Dual-backup high-voltage power supply safety upgrade system based on dynamic key RC4 encryption

Abstract

This utility model discloses a dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption, relating to the field of automotive high-voltage power supply management technology. It includes a main control chip, a memory connected to the main control chip, an encryption accelerator, and a secure communication interface. The memory contains a key generation module and a dual-storage partition module. The key generation module contains a dynamic key RC4 encryption module and is connected to the encryption accelerator. The dual-storage partition module includes a main storage area and a backup storage area, with a remapping module between the main and backup storage areas. This utility model effectively avoids system paralysis caused by upgrade interruptions by setting the main partition of the dual-storage partition module to run the current firmware and the backup area to store the firmware to be upgraded, thus improving the reliability of the system upgrade. Furthermore, by setting the key generation module to generate dynamic keys for the upgraded system, it effectively increases the difficulty of cracking and improves the security of the system upgrade.

Description

Technical Field

[0001] This utility model belongs to the field of automotive high-voltage power supply management technology, specifically relating to a dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption. Background Technology

[0002] Currently, there are several shortcomings in the control of high-voltage power supplies for new energy vehicles: 1. Single backup risk: Traditional bootloaders use single-zone storage, and upgrade interruptions can lead to system paralysis; 2. Static key vulnerability: Fixed encryption keys are easily reverse-engineered; 3. High-voltage environmental interference: Bus voltage fluctuations can cause communication packet loss. For example, Tesla's public report shows that in 2023, recalls due to power controller upgrade failures accounted for 34%. Therefore, our company has designed and proposed a dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption. Utility Model Content

[0003] The purpose of this invention is to address the shortcomings of existing technologies where upgrades involve inherent risks, and to propose a dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption. This dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption can effectively improve the security and reliability of high-voltage power supply upgrades.

[0004] To achieve the above objectives, the present invention adopts the following technical solution:

[0005] Design a dual-backup high-voltage power supply safety upgrade system based on dynamic key RC4 encryption, including a main control chip, a memory, an encryption accelerator, and a secure communication interface connected to the main control chip. The memory includes a key generation module and a dual storage partition module. The key generation module includes a dynamic key RC4 encryption module and is connected to the encryption accelerator. The dual storage partition module includes a main storage area and a backup storage area, and a remapping module is provided between the main storage area and the backup storage area.

[0006] Furthermore, the main control chip is G32R501.

[0007] Furthermore, the secure communication interface is a UDS protocol communication interface, supporting the ISO 14229-1 UDS protocol.

[0008] Furthermore, the encryption accelerator is a CRC32 module.

[0009] Furthermore, the memory also includes a voltage adaptive module.

[0010] Furthermore, the memory also includes a data retransmission module.

[0011] The dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption proposed in this utility model has the following advantages: By setting up a dual storage partition module, the main partition is used to run the current firmware, and the backup partition stores the firmware to be upgraded. This can effectively avoid system paralysis caused by upgrade interruption and effectively improve the reliability of system upgrade. In addition, by setting up a key generation module to generate dynamic keys for the upgraded system, the difficulty of cracking is effectively increased, thus improving the security of system upgrade. Attached Figure Description

[0012] The accompanying drawings are provided to further illustrate the present invention and form part of the specification. They are used together with the embodiments of the present invention to explain the present invention, but do not constitute a limitation thereof. In the drawings:

[0013] Figure 1 This is a system block diagram of this utility model;

[0014] The following are labeled in the diagram: 1. Main control chip; 2. Memory; 21. Key generation module; 210. Dynamic key RC4 encryption module; 22. Dual storage partition module; 221. Main storage area; 222. Backup storage area; 223. Remapping module; 23. Voltage adaptive module; 24. Data retransmission module; 3. Encryption accelerator; 4. Secure communication interface. Detailed Implementation

[0015] The technical solutions of the present utility model will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present utility model. Obviously, the described embodiments are only some embodiments of the present utility model, and not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present utility model without creative effort are within the protection scope of the present utility model.

[0016] In the description of this utility model, it should be noted that, unless otherwise explicitly specified and limited, the terms "provided with" and "connected" should be interpreted broadly. For example, "connected" can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium; it can be a connection within two components. Those skilled in the art can understand the specific meaning of the above terms in this utility model based on the specific circumstances.

[0017] The structural features of this utility model will now be described in detail with reference to the accompanying drawings.

[0018] See Figure 1This embodiment proposes a dual-backup high-voltage power supply safety upgrade system based on dynamic key RC4 encryption, taking an 800V-12V DCDC controller as an example, for system upgrades of the 800V-12V DCDC controller. It includes a main control chip 1, a memory 2, an encryption accelerator 3, and a secure communication interface 4 connected to the main control chip 1. The main control chip 1 adopts G32R501, and the secure communication interface 4 is a UDS protocol communication interface that supports the ISO 14229-1 UDS protocol and is physically compatible with CAN FD. The memory 2 is equipped with a key generation module 21 and a dual storage partition module 22.

[0019] The key generation module 21 contains a dynamic key RC4 encryption module 210. The dynamic key RC4 encryption module 210 includes a hash operation of the vehicle VIN code and the real-time clock, and generates a 4-byte key based on the VIN code and the real-time clock. The key is automatically updated every hour, and the cracking difficulty is increased by 2^32 times compared to the static key, which effectively improves the security of system upgrades. The key generation module 21 is connected to the encryption accelerator 3. The encryption accelerator 3 adopts a CRC32 module and is used to improve the encryption speed, which can save computation time.

[0020] The dual storage partition module 22 includes a main storage area 221 and a backup storage area 222. The main storage area 221 is used to run the current firmware, and the backup storage area 222 is used to store the firmware to be upgraded. The two do not affect each other. In order to effectively establish the connection between the main storage area 221 and the backup storage area 222, a remapping module 223 is provided between the main storage area 221 and the backup storage area 222. The remapping module 223 realizes the mapping relationship through the address of the FPGA.

[0021] The memory 2 also includes a voltage adaptive module 23 and a data retransmission module 24. When the voltage adaptive module 23 detects an upgrade command, it adjusts the bus voltage to 60V±5% via PWM. The data retransmission module 24 adds a sequence number to each frame of data. When a packet is lost, it triggers the UDS 36 service to retransmit. This can effectively resist high voltage interference and avoid communication packet loss caused by bus voltage fluctuations.

[0022] This utility model discloses a dual-backup high-voltage power supply safety upgrade system based on dynamic key RC4 encryption. This system effectively avoids system paralysis caused by upgrade interruptions, improves the reliability of system upgrades, increases the difficulty of cracking, and enhances the security of system upgrades. Specifically, during use, after the system is powered on, the bootloader waits for a 50ms upgrade window, receives the UDS27 service request via CAN FD, calls the key generation module 21 to perform a dynamic key generation algorithm to verify identity, decrypts frame by frame and writes to the backup storage area 222, verifies firmware integrity, switches between the backup storage area 222 and the main storage area 221 via the remapping module 223, and runs the partitioning. Before system upgrade, the voltage adaptive module 23 dynamically adjusts the bus voltage to a safe threshold.

[0023] The above description is merely a preferred embodiment of the present utility model and is not intended to limit the present utility model. Although the present utility model has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present utility model should be included within the protection scope of the present utility model.

Claims

1. A double backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption, comprising a master control chip (1), a memory (2), an encryption accelerator (3) and a secure communication interface (4) connected to the master control chip (1), characterized in that, The memory (2) is equipped with a key generation module (21) and a dual storage partition module (22). The key generation module (21) is equipped with a dynamic key RC4 encryption module (210), and the key generation module (21) is connected to the encryption accelerator (3). The dual storage partition module (22) includes a main storage area (221) and a backup storage area (222), and a remapping module (223) is provided between the main storage area (221) and the backup storage area (222).

2. The dual-backup high-voltage power supply security upgrade system based on dynamic key RC4 encryption according to claim 1, characterized in that, The main control chip (1) is G32R501.

3. The double backup high voltage power supply security upgrade system based on dynamic key RC4 encryption of claim 1, wherein, The secure communication interface (4) is a UDS protocol communication interface that supports the ISO 14229-1 UDS protocol.

4. The double backup high voltage power supply security upgrade system based on dynamic key RC4 encryption of claim 1, wherein, The encryption accelerator (3) is a CRC32 module.

5. The double backup high voltage power supply security upgrade system based on dynamic key RC4 encryption of claim 1, wherein, The memory (2) is also equipped with a voltage adaptive module (23).

6. The double backup high voltage power supply security upgrade system based on dynamic key RC4 encryption of claim 1, wherein, The memory (2) is also equipped with a data retransmission module (24).

Images