OTA upgrading method, system and device of networking controller and medium

Abstract

The invention relates to the technical field of Internet of Vehicles, and discloses an OTA upgrading method, system and device of a networking controller and a medium. The method comprises the following steps: an OTA cloud platform encrypts an upgrade package of a networking controller by adopting a preset key pair according to an upgrade request of the networking controller sent by T-Box, and stores the encrypted upgrade package in a target path of an upgrade package server; the OTA cloud platform adopts a public key of the T-Box to encrypt a preset key pair, and sends the encrypted preset key pair to the T-Box together with a target path of the upgrade package server in a character string form; the T-Box carries out decryption by using a private key of the T-Box to obtain a preset key pair, and sends the preset key pair and a target path of the upgrade package server to the networkable controller; and the networkable controller downloads the encrypted upgrade patch from the target path of the upgrade patch server, and decrypts the upgrade patch by using a preset key pair to obtain the upgrade patch so as to complete OTA upgrade.

Description

Technical Field

[0001] This invention relates to the field of vehicle networking technology, and in particular to an OTA upgrade method, system, device and medium for a network-connected controller. Background Technology

[0002] Typically, the vehicle-mounted terminal T-Box is the sole carrier for data interaction with the Over-the-Air (OTA) system cloud platform, which is based on OTA technology. The OTA system cloud platform also only stores the public key certificate of the vehicle-mounted terminal T-Box. When remotely upgrading ordinary controllers, the OTA cloud platform uses the T-Box's public key certificate to encrypt the upgrade data and transmits the encrypted data to the vehicle through the T-Box. After the T-Box verifies and decrypts the upgrade data, it forwards the decrypted upgrade data to these controllers via the Controller Area Network (CAN) line. Only after these controllers receive the upgrade data do they perform the OTA upgrade.

[0003] However, in reality, some controllers have networking capabilities, such as display (Multi Media Interface, MMI) controllers. The upgrade packages for these controllers are relatively large; for example, the upgrade data for a map box can reach 8GB. If the upgrade data is transmitted to these controllers via CAN bus in the traditional way, it will affect the stability of the bus and the transmission of other data. Summary of the Invention

[0004] The purpose of this invention is to provide an OTA upgrade method, system, device, and medium for network-enabled controllers, which can solve the problem that the large data size of the OTA upgrade package affects bus stability and other data transmission during transmission.

[0005] To address the aforementioned technical problems, embodiments of the present invention provide an OTA upgrade method for a network-enabled controller, comprising the following steps: The OTA cloud platform encrypts the upgrade package of the network-connected controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, and saves the encrypted upgrade package to the target path of the upgrade package server; The OTA cloud platform uses the public key of the vehicle terminal T-Box to encrypt the preset key pair, and sends the encrypted preset key pair as a string along with the target path of the upgrade package server to the vehicle terminal T-Box. The vehicle terminal T-Box uses its own private key to decrypt and obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller. The network-connected controller downloads the encrypted upgrade package from the target path of the upgrade package server and decrypts it using a preset key pair to complete the OTA upgrade.

[0006] Optionally, the OTA cloud platform uses the public key of the vehicle terminal T-Box to encrypt a preset key pair, and sends the encrypted preset key pair as a string along with the target path of the upgrade package server to the vehicle terminal T-Box, including: The OTA cloud platform uses a preset encryption algorithm to generate a digest value for the encrypted upgrade package, and uses the public key of the vehicle terminal T-Box to encrypt the digest value, and uses its own private key to sign the encrypted digest value to obtain a signed digest value. The encrypted preset key pair is sent as a string along with the signature digest value and the target path of the upgrade package server to the vehicle terminal T-Box.

[0007] Optionally, the vehicle-mounted terminal T-Box uses its own private key to decrypt and obtain a preset key pair, and sends the preset key pair and the target path of the upgrade package server to the network-enabled controller, including: The vehicle terminal T-Box uses the public key of the OTA cloud platform to verify the signature digest value. If the verification is successful, it uses its own private key to decrypt the encrypted digest to obtain the digest value of the encrypted upgrade package. The system uses its own private key to decrypt and obtain a preset key pair. It then sends the preset key pair, the target path of the upgrade package server, and the digest value of the encrypted upgrade package to the network-enabled controller.

[0008] Optionally, the network-enabled controller downloads the encrypted upgrade package from the target path of the upgrade package server and decrypts it using a preset key pair to obtain the upgrade package, thereby completing the OTA upgrade, including: The network-enabled controller downloads the encrypted upgrade package from the target path of the upgrade package server and generates a digest value of the encrypted upgrade package using a preset encryption algorithm; Compare the generated digest value with the digest value sent by the vehicle terminal T-Box; If the generated digest value is equal to the digest value sent by the vehicle terminal T-Box, the upgrade package is obtained by decrypting it using a preset key pair to complete the OTA upgrade.

[0009] Optionally, before the OTA cloud platform encrypts the upgrade package of the network-enabled controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, it further includes: Each time the vehicle terminal T-Box is powered on, it checks whether a public key certificate exists inside. If it does not exist, it calls the basic cryptographic library to generate a key pair, combines it with the unique identifier of the vehicle terminal T-Box, generates a certificate signing request, and sends it to the OTA cloud platform. The OTA cloud platform forwards the certificate signing request to the digital certificate authentication system to generate a public key certificate for the vehicle terminal T-Box; After the digital certificate authentication system returns the generated public key certificate to the OTA cloud platform, the OTA cloud platform saves the generated public key certificate and sends its own public key certificate along with the generated public key certificate to the vehicle terminal T-Box. This enables the OTA cloud platform to use the vehicle terminal T-Box's public key to encrypt the preset key pair and enables the vehicle terminal T-Box to use the OTA cloud platform's public key to verify the signature digest value.

[0010] Embodiments of the present invention also provide an OTA upgrade system for a network-connected controller, comprising: The OTA cloud platform is used to encrypt the upgrade package of the network-enabled controller using a preset key pair according to the upgrade request sent by the vehicle terminal T-Box, and save the encrypted upgrade package to the target path of the upgrade package server; The public key of the vehicle terminal T-Box is used to encrypt the preset key pair, and the encrypted preset key pair is sent to the vehicle terminal T-Box in the form of a string along with the target path of the upgrade package server. The vehicle terminal T-Box is used to decrypt using its own private key to obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller. The network-enabled controller is used to download the encrypted upgrade package from the target path of the upgrade package server and decrypt it using a preset key pair to complete the OTA upgrade.

[0011] Embodiments of the present invention also provide a computer device, including: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the above-described OTA upgrade method for a networkable controller.

[0012] Embodiments of the present invention also provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described OTA upgrade method for a network-enabled controller.

[0013] The OTA upgrade method for network-enabled controllers provided by this invention has at least the following beneficial effects: To perform an OTA upgrade on the network-connected controller, the OTA upgrade package is encrypted and saved to the target path of the upgrade package server on the OTA cloud platform. To ensure the security of the upgrade package data and data communication, the key pair used to encrypt the OTA upgrade package is encrypted using the public key of the vehicle terminal T-Box. The encrypted preset key pair is sent to the vehicle terminal T-Box in string form along with the target path of the upgrade package server. The vehicle terminal T-Box then decrypts the preset key pair using its own private key and sends the preset key pair and the target path of the upgrade package server to the network-connected controller. This allows the network-connected controller to download the encrypted upgrade package from the target path of the upgrade package server and decrypt it using the preset key pair to complete the OTA upgrade.

[0014] The above communication process utilizes the networking characteristics of the networkable controller. It does not require transmitting the entire OTA upgrade package data, but only a key pair and a download path link, so that the networkable controller can download the OTA upgrade package. At the same time, the OTA upgrade package is encrypted and stored, and the key pair for encrypting the OTA upgrade package is also transmitted in an encrypted manner. This reduces the amount of data transmission, solves the problem of bus stability and other data transmission being affected by the large amount of data, and ensures the security of data transmission. Attached Figure Description

[0015] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this invention, illustrate exemplary embodiments of the invention and are used to explain the invention, but do not constitute an undue limitation of the invention. In the drawings:

[0016] Figure 1 A flowchart illustrating an OTA upgrade method for a network-enabled controller provided by the present invention; Figure 2 A schematic diagram illustrating the entire process of an OTA upgrade method for a network-enabled controller provided by the present invention; Figure 3 A schematic diagram illustrating the processing flow for generating and storing a public key certificate for an in-vehicle terminal T-Box provided by the present invention; Figure 4 This is a schematic diagram of the processing flow for collaborative signature verification and decryption between an in-vehicle terminal T-Box and a controller, provided by the present invention. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below in conjunction with specific embodiments and corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of this invention, and not all of them. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0018] The technical solutions provided by the various embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0019] One embodiment of the present invention relates to an OTA upgrade method for a network-enabled controller. The implementation details of the OTA upgrade method for a network-enabled controller in this embodiment are described in detail below. The following implementation details are provided for ease of understanding and are not necessary for implementing this solution.

[0020] The specific process of the OTA upgrade method for the network-enabled controller in this embodiment can be described as follows: Figure 1 Shown, including: Step 101: The OTA cloud platform encrypts the upgrade package of the network-connected controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, and saves the encrypted upgrade package to the target path of the upgrade package server.

[0021] Step 102: The OTA cloud platform uses the public key of the vehicle terminal T-Box to encrypt the preset key pair, and sends the encrypted preset key pair as a string along with the target path of the upgrade package server to the vehicle terminal T-Box.

[0022] In its implementation, the OTA cloud platform uses a preset encryption algorithm to generate a digest value for the encrypted upgrade package, encrypts the digest value using the public key of the vehicle terminal T-Box, and signs the encrypted digest value using its own private key to obtain a signed digest value. The encrypted preset key pair is then sent to the vehicle terminal T-Box in string form, along with the signed digest value and the target path of the upgrade package server.

[0023] Step 103: The vehicle terminal T-Box uses its own private key to decrypt and obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller.

[0024] In the specific implementation, the vehicle terminal T-Box uses the public key of the OTA cloud platform to verify the signature digest value. If the verification is successful, it uses its own private key to decrypt the encrypted digest to obtain the digest value of the encrypted upgrade package. It also uses its own private key to decrypt the preset key pair and sends the preset key pair, the target path of the upgrade package server, and the digest value of the encrypted upgrade package to the network-enabled controller.

[0025] Step 104: The network-enabled controller downloads the encrypted upgrade package from the target path of the upgrade package server and decrypts it using a preset key pair to obtain the upgrade package, thereby completing the OTA upgrade.

[0026] In the specific implementation, the network-connected controller downloads the encrypted upgrade package from the target path of the upgrade package server and generates a digest value of the encrypted upgrade package using a preset encryption algorithm; it compares the generated digest value with the digest value sent by the vehicle terminal T-Box; if the generated digest value is equal to the digest value sent by the vehicle terminal T-Box, it decrypts the upgrade package using a preset key pair to complete the OTA upgrade.

[0027] In one example, before the OTA cloud platform encrypts the upgrade package of the network-connected controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, the vehicle terminal T-Box checks whether a public key certificate exists internally each time it powers on. If not, it calls the basic cryptographic library to generate a key pair, combines it with the unique identifier of the vehicle terminal T-Box, generates a certificate signing request, and sends it to the OTA cloud platform. The OTA cloud platform forwards the certificate signing request to the digital certificate authentication system to generate a public key certificate for the vehicle terminal T-Box. After the digital certificate authentication system returns the generated public key certificate to the OTA cloud platform, the OTA cloud platform saves the generated public key certificate and sends its own public key certificate along with the generated public key certificate to the vehicle terminal T-Box. This allows the OTA cloud platform to encrypt the preset key pair using the vehicle terminal T-Box's public key and for the vehicle terminal T-Box to verify the signature digest value using the OTA cloud platform's public key.

[0028] In one embodiment, the OTA upgrade method of the network-enabled controller of the present invention is implemented through the following process to describe how the vehicle terminal T-Box transmits key pairs and digest data, so that the network-enabled controller can complete the decryption operation of the encrypted upgrade data after downloading the upgrade data itself, thereby obtaining the normally usable upgrade data to complete the OTA upgrade task.

[0029] It mainly includes the following parts: I. Generation and storage of public key certificates for vehicle-mounted terminal T-Box: 1. When the vehicle terminal T-Box is taken offline, a PKI-SDK package and a private SSL certificate matching the OTA cloud platform are embedded. Every time the vehicle T15 is powered on, the T-Box automatically checks whether there is a PKI certificate inside the terminal. If not, it reports CSR data to request a certificate for the vehicle terminal T-Box. After receiving the CSR data, the OTA cloud platform calls the API interface provided by the CA system to generate a public key certificate for the T-Box; when the network controller is taken offline, a private SSL certificate matching the OTA system cloud platform upgrade package server is embedded. 2. After generating a public key certificate for the vehicle terminal T-Box, the OTA system cloud platform stores the public key certificate of the vehicle terminal T-Box in the database, and simultaneously sends the public key certificate of the OTA system cloud platform and the public key certificate of the vehicle terminal T-Box to the vehicle terminal in the form of vehicle networking protocol. 3. After receiving the certificate issued by the OTA system cloud platform, the vehicle terminal T-Box saves both the OTA system cloud platform's public key certificate and its own public key certificate in a fixed path.

[0030] II. OTA System Cloud Platform Upgrade Package Server Setup: 1. Use OpenSSL to generate a 100-year self-signed certificate, and deploy the server-side private CA certificate on the OTA cloud platform, including the server-side certificate and private key; 2. When there is an upgrade task, the OTA system cloud platform uses PKI to generate a key pair to encrypt the upgrade package data and saves the encrypted data to the data server, for example, / data / otacloud / otapackage / package / t-boxid / timestamp / packagename; 3. Use nginx to expose the access path of the upgrade package. When configuring nginx SSL certificate, use a self-signed certificate generated by openssl.

[0031] III. Collaborative Signature Verification and Decryption between Vehicle Terminal T-Box and Controller: 1. After the upgrade task is created, the core upgrade data issued by the OTA cloud platform is as follows: 1.1 Upgrade packages encrypted with key pairs - distributed via URL links; 1.2 The upgrade package signature value, encrypted with the terminal's public key and signed by the platform, is distributed as a string. 1.3. Key pairs encrypted with the terminal's public key - distributed as strings; 2. After receiving the upgrade data, the vehicle terminal T-Box first uses the stored platform public key to verify the signature of the encrypted digest value. After the verification is successful, it uses the private key of the vehicle terminal T-Box to decrypt the encrypted key pair and the encrypted digest value. After successful decryption, it forwards the plaintext key pair, upgrade package link, and plaintext digest value to the corresponding upgrade controller through the CAN line. 3. After the upgrade controller receives the complete URL link, it downloads the encrypted upgrade package. After downloading, it calculates the digest value of the upgrade package using the SHA256 algorithm, and then compares the calculated digest value with the received digest value. If they are equal, it decrypts the upgrade package using the received plaintext key. If the decryption is successful, it performs the upgrade using the upgrade package.

[0032] In the above process, a private SSL certificate needs to be pre-embedded in the network-enabled controller for downloading the encrypted upgrade package from the upgrade package storage server; and a PKI-SDK needs to be embedded in the vehicle terminal T-Box for generating PKI public and private keys. Therefore, this embodiment can utilize the networking characteristics of the network-enabled controller to complete the verification and decryption of encrypted data by using the vehicle terminal T-Box decryption and controller signature verification without affecting the data interaction of the vehicle's CAN bus, thereby completing the upgrade of the network-enabled controller.

[0033] The entire processing flow can be as follows Figure 2 As shown, the process for generating and storing the public key certificate for the vehicle-mounted terminal T-Box can be as follows: Figure 3 As shown, the collaborative signature verification and decryption process between the vehicle-mounted terminal T-Box and the controller can be as follows: Figure 4 As shown.

[0034] The following is based on Figures 2 to 4 This embodiment will explain in detail the above three parts of implementing OTA upgrades for network-enabled controllers: I. Generation and storage of public key certificates for vehicle-mounted terminal T-Box: When the vehicle terminal T-Box rolls off the production line, it is embedded with a PKI-SDK. Each time the T-Box powers on, it calls the basic cryptographic library to generate a key pair, generates CSR data based on the device number, and reports the CSR data to the OTA platform via the vehicle networking protocol. The OTA platform forwards the CSR data to the CA system via an API interface to apply for a public key certificate for the T-Box. After the CA system sends the generated public key certificate back to the OTA platform, the OTA platform stores the terminal's public key certificate in its database. The core fields are shown in Table 1 below. Simultaneously, the OTA platform sends its own public key certificate and the T-Box's public key certificate to the terminal via the vehicle networking protocol. After receiving the OTA platform's and its own public key certificates, the terminal stores the data in memory as attributes, with the storage path as follows: Terminal public key certificate storage path: / data / otapki / t-box / ; The OTA platform public key certificate is stored in the following path: / data / otapki / web / .

[0035] Because the network-enabled controller needs to download the encrypted upgrade package itself, and to ensure the security of the communication line, the communication between the controller and the OTA upgrade package server uses the HTTPS protocol, the network-enabled controller needs to install the corresponding SSL certificate for the OTA upgrade package server when it is taken off the production line, as shown in Table 1: Table 1 II. OTA System Cloud Platform Upgrade Package Server Setup: 1. Use OpenSSL to generate a 100-year self-signed certificate, and deploy the server-side private CA certificate on the OTA cloud platform, including the server-side certificate and private key; 1.1 Generate a private key file: openssl genrsa -out packagekey.key 2048; 1.2 Generate a self-signed Certificate Request (CSR) file: openssl req -new -key package.key -out packagecert.csr; 1.3 Generate a self-signed certificate: openssl x509 -req -days 36500 -in packagecert.csr -signkeypackagekey.key -out packagecert.crt; 1.4. Same as 1.1-1.2, generate the server-side private key and Certificate Request File (CSR): 1.5. Generate server certificate: openssl x509 -req -days 36500 -in packageserver.csr -signkeypackagekey.key -out servercert.crt; 1.6. Generate client private key and public key certificates as in 1.4-1.5; 2. Introduce a PKI toolkit into the OTA system cloud platform. When an upgrade task is available, the OTA system cloud platform calls the PKI toolkit to encrypt the upgrade data. The specific steps are as follows: 2.1. Use the PKI toolkit to generate key pairs (keys); 2.2. Encrypt the upgrade package using the key pair keys to obtain the encrypted upgrade package encry-package; 2.3 Save the encry-package to a fixed path on the upgrade package server: / data / otacloud / otapackage / package / t-boxid / timestamp / packagename; 2.4 Calculate a digest value sha-abstract for the encry-package using the sha256 algorithm; 2.5. Use the private key of the OTA system cloud platform to sign the digest value sha-abstract to obtain the signature digest value sign-sha-abstract; 2.6. Encrypt the key pair generated in step 2.1 using the T-Box public key stored in the OTA system to obtain encry-keys; 3. Configure nginx to expose the access path of the encrypted upgrade package. When configuring nginx for the SSL certificate, use the server certificate obtained in step 1.

[0036] III. Collaborative Signature Verification and Decryption between Vehicle Terminal T-Box and Controller: 1. After creating the upgrade task, the OTA cloud platform issues upgrade commands via the vehicle network protocol, sending the following core data: 1.1 Upgrade packages encrypted with key pairs - distributed via URL links; 1.2 The upgrade package signature value, encrypted with the terminal's public key and signed by the platform, is distributed as a string. 1.3. Key pairs encrypted with the terminal's public key - distributed as strings; After receiving the upgrade command, the vehicle terminal T-Box completes data forwarding through the following steps: 2.1 The T-Box first uses the saved OTA cloud platform public key to verify the encrypted digest of the signature. If the verification is successful, it decrypts the signature value using its own private key. If the verification fails, it returns failure directly. If the decryption is successful, it proceeds to the next step; otherwise, it returns failure. 2.2 The T-Box decrypts the encrypted key pair. If decryption is successful, proceed to the next step; otherwise, return failure. 2.3 The T-Box forwards the plaintext key pair keys1, the encrypted upgrade package URL link, and the plaintext digest value abstract-package1 to the upgrade controller via the CAN line; 3. After the controller to be upgraded receives the data forwarded by the T-Box, the upgrade is completed through the following steps: 3.1 Download the complete encrypted upgrade package via the received URL link, and calculate the upgrade package digest value -abstract-package2 using the SHA256 algorithm; 3.2. Compare the received abstract value abstract-package1 with the calculated abstract value abstract-package2. If they are equal, proceed to the next step; otherwise, return failure. 3.3. Decrypt the upgrade package using the received keys. If decryption is successful, use the upgrade package to perform the upgrade; otherwise, return failure.

[0037] This invention mainly solves the PKI encryption and decryption problem in the OTA upgrade process of network-connected controllers by using the vehicle terminal T-Box to decrypt the key pair, forward the document key pair, and digest value, and the controller to download upgrade data, calculate the digest, and verify the signature itself.

[0038] The steps of the various methods described above are only for clarity. In practice, they can be combined into one step or some steps can be split into multiple steps. As long as they include the same logical relationship, they are all within the protection scope of this invention. Adding insignificant modifications or introducing insignificant designs to the algorithm or process, without changing the core design of the algorithm and process, are also within the protection scope of this invention.

[0039] Another embodiment of the present invention relates to an OTA upgrade system for a network-enabled controller. The implementation details of the OTA upgrade system for a network-enabled controller in this embodiment are described below. The following implementation details are provided for ease of understanding and are not essential for implementing this solution. The OTA upgrade system for a network-enabled controller in this embodiment includes: The OTA cloud platform is used to encrypt the upgrade package of the network-enabled controller using a preset key pair according to the upgrade request sent by the vehicle terminal T-Box, and save the encrypted upgrade package to the target path of the upgrade package server; The public key of the vehicle terminal T-Box is used to encrypt the preset key pair, and the encrypted preset key pair is sent to the vehicle terminal T-Box in the form of a string along with the target path of the upgrade package server. The vehicle terminal T-Box is used to decrypt using its own private key to obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller. The network-enabled controller is used to download the encrypted upgrade package from the target path of the upgrade package server and decrypt it using a preset key pair to complete the OTA upgrade.

[0040] It is not difficult to see that this embodiment is a system embodiment corresponding to the above method embodiments, and this embodiment can be implemented in conjunction with the above method embodiments. The relevant technical details and technical effects mentioned in the above embodiments are still valid in this embodiment, and will not be repeated here to reduce repetition. Accordingly, the relevant technical details mentioned in this embodiment can also be applied to the above embodiments.

[0041] It is worth mentioning that all modules involved in this embodiment are logical modules. In practical applications, a logical unit can be a physical unit, a part of a physical unit, or a combination of multiple physical units. Furthermore, to highlight the innovative aspects of this invention, this embodiment does not introduce units that are not closely related to solving the technical problem proposed by this invention; however, this does not mean that other units are absent from this embodiment.

[0042] Another embodiment of the present invention relates to a computer device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the OTA upgrade method for the networkable controller in the above embodiments.

[0043] The memory and processor are connected via a bus, which can include any number of interconnecting buses and bridges, connecting various circuits of one or more processors and memories. The bus can also connect various other circuits, such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and will not be described further herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by the processor is transmitted over the wireless medium via an antenna, which further receives data and transmits it to the processor.

[0044] The processor manages the bus and general processing, and also provides various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. Memory is used to store data used by the processor during operation.

[0045] Another embodiment of the present invention relates to a computer-readable storage medium storing a computer program. When executed by a processor, the computer program implements the method embodiments described above.

[0046] That is, those skilled in the art will understand that all or part of the steps in the methods of the above embodiments can be implemented by a program instructing related hardware. This program is stored in a storage medium and includes several instructions to cause a device (which may be a microcontroller, chip, etc.) or processor to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0047] Those skilled in the art will understand that the above embodiments are specific embodiments for implementing the present invention, and in practical applications, various changes can be made to them in form and detail without departing from the spirit and scope of the present invention.

Claims

1. An OTA upgrade method for a network-connected controller, characterized in that, The method includes: The OTA cloud platform encrypts the upgrade package of the network-connected controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, and saves the encrypted upgrade package to the target path of the upgrade package server; The OTA cloud platform uses the public key of the vehicle terminal T-Box to encrypt the preset key pair, and sends the encrypted preset key pair as a string along with the target path of the upgrade package server to the vehicle terminal T-Box. The vehicle terminal T-Box uses its own private key to decrypt and obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller. The network-connected controller downloads the encrypted upgrade package from the target path of the upgrade package server and decrypts it using a preset key pair to complete the OTA upgrade.

2. The OTA upgrade method for a network-enabled controller according to claim 1, characterized in that, The OTA cloud platform uses the public key of the vehicle terminal T-Box to encrypt a preset key pair, and sends the encrypted preset key pair as a string along with the target path of the upgrade package server to the vehicle terminal T-Box, including: The OTA cloud platform uses a preset encryption algorithm to generate a digest value for the encrypted upgrade package, and uses the public key of the vehicle terminal T-Box to encrypt the digest value, and uses its own private key to sign the encrypted digest value to obtain a signed digest value. The encrypted preset key pair is sent as a string along with the signature digest value and the target path of the upgrade package server to the vehicle terminal T-Box.

3. The OTA upgrade method for a network-enabled controller according to claim 2, characterized in that, The vehicle-mounted terminal T-Box uses its own private key to decrypt and obtain a preset key pair, and sends the preset key pair and the target path of the upgrade package server to the network-enabled controller, including: The vehicle terminal T-Box uses the public key of the OTA cloud platform to verify the signature digest value. If the verification is successful, it uses its own private key to decrypt the encrypted digest to obtain the digest value of the encrypted upgrade package. The system uses its own private key to decrypt and obtain a preset key pair. It then sends the preset key pair, the target path of the upgrade package server, and the digest value of the encrypted upgrade package to the network-enabled controller.

4. The OTA upgrade method for a network-enabled controller according to claim 3, characterized in that, The network-enabled controller downloads the encrypted upgrade package from the target path of the upgrade package server and decrypts it using a preset key pair to complete the OTA upgrade, including: The network-enabled controller downloads the encrypted upgrade package from the target path of the upgrade package server and generates a digest value of the encrypted upgrade package using a preset encryption algorithm; Compare the generated digest value with the digest value sent by the vehicle terminal T-Box; If the generated digest value is equal to the digest value sent by the vehicle terminal T-Box, the upgrade package is obtained by decrypting it using a preset key pair to complete the OTA upgrade.

5. The OTA upgrade method for a network-enabled controller according to claim 4, characterized in that, Before the OTA cloud platform encrypts the upgrade package of the network-enabled controller using a preset key pair based on the upgrade request sent by the vehicle terminal T-Box, it also includes: Each time the vehicle terminal T-Box is powered on, it checks whether a public key certificate exists inside. If it does not exist, it calls the basic cryptographic library to generate a key pair, combines it with the unique identifier of the vehicle terminal T-Box, generates a certificate signing request, and sends it to the OTA cloud platform. The OTA cloud platform forwards the certificate signing request to the digital certificate authentication system to generate a public key certificate for the vehicle terminal T-Box; After the digital certificate authentication system returns the generated public key certificate to the OTA cloud platform, the OTA cloud platform saves the generated public key certificate and sends its own public key certificate along with the generated public key certificate to the vehicle terminal T-Box. This enables the OTA cloud platform to use the vehicle terminal T-Box's public key to encrypt the preset key pair and enables the vehicle terminal T-Box to use the OTA cloud platform's public key to verify the signature digest value.

6. An OTA upgrade system for a network-connected controller, characterized in that, The system includes: The OTA cloud platform is used to encrypt the upgrade package of the network-enabled controller using a preset key pair according to the upgrade request sent by the vehicle terminal T-Box, and save the encrypted upgrade package to the target path of the upgrade package server; The public key of the vehicle terminal T-Box is used to encrypt the preset key pair, and the encrypted preset key pair is sent to the vehicle terminal T-Box in the form of a string along with the target path of the upgrade package server. The vehicle terminal T-Box is used to decrypt using its own private key to obtain a preset key pair, and then sends the preset key pair and the target path of the upgrade package server to the network-enabled controller. The network-enabled controller is used to download the encrypted upgrade package from the target path of the upgrade package server and decrypt it using a preset key pair to complete the OTA upgrade.

7. A computer device, characterized in that, include: At least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the OTA upgrade method of the networkable controller as described in any one of claims 1 to 5.

8. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the OTA upgrade method for a networkable controller as described in any one of claims 1 to 5.

Images