Application program installation control method and device of vehicle-mounted system, equipment and medium

Abstract

The invention discloses an application program installation control method and device of a vehicle-mounted system, equipment and a medium. The method belongs to the technical field of vehicle-mounted information security and application program management, and comprises the following steps: receiving an application program installation request, and starting an installation control flow; respectively verifying the installation request initiating source, the geographic position of the current vehicle-mounted system and the application program to be installed; and executing the application program installation operation under the condition that the verification results are passed. The technical effects of improving the application installation safety of the vehicle-mounted system and guaranteeing the operation stability of the vehicle-mounted system are achieved.

Description

Technical Field

[0001] This invention relates to the fields of vehicle information security and application management technology, and in particular to application installation control methods, devices, equipment and media for vehicle systems. Background Technology

[0002] Since the Android system's native PackageInstaller module is an application (APP) installation management module, the InstallStart component in this module is exposed (its configuration attribute exported is set to true). Therefore, any application can launch the InstallStart component in the PackageInstaller module to perform APP installation operations. Typically, app store apps use the InstallStart component in the PackageInstaller module to install APPs. However, this scenario, lacking any permission control, poses security risks. Based on the above situation, a new APP installation control system is needed to restrict the arbitrary installation of APPs.

[0003] In addition, the PackageInstallerSession in the Android system framework layer is a service module responsible for completing the installation of apps. During the installation process, this module will verify the integrity and authenticity of system apps, but for non-core apps installed by third parties, it will only perform integrity verification; this can easily lead to the risk of malicious app installation and undermine the security management standards for in-vehicle application installation. Summary of the Invention

[0004] This invention provides a method, apparatus, device, and medium for controlling the installation of applications in a vehicle system, so as to achieve secure management and control over the application installation process of a vehicle system.

[0005] According to one aspect of the present invention, an application installation control method for an in-vehicle system is provided, the method comprising:

[0006] Receive the application installation request and initiate the installation control process;

[0007] The origin of the installation request, the current geographical location of the vehicle system, and the application to be installed are verified respectively.

[0008] If all verification results are satisfactory, proceed with the application installation.

[0009] According to another aspect of the present invention, an application installation control device for a vehicle system is provided, the device comprising:

[0010] The installation process startup module is used to receive application installation requests and start the installation control process.

[0011] The verification module is used to verify the origin of the installation request, the current geographical location of the vehicle system, and the application to be installed.

[0012] The installation operation execution module is used to execute the application installation operation if all verification results are passed.

[0013] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0014] At least one processor;

[0015] and memory that is communicatively connected to at least one processor;

[0016] The memory stores a computer program that can be executed by at least one processor, which is then executed by the at least one processor to enable the at least one processor to execute the application installation control method of the vehicle system according to any embodiment of the present invention.

[0017] According to another aspect of the present invention, a computer-readable storage medium is provided, which stores computer instructions for causing a processor to execute and implement the application installation control method of an in-vehicle system according to any embodiment of the present invention.

[0018] The technical solution of this invention initiates an installation control process after receiving an application installation request, and verifies the origin of the installation request, the geographical location of the vehicle system, and the application to be installed. The installation operation is only performed after all verifications pass, which realizes multi-dimensional security control over the application installation process of the vehicle system. It solves the security risks such as untrusted application installation sources, uncontrolled installation scenarios, and potential tampering of applications in the vehicle environment, and achieves the technical effect of improving the security of application installation in the vehicle system and ensuring the stability of vehicle system operation.

[0019] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 A flowchart of an application installation control method for an in-vehicle system provided in an embodiment of the present invention;

[0022] Figure 2a A flowchart of another application installation control method for an in-vehicle system provided in an embodiment of the present invention;

[0023] Figure 2b A file update flowchart for another application installation control method for an in-vehicle system provided in an embodiment of the present invention;

[0024] Figure 2c A flowchart illustrating the APP download and installation process of another application installation control method for an in-vehicle system provided in this embodiment of the invention;

[0025] Figure 3 A schematic diagram of the structure of an application installation control device for a vehicle system provided in an embodiment of the present invention;

[0026] Figure 4 A schematic diagram of the structure of an electronic device for implementing an application installation control method for an in-vehicle system according to an embodiment of the present invention. Detailed Implementation

[0027] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0029] Figure 1This is a flowchart illustrating an application installation control method for a vehicle-mounted system, provided by an embodiment of the present invention. This embodiment is applicable to application installation control scenarios based on vehicle-mounted systems. The method can be executed by an application installation control device for the vehicle-mounted system, which can be implemented in hardware and / or software and can be configured in an electronic device. Figure 1 As shown, the method specifically includes the following steps:

[0030] S110: Receive the application installation request and start the installation control process.

[0031] In this context, the in-vehicle system can be understood as the intelligent system installed in a car. An application installation request can be understood as an instruction to install a specific application.

[0032] Specifically, after receiving an instruction from a user or other application to install an application, the in-vehicle system triggers and starts a series of preset processes to manage the installation process.

[0033] In some possible implementations, the process of receiving the application installation request also includes:

[0034] Critical control data is pre-loaded into the secure storage module of the vehicle system. This critical control data includes a list of trusted installation sources and data on the geographical range of installation locations.

[0035] Among these, critical control data can be understood as the core configuration information that supports the vehicle system in enabling application installation and control. The secure storage module can be understood as a storage unit used to securely store critical control data.

[0036] A trusted installation source list can be understood as a pre-defined list of approved sources that can initiate application installation requests within the vehicle system. Installable geographic range data can be understood as information about the geographic areas within the vehicle system that are permitted for application installation.

[0037] Specifically, before the vehicle system receives any application installation request, it first stores two types of key control data—a list of trusted installation sources and data on the geographical range of installations—in the vehicle system's secure storage module to prepare data for subsequent installation verification.

[0038] In some possible implementations, the secure storage module is a storage unit based on a TEE trusted environment, the trusted installation source list is a text file storing the names of pre-installed application store packages, and the installable geographical range data is a text file storing latitude and longitude coordinates and their corresponding radius ranges.

[0039] The Trusted Execution Environment (TEE) can be understood as an execution environment with high security and isolation.

[0040] The pre-installed app store package name can be understood as the unique identifier of the app store applications pre-installed with the vehicle system at the factory. TEE ensures that critical control data is not illegally accessed or tampered with through hardware isolation and encryption mechanisms.

[0041] Among some possible implementations, the method also includes:

[0042] Update the list of trusted installation sources by pushing signed update files to the cloud server;

[0043] After user authentication, the configuration of the installable geographic range data is updated;

[0044] The updated list of trusted installation sources and the geographic range of installable data are stored in the secure storage module.

[0045] In this context, the cloud server can be understood as a server deployed in the cloud. A signed update file can be understood as a file used to update data that has undergone digital signature processing. User authentication can be understood as the process of verifying the legitimacy of a user's identity through specific methods.

[0046] Specifically, the list of trusted installation sources is updated by pushing digitally signed update files to the cloud server, while the installable geographic range data is manually updated by the user after authentication. The updated data of both types is then stored in the secure storage module to ensure the security and validity of the updated data.

[0047] S120. Verify the origin of the installation request, the current geographical location of the vehicle system, and the application to be installed.

[0048] The originator of the installation request can be understood as the entity that initiates the application installation request. The application to be installed can be understood as the target application planned to be installed into the vehicle system.

[0049] Specifically, the in-vehicle system checks who initiated the installation request, the current location of the car, and whether the application to be installed meets the requirements to ensure that all three conditions are met for safe installation.

[0050] In some possible implementations, the origin of the installation request is validated, including:

[0051] The application package name of the originating source is obtained through the native interface of the vehicle system. The application package name is then matched with the list of trusted installation sources in the secure storage module. If the match is successful, the application is deemed legitimate.

[0052] Specifically, when verifying the origin of an installation request, the system first obtains the package name of the application that initiated the installation request through the native interface built into the vehicle system. Then, it compares the package name with the package names recorded in the trusted installation source list in the secure storage module. If a matching package name is found, the origin of the installation request is considered legitimate.

[0053] In some possible implementations, geolocation verification includes:

[0054] Obtain the current latitude and longitude coordinates of the vehicle system, and calculate the straight-line distance between the latitude and longitude coordinates and the latitude and longitude coordinates of each latitude and longitude coordinate in the secure storage module where geographical range data can be installed, according to the semi-versus formula;

[0055] If there exists any straight-line distance less than or equal to the corresponding radius, then it is considered valid.

[0056] The semi-versus formula can be understood as a mathematical formula used to calculate the straight-line distance between two points.

[0057] Latitude and longitude coordinates can be understood as geographical coordinates used to represent a specific location, consisting of longitude and latitude.

[0058] Specifically, when verifying the geographical location, the latitude and longitude coordinates of the current location of the vehicle system are first obtained, and then the semi-sine formula is used to calculate the straight-line distance between the coordinates and each preset latitude and longitude coordinate in the data of the installable geographical range. As long as there is a distance less than or equal to the corresponding preset radius, the current geographical location is considered to meet the installation requirements.

[0059] In some possible implementations, verifying the application to be installed includes:

[0060] The application performs integrity and authenticity checks based on pre-set vehicle manufacturer-issued certificates;

[0061] Integrity verification is used to confirm that the application has not been damaged or tampered with, while authenticity verification is used to confirm that the application has been legally signed.

[0062] In this context, the automaker-issued certificate can be understood as a digital certificate issued by the car manufacturer to verify the legitimacy of the application. Integrity verification can be understood as the verification process that checks whether the application files are complete and undamaged or tampered with. Authenticity verification can be understood as verifying whether the application has been legally signed (such as by the automaker).

[0063] Specifically, when verifying the application to be installed, the vehicle manufacturer's certificate pre-set in the vehicle system is used as the basis. On the one hand, the application file is checked to see if it is complete and has not been tampered with. On the other hand, the application is verified to have been legally signed by the vehicle manufacturer. Only when both verifications pass can the application be considered to meet the installation requirements.

[0064] S130. If all verification results are passed, perform the application installation operation.

[0065] Specifically, the in-vehicle system will only allow and begin the installation of an application if the verification results for the origin of the installation request, the current geographical location, and the application to be installed all meet the preset rules. If any verification result fails, the installation process will be terminated and the verification result will be returned.

[0066] The technical solution of this invention initiates an installation control process after receiving an application installation request, and verifies the origin of the installation request, the geographical location of the vehicle system, and the application to be installed. The installation operation is only performed after all verifications pass, which realizes multi-dimensional security control over the application installation process of the vehicle system. It solves the security risks such as untrusted application installation sources, uncontrolled installation scenarios, and potential tampering of applications in the vehicle environment, and achieves the technical effect of improving the security of application installation in the vehicle system and ensuring the stability of vehicle system operation.

[0067] Figure 2a This is a flowchart illustrating another application installation control method for a vehicle system provided by an embodiment of the present invention. Based on the above embodiments, this embodiment is an optimization of the above embodiments, and its specific implementation can be found in the technical solution of this embodiment. Technical terms that are the same as or corresponding to those in the above embodiments will not be repeated here. Figure 2a As shown, the method specifically includes the following steps:

[0068] S210, Pre-load key control data into the secure storage module of the vehicle system.

[0069] Specifically, the factory-installed vehicle system will pre-install a list of trusted installation sources and a geolocation configuration file of installable apps into a secure storage module.

[0070] Specifically, the initial content of the trusted installation source list includes the package names of the application store apps pre-installed on the vehicle system, stored in text format, with multiple package names separated by line breaks.

[0071] Specifically, the initial geolocation information for installable apps includes the authorized operating address, the latitude and longitude coordinates of authorized service outlets, and the radius range (the radius is 500 meters by default). The storage file format is text, and multiple addresses are separated by line breaks.

[0072] Figure 2b A file update flowchart for another application installation control method for an in-vehicle system provided in an embodiment of the present invention; as shown. Figure 2b As shown, once the vehicle is sold to the user, if it is necessary to update the above two documents, you can follow the instructions. Figure 2b Process update;

[0073] In some possible implementations, the trusted installation source list update process is as follows:

[0074] 1) The cloud service of TSP (Telematics Service Provider) on the cloud server pushes a new list of trusted installation sources based on the HTTPS / TLS1.2+ protocol. This file contains source files and signature information. The signature algorithm uses the RSA512 encryption algorithm and the SHA256 digest algorithm.

[0075] 2) After the vehicle system TSP client successfully receives the file, it verifies the signature to check the file's integrity and authenticity;

[0076] 3) After the vehicle system TSP client passes the verification, the trusted installation source list file is stored in the secure storage module (the package name list of the APP installation management module application). The pre-set geographical location (such as latitude and longitude coordinates and radius) of the allowed installation (APP) sent by the installation location setting module is also stored in the secure storage module.

[0077] The secure storage module can be implemented based on a TEE trusted environment.

[0078] In some possible implementations, the process for allowing app location updates is as follows:

[0079] 1) Users enter the login interface of the installation location settings module, enter the password, and can enter the installation location settings interface normally after the password is verified.

[0080] 2) If the password is entered incorrectly five times, the user will be prohibited from entering it again for 5 minutes.

[0081] 3) After successfully logging in, you will enter the installation location settings interface. Users can set the address and radius range and save it to the secure storage module.

[0082] S220: Receive the application installation request and start the installation control process.

[0083] In some possible implementations, the prerequisites for installing the app include:

[0084] The vehicle system has saved two files: a list of trusted installation sources and the geographical locations of allowed apps. The list of trusted installation sources includes the names of the app stores that are pre-installed on the vehicle system.

[0085] All apps available for download and installation in the app store have been signed with certificates issued by the car manufacturers, and the in-vehicle system also integrates and stores the certificates issued by the car manufacturers.

[0086] Figure 2cA flowchart illustrating the APP download and installation process of another application installation control method for an in-vehicle system provided in this embodiment of the invention; as shown. Figure 2c As shown, the specific process is explained below:

[0087] App store initiates installation phase:

[0088] The app store first checks whether the vehicle's system has sufficient memory space.

[0089] If you have enough memory, download the app from the app store that has been signed with a certificate issued by the car manufacturer.

[0090] After the download is complete, the app store will launch the app installation management module.

[0091] Data verification phase of installation management module:

[0092] The installation management module reads the list of trusted installation sources from the secure storage module, and the secure storage module returns the list.

[0093] The installation management module retrieves the application store package name and checks if it's in the trusted installation source list. If it is, proceed to the next step; otherwise, terminate the installation process.

[0094] The installation management module reads the geographical location of installable apps from the secure storage module, and the secure storage module returns the data.

[0095] The installation management module retrieves the current geographic location of the vehicle system and checks whether this location meets the requirements for installing the app. If it does, proceed to the next step; otherwise, terminate the installation process.

[0096] In one optional implementation, after successful verification, the installation service module completes the app installation. The user selects the app to install from the app store. The app store then obtains the current in-vehicle system memory status. If the remaining space is not less than a preset threshold, the app download begins. If the remaining space is less than or equal to the preset threshold, a pop-up prompts the user to perform operations such as clearing temporary files to free up storage space. The preset threshold can be pre-set based on experience; this embodiment does not impose specific restrictions on it.

[0097] APP installation and execution phase:

[0098] The installation management module and the installation service module begin establishing an installation session and execute the APP installation operation.

[0099] The installation service module uses the APP's signature principle to verify the APP's integrity (confirming that the APP has not been damaged or tampered with) and authenticity (confirming that the APP has been legally signed).

[0100] S230, verify the origin of the installation request, the current geographical location of the vehicle system, and the application to be installed.

[0101] In some possible implementations, after the app is successfully downloaded, the app store app launches the app installation management module. After the app installation management module is launched, it reads the list of trusted installation sources and the geographical locations of allowed app installations from the secure storage module in sequence.

[0102] Furthermore, the APP installation management module obtains the package name of the current caller (i.e., the package name of the app store APP) through a native system interface, and checks whether this package name is included in the trusted installation source list. If it is included, the process continues; otherwise, the subsequent installation process is terminated.

[0103] In some possible implementations, after the trusted installation source check passes, it checks whether the current address location is within the allowed geographical range for installing the app. The check method uses the Haversine formula to calculate the distance between the current address and the allowed app installation address location. If there is a distance less than the radius, the installation can continue; otherwise, the subsequent installation process is terminated.

[0104] S240. If all verification results are passed, perform the application installation operation.

[0105] In some possible implementations, once the installation source and geographic location checks are passed, the APP installation management module establishes an installation session with the APP installation service module and passes the APP installation file and related information to the APP installation service module.

[0106] In some possible implementations, after receiving the APP file to be installed and related information, the APP installation service module verifies the integrity of the APP file and the authenticity of the signature through the signature principle. If the verification is successful, the installation begins; otherwise, the installation is terminated.

[0107] It's worth noting that choosing a trusted installation source as the restriction, rather than a list of trusted apps, is chosen because while app stores typically host many apps, the number of pre-installed apps with installation capabilities, such as those in the app store, is limited and generally doesn't change from the factory. Therefore, using a trusted installation source as the whitelist significantly reduces the file size and the frequency of updates. Furthermore, if the car manufacturer doesn't change the app store apps, the process of updating the trusted installation source file can be omitted. If trusted apps were used as the whitelist, any new apps added to the app store would require updating the whitelist, increasing the file size and requiring more frequent updates—the disadvantages are obvious.

[0108] It's worth noting that restricting app installation to controlled environments (such as service centers) reduces the risk of users installing unofficial or cracked software, lowering the probability of system attacks or malfunctions. Furthermore, different regions have different requirements for in-vehicle software (such as navigation and data privacy). Restricting installation locations ensures that the app only operates within permitted areas.

[0109] It is worth noting that retaining geolocation support for user password login in a configurable manner is mainly due to concerns about potential disputes among users regarding device ownership and software control.

[0110] The technical solution of this invention includes checking the trusted installation source and whether the address of the vehicle system allows installation. In addition, before installation, it not only verifies the integrity of the APP but also verifies its authenticity, increasing the restrictions on installation conditions and reducing the security risks caused by arbitrarily installing unofficial APPs.

[0111] Figure 3 This is a schematic diagram of the structure of an application installation control device for a vehicle system provided in an embodiment of the present invention. Figure 3 As shown, the device includes: an installation process initiation module 310, a verification module 320, and an installation operation execution module 330.

[0112] The installation process initiation module 310 is used to receive the application installation request and start the installation control process; the verification module 320 is used to verify the origin of the installation request, the current geographical location of the vehicle system, and the application to be installed; the installation operation execution module 330 is used to execute the application installation operation if the verification results are all passed.

[0113] The technical solution of this invention initiates an installation control process after receiving an application installation request, and verifies the origin of the installation request, the geographical location of the vehicle system, and the application to be installed. The installation operation is only performed after all verifications pass, which realizes multi-dimensional security control over the application installation process of the vehicle system. It solves the security risks such as untrusted application installation sources, uncontrolled installation scenarios, and potential tampering of applications in the vehicle environment, and achieves the technical effect of improving the security of application installation in the vehicle system and ensuring the stability of vehicle system operation.

[0114] In some alternative embodiments, the apparatus further includes:

[0115] The data pre-installation module is used to pre-install critical control data into the secure storage module of the vehicle system before receiving an application installation request. The critical control data includes a list of trusted installation sources and data on the geographical range of installation locations.

[0116] In some optional embodiments, the secure storage module is a storage unit based on a TEE trusted environment, the trusted installation source list is a text file storing the names of pre-installed application store packages, and the installable geographical range data is a text file storing latitude and longitude coordinates and corresponding radius ranges.

[0117] In some alternative embodiments, the verification module is specifically used for:

[0118] The application package name of the originating source is obtained through the native interface of the vehicle system. The application package name is then matched with the list of trusted installation sources in the secure storage module. If the match is successful, the application is deemed legitimate.

[0119] In some optional embodiments, the verification module includes:

[0120] The straight-line distance determination unit is used to obtain the current latitude and longitude coordinates of the vehicle system and calculate the straight-line distance between the latitude and longitude coordinates and the latitude and longitude coordinates of the geographic range data that can be installed in the secure storage module according to the semi-versus formula.

[0121] The decision unit is used to determine whether any straight-line distance is less than or equal to the corresponding radius range.

[0122] In some alternative embodiments, the verification module is specifically used for:

[0123] The application performs integrity and authenticity checks based on pre-set vehicle manufacturer-issued certificates;

[0124] Integrity verification is used to confirm that the application has not been damaged or tampered with, while authenticity verification is used to confirm that the application has been legally signed.

[0125] In some alternative embodiments, the apparatus further includes:

[0126] The list update unit is used to update trusted security by pushing signed update files via the cloud server.

[0127] Source list;

[0128] The configuration update unit is used to update the installable geographic range data after user authentication.

[0129] Row configuration update;

[0130] The updated storage unit is used to store the updated list of trusted installation sources and installable geographic range data.

[0131] Stored in a secure storage module.

[0132] The application installation control device for the vehicle system provided in this embodiment of the invention can execute the application installation control method for the vehicle system provided in any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the method.

[0133] Figure 4 This is a schematic diagram of the structure of an electronic device for implementing the application installation control method of an in-vehicle system according to embodiments of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0134] like Figure 4 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0135] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0136] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, digital signal processors (DSPs), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as the application installation control method of an in-vehicle system.

[0137] In some embodiments, the application installation control of the method vehicle system can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the application installation control of the method vehicle system described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to perform the application installation control of the method vehicle system by any other suitable means (e.g., by means of firmware).

[0138] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0139] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0140] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0141] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0142] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0143] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0144] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0145] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for controlling the installation of application programs in a vehicle-mounted system, characterized in that, include: Receive the application installation request and initiate the installation control process; The origin of the installation request, the current geographical location of the vehicle system, and the application to be installed are verified respectively. If all verification results pass, proceed with the application installation.

2. The method according to claim 1, characterized in that, Upon receiving the application installation request Before that, it also includes: Key control data is pre-loaded into the secure storage module of the vehicle system, including a list of trusted installation sources and data on the geographical range of installation locations.

3. The method according to claim 2, characterized in that, The secure storage module is a storage unit based on a TEE trusted environment, the trusted installation source list is a text file storing the names of pre-installed application store packages, and the installable geographical range data is a text file storing latitude and longitude coordinates and corresponding radius ranges.

4. The method according to claim 2, characterized in that, Verify the origin of the installation request, including: The application package name of the originating source is obtained through the native interface of the vehicle system. The application package name is then matched with the list of trusted installation sources in the secure storage module. If the match is successful, the application is deemed legitimate.

5. The method according to claim 2, characterized in that, Geographic location verification includes: Obtain the current latitude and longitude coordinates of the vehicle system, and calculate the straight-line distance between the latitude and longitude coordinates and the latitude and longitude coordinates of the geographic range data that can be installed in the secure storage module according to the semi-sine formula; If there exists any straight-line distance less than or equal to the corresponding radius, then it is considered valid.

6. The method according to claim 1, characterized in that, Verification of the application to be installed includes: The application is validated for integrity and authenticity based on a pre-set certificate issued by the car manufacturer; the integrity validation is used to confirm that the application has not been damaged or tampered with, and the authenticity validation is used to confirm that the application has been legally signed.

7. The method according to claim 2, characterized in that, Also includes: The list of trusted installation sources is updated by pushing a signed update file to the cloud server. After user authentication, the installation geographic range data is configured and updated; The updated list of trusted installation sources and the geographic range of installable data are stored in the secure storage module.

8. An application installation control device for a vehicle-mounted system, characterized in that, The apparatus is configured to implement the method according to any one of claims 1-7, the apparatus comprising: The installation process startup module is used to receive application installation requests and start the installation control process. The verification module is used to verify the origin of the installation request, the current geographical location of the vehicle system, and the application to be installed. The installation operation execution module is used to perform the application installation operation if all verification results are passed.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and a memory communicatively connected to the at least one processor; The memory stores a computer program that can be executed by the at least one processor, which is then executed by the at least one processor to enable the at least one processor to perform the application installation control method for the vehicle system according to any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a processor, implement the application installation control method of the vehicle system according to any one of claims 1-7.

Images