle remote upgrade technology may pose a risk of data tampering during the upgrade package transmission and upgrade process, making the accuracy of the vehicle identification code and configuration information difficult to ensure. To address the risk of data tampering in the upgrade data package, this application adds tampering tests related to the vehicle identification code and configuration information during the data package transmission and upgrade process, thus implementing security testing for the vehicle upgrade data package.

[0081] Figure 2 FIG. 1 is a schematic diagram of an optional vehicle upgrade data package testing process according to an embodiment of the present invention. Figure 2 As shown, in response to a test instruction of a vehicle upgrade data packet received; during the data transmission process, the cloud tampered with the original upgrade package, and during the upgrade process, the first vehicle tampered with the data packet obtained by the received upgrade package; based on the target upgrade package, the first vehicle was upgraded to determine a first upgrade result of the first vehicle; based on the first upgrade result, the data tampering result was determined; based on the data tampering result, the security test result of the original upgrade package was determined.

[0082] According to another aspect of an embodiment of the present invention, a testing device for a vehicle upgrade data packet is also provided. The device can execute the testing method for the vehicle upgrade data packet of the above embodiment. The specific implementation method and preferred application scenario are the same as those of the above embodiment and will not be repeated here.

[0083] Figure 3 is a schematic diagram of a vehicle upgrade data package testing device according to an embodiment of the present application, such as Figure 3 As shown, the apparatus includes the following: a first determination module 302 , a second determination module 304 and a third determination module 306 .

[0084] Among them, the first determination module 302 is used to respond to the test instruction of the vehicle upgrade data packet received, upgrade the data of the first vehicle based on the target upgrade package, and determine the first upgrade result of the first vehicle, wherein the target upgrade package is a data packet obtained after data tampering with the original upgrade package generated in the cloud, the original upgrade package is used to perform data upgrade on the first vehicle, and the first upgrade result is used to characterize whether the data upgrade of the first vehicle is successful; the second determination module 304 is used to determine the data tampering result based on the first upgrade result, wherein the data tampering result is used to characterize whether the data tampering of the original upgrade package is successful; the third determination module 306 is used to determine the security test result of the original upgrade package based on the data tampering result.

[0085] Among them, the target upgrade package is a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process of transmitting the original upgrade package to the first vehicle; or, during the upgrade process of upgrading the data of the first vehicle, the original upgrade package is tampered with by the first vehicle; or, during the data transmission process, the original upgrade package is tampered with by the cloud, and during the upgrade process, the received upgrade package is tampered with by the first vehicle.

[0086] Among them, the first determination module is also used to tamper with the upgrade configuration information related to the first vehicle in the original upgrade package, wherein the upgrade configuration information includes at least one of the following: the vehicle identification code of the first vehicle and the configuration information of the upgrade controller in the first vehicle, and the upgrade controller is used to monitor the data upgrade process of the first vehicle.

[0087] Among them, the second determination module is also used to determine that the data tampering result is that the data tampering of the original upgrade package is unsuccessful when the first upgrade result is that the data upgrade of the first vehicle is successful; and to determine that the data tampering result is that the data tampering of the original upgrade package is successful when the first upgrade result is that the data upgrade of the first vehicle is unsuccessful.

[0088] Among them, the third determination module is also used to determine that the security test result is that the security of the original upgrade package reaches the preset security level when the data tampering result is that the data tampering of the original upgrade package is unsuccessful; and to determine that the security test result is that the security of the original upgrade package does not reach the preset security level when the data tampering result is that the data tampering of the original upgrade package is successful.

[0089] Among them, the second determination module is also used to upgrade the vehicle data of at least one second vehicle based on the target upgrade package to obtain at least one second upgrade result, wherein at least one of the multiple second vehicles is used to represent at least one vehicle of a different vehicle type from the first vehicle; based on the first upgrade result and at least one second upgrade result, determine the data tampering result.

[0090] Among them, the third determination module is also used to send the original upgrade package to the user vehicle and upgrade the vehicle data of the user vehicle based on the original upgrade package when the security test result shows that the security of the original upgrade package reaches a preset security level.

[0091] Among them, the third determination module is also used to send an algorithm adjustment instruction to the cloud when the security test result shows that the security of the original upgrade package does not reach a preset security level, wherein the algorithm adjustment instruction is used to adjust the encryption algorithm of the original upgrade package; based on the first vehicle and / or at least one second vehicle, the new upgrade package is tested to obtain a new data tampering result, wherein the new upgrade package is a data packet obtained by encrypting the original upgrade package based on the adjusted encryption algorithm.

[0092] An embodiment of the present application further provides an electronic device, comprising: a memory storing an executable program; and a processor for running the program, wherein the program executes the methods of various embodiments of the present invention when running.

[0093] The above-mentioned memory may refer to a device inside a computer for storing data and programs, and may include memory, hard disk, etc., wherein the memory may be used to temporarily store running programs and data, the hard disk may be used to store programs and data for a long time, and the memory may be used to enable the computer to read and write data, as well as execute programs; the above-mentioned processor may be responsible for executing instructions in computer programs and performing data processing, and may be responsible for controlling and executing various operations, including arithmetic operations, logical operations, data transmission, etc.

[0094] An embodiment of the present application further provides a computer-readable storage medium, which includes a stored executable program, wherein when the executable program is running, the device where the computer-readable storage medium is located is controlled to execute the methods in various embodiments of the present invention.

[0095] The above-mentioned computer storage medium may refer to a medium in a computer memory used to store certain discontinuous physical quantities. Computer storage media mainly include semiconductors, magnetic cores, magnetic drums, magnetic tapes, laser disks, etc. The stored program included in the computer-readable storage medium may be a set of instructions that can be recognized and executed by a computer, running on an electronic computer, and serving as an information tool to meet certain needs of people.

[0096] An embodiment of the present application further provides a computer program product, including a computer program, which implements the methods in various embodiments of the present invention when executed by a processor.

[0097] The above-mentioned computer program product may refer to a software program that has been written, tested and released, which can be run on a computer or other device. The computer program product may include an application, an operating system, tool software, etc., which is used to implement specific functions or solve specific problems.

[0098] An embodiment of the present application further provides a computer program product, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium is used to store a computer program, and when the computer program is executed by a processor, the method in each embodiment of the present invention is implemented.

[0099] The above-mentioned non-volatile computer-readable storage medium may refer to a medium for storing data. The non-volatile computer-readable storage medium can keep the data from being lost when the power is off, and can be used to store long-term data, such as operating systems, applications and user files. The non-volatile storage medium may include hard disk drives, solid-state drives, optical disks and flash memory storage devices, etc.

[0100] The embodiments of the present application further provide a computer program, which implements the methods in the above-mentioned embodiments of the present invention when executed by a processor.

[0101] The above-mentioned computer program may refer to a collection of instructions used to tell a computer to perform a specific task or operation. A computer program may be written by a programmer using a specific programming language and may include algorithms, data structures, logic, and control flows. Computer programs may be used for a variety of purposes, including application software, operating systems, and the like.

[0102] In the above embodiments of the present invention, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0103] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of the units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0104] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0105] In addition, the functional units in the various embodiments of the present invention may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0106] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk, etc. Various media that can store program codes.

[0107] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as within the scope of protection of the present invention.

Claims

1. A method for testing a vehicle upgrade data package, characterized in that: include: In response to receiving a test instruction of a vehicle upgrade data packet, performing a data upgrade on a first vehicle based on a target upgrade packet, and determining a first upgrade result for the first vehicle, wherein the target upgrade packet is a data packet obtained by tampering with data in an original upgrade packet generated in the cloud, the original upgrade packet is used to perform the data upgrade on the first vehicle, and the first upgrade result is used to indicate whether the data upgrade of the first vehicle is successful; Determining a data tampering result based on the first upgrade result, wherein the data tampering result is used to indicate whether the data tampering of the original upgrade package is successful; Based on the data tampering result, a security test result of the original upgrade package is determined.

2. The vehicle upgrade data package testing method according to claim 1, characterized in that: The target upgrade package is a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process of transmitting the original upgrade package to the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the first vehicle during the upgrade process of upgrading the data of the first vehicle; or, a data packet obtained by tampering with the original upgrade package by the cloud during the data transmission process and tampering with the received upgrade package by the first vehicle during the upgrade process.

3. The vehicle upgrade data package testing method according to claim 2, characterized in that: The data of the original upgrade package is tampered with, including: Data tampering is performed on upgrade configuration information related to the first vehicle in the original upgrade package, wherein the upgrade configuration information includes at least one of the following: a vehicle identification code of the first vehicle and configuration information of an upgrade controller in the first vehicle, and the upgrade controller is used to monitor the data upgrade process of the first vehicle.

4. The vehicle upgrade data package testing method according to claim 1, characterized in that: Determining a data tampering result based on the first upgrade result includes: When the first upgrade result is that the data upgrade of the first vehicle is successful, determining the data tampering result is that the data tampering of the original upgrade package is unsuccessful; When the first upgrade result is that the data upgrade of the first vehicle is unsuccessful, the data tampering result is determined to be that the data tampering of the original upgrade package is successful.

5. The vehicle upgrade data package testing method according to any one of claims 1 to 4, characterized in that: Determining a security test result of the original upgrade package based on the data tampering result includes: If the data tampering result is that the data tampering of the original upgrade package is unsuccessful, determining that the security test result is that the security of the original upgrade package reaches a preset security level; In a case where the data tampering result is that the data tampering of the original upgrade package is successful, it is determined that the security test result is that the security of the original upgrade package does not reach the preset security level.

6. The vehicle upgrade data package testing method according to any one of claims 1 to 4, characterized in that: The method further comprises: performing a vehicle data upgrade on at least one second vehicle based on the target upgrade package to obtain at least one second upgrade result, wherein the at least one second vehicle is used to represent at least one vehicle of a different vehicle type from the first vehicle; The data tampering result is determined based on the first upgrade result and the at least one second upgrade result.

7. The vehicle upgrade data package testing method according to any one of claims 1 to 4, characterized in that: The method further comprises: If the security test result shows that the security of the original upgrade package reaches a preset security level, the original upgrade package is sent to the user vehicle, and the vehicle data of the user vehicle is upgraded based on the original upgrade package.

8. A vehicle upgrade data package testing device, characterized in that: include: a first determining module configured to, in response to receiving a test instruction of a vehicle upgrade data packet, perform a data upgrade on a first vehicle based on a target upgrade packet, and determine a first upgrade result for the first vehicle, wherein the target upgrade packet is a data packet obtained by tampering with data in an original upgrade packet generated in the cloud, the original upgrade packet is used to perform the data upgrade on the first vehicle, and the first upgrade result is used to indicate whether the data upgrade of the first vehicle is successful; A second determining module is configured to determine a data tampering result based on the first upgrade result, wherein the data tampering result is used to indicate whether the data tampering of the original upgrade package is successful; The third determining module is used to determine the security test result of the original upgrade package based on the data tampering result.

9. An electronic device, characterized in that: include: a memory storing an executable program; A processor is used to run the program, wherein the program executes the vehicle upgrade data package testing method according to any one of claims 1 to 7 when running.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a stored executable program, wherein when the executable program is run, the device where the storage medium is located is controlled to execute the vehicle upgrade data package testing method according to any one of claims 1 to 7.

Images