Vehicle remote upgrading method and device and vehicle

Abstract

The invention provides a vehicle remote upgrading method and device and a vehicle, which are applied to the technical field of automobile information security, and the method comprises the following steps: firstly encrypting an original upgrading package through a dynamic symmetric algorithm key to obtain an encrypted upgrading package, carrying out Hash algorithm operation on the original upgrading package to obtain a first Hash value, and then, carrying out Hash algorithm operation on the original upgrading package to obtain a second Hash value; performing asymmetric algorithm private key encryption on spliced data of the symmetric algorithm secret key and the first hash value to obtain a digital signature, encrypting the digital signature and the symmetric algorithm secret key by using a vehicle-side asymmetric algorithm public key to obtain a digital envelope, packaging the digital envelope and an encrypted upgrade package into a transmission data package, and finally, sending the transmission data package to the vehicle-side asymmetric algorithm public key. And the transmission data packet is transmitted to the vehicle-mounted networking terminal, so that the vehicle-mounted networking terminal performs asymmetric signature verification and symmetric decryption based on the transmission data packet, and software upgrading corresponding to the upgrading packet is realized. According to the method, the symmetric algorithm key and the hash value digital signature are jointly packaged into the digital envelope, so that the tampering risk of the upgrade package is reduced.

Description

Technical Field

[0001] This application relates to the field of automotive information security technology, specifically to a method, device, and vehicle for remote vehicle upgrade. Background Technology

[0002] Traditional vehicle software upgrades rely on manual offline operations, which are inefficient and costly, making it difficult to meet the rapid iteration needs of modern automobiles. With the rapid development of intelligent connected vehicles, OTA (Over-The-Air) upgrade technology pushes software update packages to vehicles via wireless networks, enabling remote, fast, and automated software updates.

[0003] However, current OTA upgrade security solutions generally suffer from insufficient security. For example, using only symmetric encryption algorithms for keys can easily lead to leakage and lacks integrity verification. If only hash algorithms are used for signatures, hash forgery cannot be prevented. PKI-based certificate chain solutions face challenges such as complex deployment and high management costs. In other words, existing OTA upgrade security solutions cannot simultaneously meet the requirements of confidentiality, integrity, and authenticity, and they also suffer from insecure key management and non-compliance with automotive cybersecurity regulations and vehicle software upgrade regulations.

[0004] Therefore, there is a need to provide a method for remote vehicle upgrades that, while complying with regulations, addresses the issues of key replacement and hash forgery, and simultaneously meets the requirements of confidentiality, integrity, and authenticity. Summary of the Invention

[0005] In view of this, this application provides a method, device and vehicle for remote vehicle upgrade, which solves the technical problems that existing OTA upgrade security solutions cannot simultaneously meet the requirements of confidentiality, integrity and authenticity, and have insecure key management, and do not comply with automotive network security regulations and vehicle software upgrade regulations.

[0006] As a first aspect of this application, this application provides a vehicle remote upgrade method, applied to a cloud-based remote upgrade server, wherein the cloud-based remote upgrade server is communicatively connected to an in-vehicle network terminal, and the method includes: The original upgrade package is encrypted using a dynamic symmetric algorithm key to obtain an encrypted upgrade package; Perform a hash algorithm operation on the original upgrade package to obtain a first hash value; The concatenation of the symmetric algorithm key and the first hash value is encrypted with an asymmetric algorithm private key to obtain a digital signature. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope; Package the digital envelope and the encryption upgrade package into a transmission data packet; The data packet is transmitted to the vehicle-mounted network terminal, so that the vehicle-mounted network terminal can perform asymmetric signature verification and symmetric decryption based on the data packet to realize the software upgrade corresponding to the upgrade package.

[0007] In one possible implementation, while encrypting the concatenated data of the symmetric algorithm key and the first hash value with an asymmetric algorithm private key to obtain a digital signature, a cloud timestamp is also obtained. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope, comprising: The digital signature, the symmetric algorithm key, and the cloud timestamp are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope.

[0008] In one possible implementation, while encrypting the concatenated data of the symmetric algorithm key and the first hash value with an asymmetric algorithm private key to obtain a digital signature, a cloud-based one-way incrementing sequence number is also obtained. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope, comprising: The digital signature, the symmetric algorithm key, and the cloud-based one-way incrementing sequence number are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope.

[0009] As a second aspect of this application, this application provides a method for remotely upgrading a vehicle, applied to an in-vehicle network terminal, wherein the in-vehicle network terminal is communicatively connected to a cloud-based remote upgrade server, and the method includes: The system receives a data packet transmitted from the cloud-based remote upgrade server. This data packet is generated by the cloud-based remote upgrade server packaging a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server encrypting a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud-based one-way incrementing sequence number using the vehicle-side asymmetric algorithm public key. The digital signature is obtained by the cloud-based remote upgrade server encrypting the concatenation of the symmetric algorithm key and a first hash value using the asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package. Based on the transmitted data packets, asymmetric signature verification and symmetric decryption are performed to achieve the software upgrade corresponding to the upgrade package.

[0010] In one possible implementation, the asymmetric signature verification and symmetric decryption based on the transmitted data packet includes: The symmetric algorithm key and the digital envelope, which are encrypted with the asymmetric algorithm public key using the asymmetric algorithm private key at the vehicle end, are decrypted to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number. The encrypted upgrade package transmitted by the cloud-based remote upgrade server is decrypted using the symmetric algorithm key to obtain the original upgrade package; Perform a hash algorithm operation on the decrypted original upgrade package to obtain a second hash value; The digital signature is decrypted using the public key of the asymmetric algorithm of the cloud-based remote upgrade server to obtain the first hash value; If the first hash value matches the second hash value, the software upgrade corresponding to the upgrade package is executed; otherwise, a security alarm is triggered and the upgrade process is terminated.

[0011] In one possible implementation, after receiving the data transmission packet from the cloud-based remote upgrade server, the method further includes: Verify the integrity of the transmitted data packet. If the transmitted data packet is intact, separate the encrypted upgrade packet and the digital envelope from the transmitted data packet; otherwise, trigger a security alarm and terminate the upgrade process.

[0012] In one possible implementation, the vehicle remote upgrade method provided in the second aspect of this application further includes: Calculate the time difference between the current vehicle system time and the cloud timestamp; If the time difference is within the preset time, the software upgrade process continues; otherwise, a security alarm is triggered and the upgrade process is terminated.

[0013] In one possible implementation, the vehicle remote upgrade method provided in the second aspect of this application further includes: Determine whether the cloud-based one-way incrementing serial number is greater than the latest one-way incrementing serial number on the vehicle. If so, continue the software upgrade process; otherwise, trigger a security alarm and terminate the upgrade process.

[0014] As a third aspect of this application, this application provides a vehicle remote upgrade device applied to a cloud-based remote upgrade server, wherein the cloud-based remote upgrade server is communicatively connected to an in-vehicle network terminal, and the device includes: An encryption module is used to encrypt the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package; perform a hash algorithm operation on the original upgrade package to obtain a first hash value; encrypt the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature; and encrypt the digital signature and the symmetric algorithm key using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. A packaging module is used to package the digital envelope and the encryption upgrade package into a transmission data packet; The data transmission module is used to transmit the data packet to the vehicle-mounted network terminal, so that the vehicle-mounted network terminal can perform asymmetric signature verification and symmetric decryption based on the data packet to realize the software upgrade corresponding to the upgrade package.

[0015] As a fourth aspect of this application, this application provides a vehicle remote upgrade device applied to an in-vehicle network terminal, wherein the in-vehicle network terminal is communicatively connected to a cloud-based remote upgrade server, and the method includes: The data receiving module is used to receive transmission data packets transmitted by the cloud-based remote upgrade server. The transmission data packets are generated by the cloud-based remote upgrade server by packaging a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server using the vehicle-side asymmetric algorithm public key to encrypt a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud-based one-way incrementing sequence number. The digital signature is obtained by encrypting the concatenation of the symmetric algorithm key and a first hash value using an asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package. The data decryption module is used to perform asymmetric signature verification and symmetric decryption based on the transmitted data packets, so as to realize the software upgrade corresponding to the upgrade package.

[0016] As a fifth aspect of this application, this application provides a vehicle comprising: The vehicle remote upgrade device described in the fourth aspect.

[0017] Based on the above, the vehicle remote upgrade method provided in this application encrypts the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package, thereby improving the confidentiality of the upgrade package. A hash algorithm is then performed on the original upgrade package to obtain a first hash value, ensuring the integrity of the upgrade package. The concatenated data of the symmetric algorithm key and the first hash value is then encrypted using an asymmetric algorithm private key to obtain a digital signature. This ensures a strong correlation between the symmetric algorithm key and the first hash value, improving the authenticity of the upgrade package and preventing attackers from replacing the encrypted upgrade package and signature file. The digital signature and the symmetric algorithm key are then encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. This digital envelope and the encrypted upgrade package are packaged into a transmission data packet, which is then transmitted to the vehicle-mounted network terminal. The vehicle-mounted network terminal then performs asymmetric signature verification and symmetric decryption based on the transmission data packet, thereby achieving the software upgrade corresponding to the upgrade package. Attached Figure Description

[0018] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] Figure 1 The diagram shown is a flowchart of a vehicle remote upgrade method provided in an embodiment of this application.

[0020] Figure 2 The diagram shown is a flowchart of another vehicle remote upgrade method provided in an embodiment of this application.

[0021] Figure 3 The diagram shown is a flowchart of another vehicle remote upgrade method provided in an embodiment of this application.

[0022] Figure 4 The diagram shown is a flowchart of another vehicle remote upgrade method provided in an embodiment of this application.

[0023] Figure 5 The diagram shown is a flowchart of another vehicle remote upgrade method provided in an embodiment of this application.

[0024] Figure 6 The diagram shown is a structural block diagram of a vehicle remote upgrade device provided in an embodiment of this application.

[0025] Figure 7 The diagram shown is a structural block diagram of another vehicle remote upgrade device provided in an embodiment of this application.

[0026] Figure 8 The diagram shown is a structural block diagram of an electronic device provided in an embodiment of this application. Detailed Implementation

[0027] Unless otherwise defined, the technical or scientific terms used in the embodiments of this specification shall have the ordinary meaning understood by one of ordinary skill in the art to which this specification pertains. The terms "first," "second," and similar terms used in the embodiments of this specification do not indicate any order, quantity, or importance, but are merely used to avoid confusion of constituent elements.

[0028] The technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this specification, and not all embodiments. Based on the embodiments in this specification, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this specification.

[0029] Automakers or their suppliers periodically upgrade the corresponding software or firmware for vehicles and compile the new versions of software or firmware into upgrade packages to ensure that the corresponding software or firmware for vehicles can continuously provide customers with stable performance.

[0030] Since manual upgrades are inefficient and costly, current technologies typically involve uploading upgrade packages to a cloud-based remote upgrade server. This server manages the upgrade packages, handling tasks such as storage, version control, and distribution. Remote upgrade operators select specific vehicles or groups of vehicles requiring updates and issue update tasks. The upgrade package is then transmitted to the selected vehicles or groups for download and firmware updates.

[0031] However, directly transmitting the upgrade package to the corresponding vehicle, or encrypting only the upgrade package with a simple symmetric algorithm key, can easily lead to the upgrade package being intercepted and tampered with. This can cause certain functions of the vehicle to malfunction after the tampered upgrade software or firmware is installed, resulting in the leakage of user personal information. In severe cases, this could lead to serious traffic accidents, endangering the safety of passengers in the vehicle and other road users.

[0032] To address the aforementioned technical problem, this application provides a method for remote vehicle upgrades, applied to a cloud-based remote upgrade server. The cloud-based remote upgrade server is communicatively connected to an in-vehicle network terminal. Figure 1 In an exemplary embodiment of this application, the vehicle remote upgrade method may include the following steps: S10: Encrypt the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package.

[0033] In this embodiment and subsequent embodiments, the original upgrade package refers to the unencrypted upgrade package file, which includes files and metadata used to update vehicle software or firmware. After the cloud-based remote upgrade server obtains the original upgrade package to be upgraded, it can encrypt the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package. There are various symmetric algorithm keys, such as the AES-128 key. This application does not limit the specific selection of the symmetric algorithm key.

[0034] S20: Perform a hash algorithm operation on the original upgrade package to obtain the first hash value.

[0035] To ensure the integrity and security of the data in the original upgrade package file, a hash value of the original upgrade package can be generated by a hash algorithm before encrypting the original upgrade package, such as the SHA-256 hash algorithm or the SHA-512 hash algorithm. This application does not limit the specific selection of the hash algorithm. In order to distinguish it from the hash value of the original upgrade package calculated by the subsequent vehicle networking terminal, the first hash value represents the hash value of the original upgrade package calculated by the cloud remote upgrade server.

[0036] S30: Encrypt the concatenated data of the symmetric algorithm key and the first hash value using the asymmetric algorithm private key to obtain the digital signature.

[0037] Specifically, the symmetric algorithm key and the first hash value can be concatenated, for example, using a preset concatenation method, such as concatenation before and after the hash value, to form concatenated data. Then, the cloud-based remote upgrade server can encrypt the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature. In this embodiment, by concatenating the symmetric algorithm key and the first hash value, the hash value of the original upgrade package can be obscured, i.e., the first hash value can be obscured. This ensures a strong correlation between the symmetric algorithm key and the first hash value, improves the authenticity of the upgrade package, prevents attackers from replacing the encrypted upgrade package and signature file, and solves the problem of digital signatures being easily tampered with.

[0038] S40: Use the vehicle-side asymmetric algorithm public key to encrypt the digital signature and the symmetric algorithm key to obtain a digital envelope.

[0039] In some implementations, during the vehicle manufacturing process, the asymmetric algorithm key pair (public key and private key) can be pre-generated on the vehicle side, and the public key can be stored in the cloud and associated with the vehicle's unique identifier (such as VIN number). When the cloud-based remote upgrade server needs to upgrade the vehicle's software or firmware, before sending the digital signature to the vehicle's network terminal, the cloud-based remote upgrade server directly uses the stored vehicle-side asymmetric algorithm public key to encrypt the digital signature and the symmetric algorithm key to obtain a digital envelope.

[0040] In some implementations, when a vehicle's in-vehicle network terminal communicates with a cloud-based remote upgrade server for the first time, the in-vehicle network terminal sends its vehicle-side asymmetric algorithm public key to the cloud-based remote upgrade server. Upon receiving the vehicle-side asymmetric algorithm public key, the cloud-based remote upgrade server associates and stores it with the vehicle's unique identifier (such as the VIN number). When the cloud-based remote upgrade server needs to upgrade the vehicle's software or firmware, before sending the digital signature to the in-vehicle network terminal, the cloud-based remote upgrade server uses the stored vehicle-side asymmetric algorithm public key to encrypt the digital signature and the symmetric algorithm key, obtaining a digital envelope.

[0041] In some implementations, a secure communication channel can be established between the cloud and the vehicle, such as a two-way authentication channel like HTTPS, TLS, and SSL. This application does not limit the specific selection of the secure communication channel. The vehicle-mounted network terminal sends the vehicle's asymmetric algorithm public key to the cloud remote upgrade server through a preset communication channel. After receiving the vehicle's asymmetric algorithm public key, the cloud remote upgrade server associates and stores it with the vehicle's unique identifier (such as the VIN number). When the cloud remote upgrade server needs to upgrade the vehicle's software or firmware, before sending the digital signature to the vehicle-mounted network terminal, the cloud remote upgrade server uses the stored vehicle's asymmetric algorithm public key to encrypt the digital signature and the symmetric algorithm key to obtain a digital envelope.

[0042] By using any of the three implementation methods described above, the vehicle-side asymmetric algorithm public key can be transmitted to the cloud-based remote upgrade server. When the cloud-based remote upgrade server needs to upgrade the vehicle's software or firmware, it can use the vehicle-side asymmetric algorithm public key to encrypt the digital signature and the symmetric algorithm key to obtain a digital envelope. This digital envelope can then be directly decrypted by the vehicle-side in-vehicle network terminal upon receiving it.

[0043] S50: Package the digital envelope and the encryption upgrade package into a transmission data packet.

[0044] In order for the digital envelope and the encrypted upgrade package to arrive at the vehicle at the same time, the cloud-based remote upgrade server will usually package the digital envelope and the encrypted upgrade package into a transmission data packet.

[0045] S60: Transmits the data packet to the vehicle network terminal, enabling the vehicle network terminal to perform asymmetric signature verification and symmetric decryption based on the data packet, thereby achieving the software upgrade corresponding to the upgrade package.

[0046] To ensure that data packets are not intercepted or tampered with during transmission, the cloud-based remote upgrade server transmits the data packets to the vehicle's in-vehicle network terminal via a secure two-way authentication communication channel, such as HTTPS, TLS, and SSL. After receiving the data packets from the cloud-based remote upgrade server, the in-vehicle network terminal can perform asymmetric signature verification and symmetric decryption to obtain the original upgrade package. The vehicle controller can then upgrade the corresponding software based on the original upgrade package.

[0047] In some embodiments of this application, the original upgrade package is encrypted using a dynamic symmetric algorithm key to obtain an encrypted upgrade package. A hash algorithm is then performed on the original upgrade package to obtain a first hash value. The concatenated data of the symmetric algorithm key and the first hash value is then encrypted using an asymmetric algorithm private key to obtain a digital signature. The digital signature and the symmetric algorithm key are then encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. The digital envelope and the encrypted upgrade package are packaged into a transmission data packet, which is then transmitted to the vehicle-mounted network terminal. This allows the vehicle-mounted network terminal to perform asymmetric signature verification and symmetric decryption based on the transmission data packet, thereby achieving the software upgrade corresponding to the upgrade package.

[0048] This embodiment uses a dynamic symmetric algorithm key to encrypt the original upgrade package, which improves the confidentiality of the upgrade package. A hash algorithm is performed on the original upgrade package to ensure its integrity. The concatenated data of the symmetric algorithm key and the first hash value is encrypted with an asymmetric algorithm private key to obtain a digital signature. This ensures a strong correlation between the symmetric algorithm key and the first hash value, improving the authenticity of the upgrade package and preventing attackers from replacing the encrypted upgrade package and signature file. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. The digital envelope and the encrypted upgrade package are packaged into a transmission data packet, which is then transmitted to the vehicle-mounted network terminal. The vehicle-mounted network terminal then performs asymmetric signature verification and symmetric decryption based on the transmission data packet, realizing the software upgrade corresponding to the upgrade package.

[0049] In some embodiments of this application, in the above-described vehicle remote upgrade method, while encrypting the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature, a cloud timestamp can also be obtained. The cloud timestamp refers to the timestamp generated in the cloud when the digital signature is generated. At this time, the vehicle-side asymmetric algorithm public key can be used to encrypt the digital signature, the symmetric algorithm key, and the cloud timestamp to obtain a digital envelope. That is, the generated digital envelope can include the digital signature, the symmetric algorithm key, and the cloud timestamp.

[0050] In some embodiments of this application, in the above-described vehicle remote upgrade method, while encrypting the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature, a cloud-based one-way incrementing sequence number can also be obtained. This cloud-based one-way incrementing sequence number refers to the one-way incrementing sequence number generated in the cloud when the digital signature is generated. At this point, the vehicle-side asymmetric algorithm public key can be used to encrypt the digital signature, the symmetric algorithm key, and the cloud-based one-way incrementing sequence number to obtain a digital envelope. That is, the generated digital envelope can include the digital signature, the symmetric algorithm key, and the cloud-based one-way incrementing sequence number.

[0051] In some embodiments of this application, in the above-described vehicle remote upgrade method, while encrypting the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature, a cloud timestamp and a cloud one-way incrementing sequence number can also be obtained simultaneously. At this point, the vehicle-side asymmetric algorithm public key can be used to encrypt the digital signature, the symmetric algorithm key, the cloud timestamp, and the cloud one-way incrementing sequence number to obtain a digital envelope. That is, the generated digital envelope may include the digital signature, the symmetric algorithm key, the cloud timestamp, and the cloud one-way incrementing sequence number.

[0052] In the three embodiments described above, regardless of whether a cloud timestamp or a cloud one-way incrementing sequence number is added to the digital envelope, or both a cloud timestamp and a cloud one-way incrementing sequence number are added simultaneously, after the vehicle-mounted network terminal receives the digital envelope, it can decrypt the digital envelope to obtain the cloud timestamp and the cloud one-way incrementing sequence number. Furthermore, by adding verification of the timestamp and the one-way incrementing sequence number, it can prevent the upgrade package received by the vehicle from timeout or the upgrade package from being sent repeatedly to a certain vehicle, thereby improving the timeliness of vehicle-mounted verification.

[0053] In some embodiments of this application, for vehicle networking terminals, this application also provides a method for remote vehicle upgrades. In exemplary embodiments of this application, such as... Figure 1 As shown, the vehicle remote upgrade method may include the following steps: S70: Receives data packets transmitted from the cloud-based remote upgrade server. The data packets are transmitted after the cloud-based remote upgrade server packages a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server using the vehicle-side asymmetric algorithm public key to encrypt the digital signature, symmetric algorithm key, cloud timestamp, and cloud one-way incrementing sequence number. The digital signature is obtained by the cloud-based remote upgrade server using the asymmetric algorithm private key to encrypt the concatenation of the symmetric algorithm key and the first hash value. The encrypted upgrade package is obtained by the cloud-based remote upgrade server using the dynamic symmetric algorithm key to encrypt the original upgrade package. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package.

[0054] S80: Based on the transmission data packets, it performs asymmetric signature verification and symmetric decryption to realize the software upgrade corresponding to the upgrade package.

[0055] In the above-described method for remote vehicle upgrades of in-vehicle network terminals, the specific generation and transmission process of data packets can be implemented with reference to the embodiment of the above-described method for remote vehicle upgrades of cloud-based remote upgrade servers, and will not be repeated here.

[0056] In some embodiments of this application, such as Figure 2 As shown, step S80 above, which involves asymmetric signature verification and symmetric decryption based on the transmitted data packets, may specifically include the following steps: S81: Use the vehicle-side asymmetric algorithm private key to decrypt the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key, to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number.

[0057] By encrypting the concatenated data of the symmetric algorithm key and the first hash value using the asymmetric algorithm private key to obtain the digital signature, the cloud timestamp and the cloud one-way incrementing sequence number can also be obtained simultaneously. S82: Use a symmetric algorithm key to decrypt the encrypted upgrade package transmitted by the remote upgrade server in the cloud using a symmetric algorithm to obtain the original upgrade package.

[0058] Similarly, the cloud-based remote upgrade server and the vehicle-mounted network terminal can transmit the dynamic symmetric algorithm key to the vehicle-mounted network terminal through the communication method described above. The vehicle-mounted network terminal uses the symmetric algorithm key to decrypt the encrypted upgrade package transmitted by the cloud-based remote upgrade server using the symmetric algorithm to obtain the content of the original upgrade package.

[0059] S83: Perform a hash algorithm operation on the decrypted original upgrade package to obtain a second hash value.

[0060] By performing a hash algorithm on the decrypted original upgrade package, a second hash value can be obtained. The original upgrade package can be determined whether it has been tampered with by checking whether the second hash value matches the first hash value.

[0061] S84: Use the public key of the asymmetric algorithm of the cloud-based remote upgrade server to decrypt the digital signature to obtain the first hash value.

[0062] Understandably, if the original upgrade package and digital signature are not tampered with during transmission, the first hash value obtained by decrypting the digital signature using the public key of the asymmetric algorithm of the cloud-based remote upgrade server should be the same as the first hash value calculated from the original upgrade package.

[0063] S85: If the first hash value matches the second hash value, then execute the software upgrade corresponding to the upgrade package; otherwise, trigger a security alarm and terminate the upgrade process.

[0064] If the second hash value recalculated by the vehicle-mounted network terminal matches the first hash value calculated by the cloud-based remote upgrade server before encryption, it can be confirmed that the original upgrade package has not been tampered with, and the software upgrade corresponding to the upgrade package can continue. If the first hash value and the second hash value do not match, there is a high probability that the original upgrade package has been tampered with, and continuing to execute the software upgrade process poses a risk, triggering a security alarm and terminating the upgrade process.

[0065] In addition, a lifecycle management process can be implemented to protect the dynamically generated symmetric algorithm key and its memory residency during each software or firmware upgrade, and to immediately destroy the temporarily generated dynamic symmetric algorithm key after each successful upgrade.

[0066] In some embodiments of this application, such as Figure 3 As shown, after receiving the data packet transmitted by the cloud-based remote upgrade server in step S70 above, the above-mentioned vehicle remote upgrade method may further include the following steps: S800: Verify the integrity of the transmitted data packet. If the transmitted data packet is complete, separate the encrypted upgrade packet and the digital envelope from the transmitted data packet. Otherwise, trigger a security alarm and terminate the upgrade process.

[0067] The integrity of the transmitted data packet can be verified by calculating the signature value at the vehicle end. When the signature values ​​are the same, the transmitted data packet is complete. Then, the encrypted upgrade packet and the digital envelope in the transmitted data packet are separated, and the software upgrade process continues. If the signature value is different from the signature value sent by the cloud remote upgrade server, that is, if the transmitted data packet is incomplete, the upgrade cannot be completed. In this case, it is not necessary to continue to decrypt the symmetric algorithm key and the digital envelope after encryption with the asymmetric algorithm public key, thereby improving the timeliness of vehicle end verification.

[0068] In some embodiments of this application, such as Figure 4 As shown, in step S81 above, the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key using the vehicle's private key of the asymmetric algorithm are decrypted to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number. The above vehicle remote upgrade method may further include the following steps: S811: Calculate the time difference between the current vehicle system time and the cloud timestamp.

[0069] When the vehicle-side asymmetric algorithm private key is used to decrypt the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key, the current vehicle-side system time is obtained. That is, the vehicle-mounted network terminal obtains both the current vehicle-side system time and the cloud timestamp. Then, by calculating the time difference between the current vehicle-side system time and the cloud timestamp, it can be determined whether there is a risk of digital signature being tampered with.

[0070] S812: If the time difference is within the preset time, the software upgrade process will continue; otherwise, a security alarm will be triggered and the upgrade process will be terminated.

[0071] If the time difference between the current vehicle system time and the cloud timestamp is within a preset time, it indicates that the possibility of the upgrade package being tampered with is extremely low, and the vehicle can continue the software upgrade process. Otherwise, it is considered that the upgrade package has been tampered with, and to prevent the vehicle from performing unnecessary work, a security alarm can be triggered directly and the upgrade process terminated. Simultaneously, the vehicle can communicate with the cloud-based remote upgrade server through the in-vehicle network terminal and send an upgrade failure notification to the cloud-based remote upgrade server; the notification information may include a transmission timeout.

[0072] In some embodiments of this application, such as Figure 5 As shown, in step S81 above, the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key using the vehicle's private key of the asymmetric algorithm are decrypted to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number. The above vehicle remote upgrade method may further include the following steps: S813: Determine whether the cloud-based one-way incrementing serial number is greater than the latest one-way incrementing serial number on the vehicle. If so, continue the software upgrade process; otherwise, trigger a security alarm and terminate the upgrade process.

[0073] While decrypting the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key using the vehicle's private key, the latest one-way incrementing sequence number on the vehicle is obtained. This means the vehicle-mounted network terminal simultaneously receives both the cloud-based one-way incrementing sequence number and the vehicle's latest one-way incrementing sequence number. By comparing their values, it can be determined whether the cloud has sent the same upgrade package to the vehicle repeatedly. If the cloud-based one-way incrementing sequence number is greater than the vehicle's latest one-way incrementing sequence number, it indicates that the cloud sent a non-duplicate upgrade package to the vehicle, and the vehicle can continue the software upgrade process. Otherwise, it indicates that the cloud sent a duplicate upgrade package to the vehicle, and to prevent the vehicle from performing invalid work, a security alarm can be triggered and the upgrade process terminated. Simultaneously, the vehicle can communicate with the cloud-based remote upgrade server through the vehicle-mounted network terminal and send an upgrade failure notification to the cloud-based remote upgrade server. The notification information may include a duplicate sequence number.

[0074] In some embodiments of this application, after decrypting the symmetric algorithm key and digital envelope encrypted with the asymmetric algorithm public key using the vehicle's asymmetric algorithm private key in step S81 to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number, the above-mentioned vehicle remote upgrade method may further include the following steps: S811: Calculate the time difference between the current vehicle system time and the cloud timestamp.

[0075] S812: If the time difference is within the preset time, the software upgrade process will continue; otherwise, a security alarm will be triggered and the upgrade process will be terminated.

[0076] S813: Determine whether the cloud-based one-way incrementing serial number is greater than the latest one-way incrementing serial number on the vehicle. If so, continue the software upgrade process; otherwise, trigger a security alarm and terminate the upgrade process.

[0077] In this application embodiment, the vehicle will continue to decrypt the encrypted upgrade package using a symmetric algorithm and decrypt the digital signature only when both of the following two software upgrade conditions are met: the time difference between the current vehicle system time and the cloud timestamp is within a preset time, and the cloud one-way incrementing sequence number is greater than the latest one-way incrementing sequence number of the vehicle. If either of the two upgrade conditions is not met, a security alarm will be triggered and the upgrade process will be terminated.

[0078] Exemplary device As a third aspect of this application, this is Figure 6 As shown, this application also provides a vehicle remote upgrade device for cloud-based remote upgrade servers. It includes: an encryption module 601, a packaging module 602, and a data transmission module 603, wherein... The encryption module 601 is used to encrypt the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package; perform a hash algorithm operation on the original upgrade package to obtain a first hash value; encrypt the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature; and encrypt the digital signature and the symmetric algorithm key using the vehicle-side asymmetric algorithm public key to obtain a digital envelope.

[0079] Packaging module 602 is used to package digital envelopes and encryption upgrade packages into transmission data packets.

[0080] The data transmission module 603 is used to transmit data packets to the vehicle network terminal, so that the vehicle network terminal can perform asymmetric signature verification and symmetric decryption based on the data packets to realize the software upgrade corresponding to the upgrade package.

[0081] The vehicle remote upgrade device provided in this application encrypts the original upgrade package using a dynamic symmetric algorithm key via an encryption module 601 to obtain an encrypted upgrade package. A hash algorithm is then performed on the original upgrade package to obtain a first hash value. The concatenated data of the symmetric algorithm key and the first hash value is encrypted using an asymmetric algorithm private key to obtain a digital signature. The digital signature and the symmetric algorithm key are then encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. A packaging module 602 packages the digital envelope and the encrypted upgrade package into a transmission data packet. Finally, a data transmission module 603 transmits the transmission data packet to the vehicle-mounted network terminal, enabling the vehicle-mounted network terminal to perform asymmetric signature verification and symmetric decryption based on the transmission data packet, thereby achieving the software upgrade corresponding to the upgrade package. Encrypting the original upgrade package using a dynamic symmetric algorithm key improves the confidentiality of the upgrade package. Performing a hash algorithm operation on the original upgrade package ensures its integrity. Encrypting the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature ensures a strong correlation between the symmetric algorithm key and the first hash value, improving the authenticity of the upgrade package and preventing attackers from replacing the encrypted upgrade package and signature file.

[0082] This embodiment relates to a vehicle remote upgrade device provided by a cloud-based remote upgrade server. It belongs to the same conceptual framework as the vehicle remote upgrade method provided by the cloud-based remote upgrade server in the aforementioned embodiments of this application. It can execute the vehicle remote upgrade method provided in any of the aforementioned embodiments of this application and possesses the corresponding functional units and beneficial effects of the vehicle remote upgrade method. Technical details not described in detail in this embodiment can be found in the specific processing content of the vehicle remote upgrade method provided in the aforementioned embodiments of this application, and will not be repeated here.

[0083] As a fourth aspect of this application, Figure 7 As shown, the application also provides a vehicle remote upgrade device for in-vehicle networking terminals. It includes: a data receiving module 701 and a data decryption module 702, wherein... The data receiving module 701 is used to receive transmission data packets transmitted by the cloud-based remote upgrade server. The transmission data packets are transmitted after the cloud-based remote upgrade server packages a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server using the vehicle-side asymmetric algorithm public key to encrypt a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud one-way incrementing sequence number. The digital signature is obtained by encrypting the concatenation of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package.

[0084] The data decryption module 702 is used to perform asymmetric signature verification and symmetric decryption based on the transmitted data packets, so as to realize the software upgrade corresponding to the upgrade package.

[0085] The vehicle remote upgrade device provided in this application receives a transmission data packet from a cloud-based remote upgrade server via a data receiving module 701. The transmission data packet is prepared by the cloud-based remote upgrade server by packaging a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server using the vehicle's asymmetric algorithm public key to encrypt a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud-based one-way incrementing sequence number. The digital signature is obtained by encrypting the concatenation of the symmetric algorithm key and a first hash value using an asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package. Then, the packaging module 602 packages the digital envelope and the encrypted upgrade package into a transmission data packet. Finally, the data decryption module 702 performs asymmetric signature verification and symmetric decryption based on the transmission data packet to achieve the software upgrade corresponding to the upgrade package.

[0086] This embodiment addresses a vehicle remote upgrade device for an in-vehicle network terminal. It shares the same conceptual framework as the vehicle remote upgrade method for an in-vehicle network terminal described in the aforementioned embodiments of this application. It can execute the vehicle remote upgrade method provided in any of the aforementioned embodiments of this application and possesses the corresponding functional units and beneficial effects of the vehicle remote upgrade method. Technical details not described in detail in this embodiment can be found in the specific processing content of the vehicle remote upgrade method provided in the aforementioned embodiments of this application, and will not be repeated here.

[0087] Exemplary vehicle As a fifth aspect of this application, this application provides a vehicle comprising: The vehicle remote upgrade device described in the fourth aspect.

[0088] Exemplary vehicle remote upgrade system As a sixth aspect of this application, this application provides a vehicle remote upgrade system, comprising: The cloud-based remote upgrade server, the vehicle remote upgrade device described in the third aspect, and the vehicle described in the fifth aspect.

[0089] Exemplary electronic devices As a seventh aspect of this application, this application also provides an electronic device. (Reference) Figure 8 This describes an electronic device according to embodiments of the present application.

[0090] Figure 8 The figure shows a structural block diagram of an electronic device according to an embodiment of the present application.

[0091] like Figure 8 As shown, the electronic device 8 includes one or more processors 801 and memory 802.

[0092] The processor 801 may be a central processing unit (CPU) or other form of processing unit with data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device 8 to perform desired functions.

[0093] The memory 802 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 801 may execute the program instructions to implement the vehicle remote upgrade methods of the various embodiments of this application described above, and / or other desired functions.

[0094] In one example, the electronic device 8 may also include an input device 803 and an output device 804, which are interconnected via a bus system and / or other forms of connection mechanism (not shown).

[0095] When the electronic device is a standalone device, the input device 803 can be a communication network connector for receiving the acquired input signals from the first device and the second device.

[0096] In addition, the input device 803 may also include, for example, a keyboard, a mouse, etc.

[0097] The output device 804 can output various information to the outside, including determined distance information, direction information, etc. The output device 804 may include, for example, a display, a speaker, a printer, and a communication network and its connected remote output devices, etc.

[0098] Of course, for the sake of simplicity, Figure 8 Only some of the components of the electronic device 8 relevant to this application are shown in this illustration; components such as buses, input / output interfaces, etc., are omitted. In addition, the electronic device 8 may include any other suitable components depending on the specific application.

[0099] Exemplary computer-readable storage media As an eighth aspect of this application, this application provides a computer-readable storage medium storing a computer program for performing the steps in the vehicle remote upgrade methods of the various embodiments described above.

[0100] Computer-readable storage media may take the form of any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may, for example, include, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatuses, or devices, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: electrical connections having one or more wires, portable disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0101] In addition to the methods and devices described above, embodiments of this application may also be computer program products, which include computer program information. When the computer program information is run by a processor, it causes the processor to execute the steps in the vehicle remote upgrade methods of various embodiments of this application.

[0102] Computer program products can be written in any combination of one or more programming languages ​​to perform the operations of the embodiments of this application. The programming languages ​​include object-oriented programming languages ​​such as Java and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0103] The basic principles of this application have been described above with reference to specific embodiments. However, it should be noted that the advantages, benefits, and effects mentioned in this application are merely examples and not limitations, and should not be considered as essential features of each embodiment of this application. Furthermore, the specific details disclosed above are for illustrative and facilitative purposes only, and are not limitations. These details do not limit the application to the necessity of employing the aforementioned specific details for implementation.

[0104] The block diagrams of devices, apparatuses, devices, and systems involved in this application are merely illustrative examples and are not intended to require or imply that they must be connected, arranged, or configured in the manner shown in the block diagrams. As those skilled in the art will recognize, these devices, apparatuses, devices, and systems can be connected, arranged, and configured in any manner. Words such as “comprising,” “including,” “having,” etc., are open-ended terms meaning “including but not limited to,” and are used interchangeably with them. The terms “or” and “and” as used herein refer to the terms “and / or,” and are used interchangeably with them unless the context clearly indicates otherwise. The term “such as” as used herein refers to the phrase “such as but not limited to,” and is used interchangeably with it.

[0105] It should also be noted that in the apparatus, equipment, and methods of this application, the components or steps can be disassembled and / or recombined. These disassemblies and / or recombinations should be considered as equivalent solutions of this application.

Claims

1. A method for remotely upgrading a vehicle, characterized in that, The method, applied to a cloud-based remote upgrade server and communicatively connected to an in-vehicle network terminal, includes: The original upgrade package is encrypted using a dynamic symmetric algorithm key to obtain an encrypted upgrade package; Perform a hash algorithm operation on the original upgrade package to obtain a first hash value; The concatenation of the symmetric algorithm key and the first hash value is encrypted with an asymmetric algorithm private key to obtain a digital signature. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope; Package the digital envelope and the encryption upgrade package into a transmission data packet; The data packet is transmitted to the vehicle-mounted network terminal, so that the vehicle-mounted network terminal can perform asymmetric signature verification and symmetric decryption based on the data packet to realize the software upgrade corresponding to the upgrade package.

2. The vehicle remote upgrade method according to claim 1, characterized in that, While encrypting the concatenated data of the symmetric algorithm key and the first hash value with the asymmetric algorithm private key to obtain the digital signature, a cloud timestamp is also obtained. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope, comprising: The digital signature, the symmetric algorithm key, and the cloud timestamp are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope.

3. The vehicle remote upgrade method according to claim 1, characterized in that, While encrypting the concatenated data of the symmetric algorithm key and the first hash value with the asymmetric algorithm private key to obtain the digital signature, a one-way incrementing sequence number in the cloud is obtained. The digital signature and the symmetric algorithm key are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope, comprising: The digital signature, the symmetric algorithm key, and the cloud-based one-way incrementing sequence number are encrypted using the vehicle-side asymmetric algorithm public key to obtain a digital envelope.

4. A method for remotely upgrading a vehicle, characterized in that, Applied to an in-vehicle network terminal, wherein the in-vehicle network terminal is communicatively connected to a cloud-based remote upgrade server, the method includes: The system receives a data packet transmitted from the cloud-based remote upgrade server. This data packet is generated by the cloud-based remote upgrade server packaging a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server encrypting a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud-based one-way incrementing sequence number using the vehicle-side asymmetric algorithm public key. The digital signature is obtained by the cloud-based remote upgrade server encrypting the concatenation of the symmetric algorithm key and a first hash value using the asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package. Based on the transmitted data packets, asymmetric signature verification and symmetric decryption are performed to achieve the software upgrade corresponding to the upgrade package.

5. The vehicle remote upgrade method according to claim 4, characterized in that, The asymmetric signature verification and symmetric decryption based on the transmitted data packets include: The symmetric algorithm key and the digital envelope, which are encrypted with the asymmetric algorithm public key using the asymmetric algorithm private key at the vehicle end, are decrypted to obtain the symmetric algorithm key, digital signature, cloud timestamp, and cloud one-way incrementing sequence number. The encrypted upgrade package transmitted by the cloud-based remote upgrade server is decrypted using the symmetric algorithm key to obtain the original upgrade package; Perform a hash algorithm operation on the decrypted original upgrade package to obtain a second hash value; The digital signature is decrypted using the public key of the asymmetric algorithm of the cloud-based remote upgrade server to obtain the first hash value; If the first hash value matches the second hash value, the software upgrade corresponding to the upgrade package is executed; otherwise, a security alarm is triggered and the upgrade process is terminated.

6. The vehicle remote upgrade method according to claim 5, characterized in that, After receiving the data packet transmitted by the cloud-based remote upgrade server, the method further includes: Verify the integrity of the transmitted data packet. If the transmitted data packet is intact, separate the encrypted upgrade packet and the digital envelope from the transmitted data packet; otherwise, trigger a security alarm and terminate the upgrade process.

7. The vehicle remote upgrade method according to claim 5, characterized in that, The method further includes: Calculate the time difference between the current vehicle system time and the cloud timestamp; If the time difference is within the preset time, the software upgrade process continues; otherwise, a security alarm is triggered and the upgrade process is terminated.

8. The vehicle remote upgrade method according to claim 5, characterized in that, The method further includes: Determine whether the cloud-based one-way incrementing serial number is greater than the latest one-way incrementing serial number on the vehicle. If so, continue the software upgrade process; otherwise, trigger a security alarm and terminate the upgrade process.

9. A vehicle remote upgrade device, characterized in that, An apparatus for use with a cloud-based remote upgrade server, wherein the cloud-based remote upgrade server is communicatively connected to an in-vehicle network terminal, the apparatus comprising: An encryption module is used to encrypt the original upgrade package using a dynamic symmetric algorithm key to obtain an encrypted upgrade package; perform a hash algorithm operation on the original upgrade package to obtain a first hash value; encrypt the concatenated data of the symmetric algorithm key and the first hash value using an asymmetric algorithm private key to obtain a digital signature; and encrypt the digital signature and the symmetric algorithm key using the vehicle-side asymmetric algorithm public key to obtain a digital envelope. A packaging module is used to package the digital envelope and the encryption upgrade package into a transmission data packet; The data transmission module is used to transmit the data packet to the vehicle-mounted network terminal, so that the vehicle-mounted network terminal can perform asymmetric signature verification and symmetric decryption based on the data packet to realize the software upgrade corresponding to the upgrade package.

10. A vehicle remote upgrade device, characterized in that, Applied to an in-vehicle networking terminal, wherein the in-vehicle networking terminal is communicatively connected to a cloud-based remote upgrade server, the device includes: The data receiving module is used to receive transmission data packets transmitted by the cloud-based remote upgrade server. The transmission data packets are generated by the cloud-based remote upgrade server by packaging a digital envelope and an encrypted upgrade package. The digital envelope is obtained by the cloud-based remote upgrade server using the vehicle-side asymmetric algorithm public key to encrypt a digital signature, a symmetric algorithm key, a cloud timestamp, and a cloud-based one-way incrementing sequence number. The digital signature is obtained by encrypting the concatenation of the symmetric algorithm key and a first hash value using an asymmetric algorithm private key. The encrypted upgrade package is obtained by the cloud-based remote upgrade server encrypting the original upgrade package using a dynamic symmetric algorithm key. The first hash value is obtained by performing a hash algorithm operation on the original upgrade package. The data decryption module is used to perform asymmetric signature verification and symmetric decryption based on the transmitted data packets, so as to realize the software upgrade corresponding to the upgrade package.

11. A vehicle, characterized in that, include: The vehicle remote upgrade device as described in claim 10.

Images