In‑vehicle infotainment system update package encryption device, decryption device, encryption method and decryption method

Abstract

The present application relates to the technical field of encryption, and discloses an in‑vehicle infotainment system update package encryption device, decryption device, encryption method and decryption method. The encryption device is at least used for: in response to the creation of an in‑vehicle infotainment system update package, using a first asymmetric encryption algorithm to sign the in‑vehicle infotainment system update package to obtain a signature file; in response to the generation of the signature file, using a preset symmetric encryption algorithm to generate encryption parameters; in response to the generation of the encryption parameters, using the encryption parameters to encrypt the signature file to obtain an encrypted file; in response to the generation of the encrypted file, writing the encryption parameters into a parameter file, and using a second asymmetric encryption algorithm to encrypt the parameter file to obtain an encrypted parameter file; and at least upon the generation of the encrypted file and the encrypted parameter file, generating an encrypted in‑vehicle infotainment system update package on the basis of the encrypted file and the encrypted parameter file. In the present application, the in‑vehicle infotainment system update package can be signed and encrypted before performing an offline update for an automotive intelligent cockpit, helping to improve the security of the in‑vehicle infotainment system update package.

Description

Car machine upgrade package encryption device, decryption device, encryption method and decryption method TECHNICAL FIELD

[0001] Embodiments of the present application relate to the field of encryption technology, and particularly relate to a car machine upgrade package encryption device, decryption device, encryption method and decryption method. BACKGROUND

[0002] With the continuous development of software-defined vehicles, the car cabin is becoming more and more intelligent, and the systems and applications in the cabin are becoming increasingly bloated. The software version update iteration related to the cabin is gradually accelerating, and the size of the car machine upgrade package is gradually increasing.

[0003] At present, online upgrade of intelligent cabin has been widely used. However, once abnormal conditions such as poor network occur during vehicle factory preparation and after-sales maintenance, not only will the cabin upgrade be hindered, but also the eSIM card traffic consumption will increase. Therefore, some manufacturers often use offline U disks to upgrade the car cabin. However, in the process of using the U disk to upgrade the car cabin offline, because the entire offline upgrade process lacks security protection measures for the car machine upgrade package, the upgrade package is easy to be leaked or maliciously tampered with, which poses a security risk.

[0004] It should be noted that the aforementioned eSIM is the abbreviation of Embedded-SIM, which is translated as electronic SIM card; and the aforementioned U disk is the abbreviation of USB flash disk, which is translated as USB flash disk. SUMMARY

[0005] Embodiments of the present application provide a car machine upgrade package encryption device, decryption device, encryption method and decryption method to at least solve the problem of leakage or malicious tampering of the car machine upgrade package due to the lack of security protection measures for the car machine upgrade package in the process of offline upgrade of the existing car intelligent cabin, and improve the security of car machine upgrade.

[0006] In a first aspect, embodiments of the present application provide a car machine upgrade package encryption device, which is at least used for:

[0007] In response to the completion of the car machine upgrade package, a first asymmetric encryption algorithm is used to sign the car machine upgrade package to obtain a signature file; and in response to the generation of the signature file, a preset symmetric encryption algorithm is used to generate an encryption parameter; and in response to the generation of the encryption parameter, the signature file is encrypted using the encryption parameter to obtain an encrypted file; and in response to the generation of the encrypted file, the encryption parameter is written into a parameter file, and a second asymmetric encryption algorithm is used to encrypt the parameter file to obtain an encrypted parameter file; and at least after the encrypted file and the encrypted parameter file are generated, a car machine encrypted upgrade package is generated based on the encrypted file and the encrypted parameter file.

[0008] Optionally, the encryption device is further configured to pre-prepare a key pair of the first asymmetric encryption algorithm and a key pair of the second asymmetric encryption algorithm, so as to enable the encryption device to sign the head unit upgrade package by using the first asymmetric encryption algorithm and encrypt the parameter file by using the second asymmetric encryption algorithm.

[0009] Optionally, the encryption device comprises an asymmetric encryption module, a symmetric encryption module and an encrypted upgrade package generation module.

[0010] The asymmetric encryption module is configured to extract a private key of the first asymmetric encryption algorithm and sign the head unit upgrade package by using the private key of the first asymmetric encryption algorithm when signing the head unit upgrade package by using the first asymmetric encryption algorithm, and extract a public key of the second asymmetric encryption algorithm and encrypt the parameter file by using the public key of the second asymmetric encryption algorithm when encrypting the parameter file by using the second asymmetric encryption algorithm.

[0011] The symmetric encryption module is configured to generate a symmetric encryption key and an encryption initial vector by using the preset symmetric encryption algorithm after the signature file is generated, and encrypt the signature file according to the symmetric encryption key and the encryption initial vector.

[0012] The encrypted upgrade package generation module is configured to generate the head unit encrypted upgrade package according to a specified naming rule by using the encrypted file and the encrypted parameter file after the encrypted file and the encrypted parameter file are generated.

[0013] In a second aspect, an embodiment of the present application further provides a head unit upgrade package decryption device, and the decryption device is configured to:

[0014] In response to the start of the decryption device, the head unit encrypted upgrade package is obtained, and the encrypted parameter file and the encrypted file are obtained at least when it is determined that the head unit encrypted upgrade package meets the preset head model upgrade file requirement, the encrypted parameter file is decrypted by using the second asymmetric encryption algorithm to obtain an encrypted parameter, the encrypted file is decrypted by using the encrypted parameter after the encrypted parameter is obtained to obtain a signature file, the signature file is verified by using the first asymmetric encryption algorithm after the signature file is obtained, the head unit upgrade package is obtained after the signature file is successfully verified, and a head unit upgrade operation is performed based on the head unit upgrade package.

[0015] Optionally, the decryption device is further configured to preset a public key of the first asymmetric encryption algorithm and a private key of the second asymmetric encryption algorithm in the to-be-upgraded vehicle machine, so that the decryption device decrypts the encrypted parameter file by using the second asymmetric encryption algorithm and verifies the signature file by using the first asymmetric encryption algorithm.

[0016] Optionally, the decryption device is further configured to, in response to obtaining the vehicle machine encrypted upgrade package, verify a name of the vehicle machine encrypted upgrade package to determine whether the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement.

[0017] Optionally, the decryption device is further configured to delete the vehicle machine upgrade package and the process file after the vehicle machine upgrade operation is completed.

[0018] Optionally, the decryption device at least includes an upgrade package verification module, an asymmetric decryption module, and a symmetric decryption module.

[0019] The upgrade package verification module is at least configured to, in response to starting of the decryption device, obtain the vehicle machine encrypted upgrade package; and after obtaining the vehicle machine encrypted upgrade package, verify whether a name of the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement; and after determining that the name of the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement, decompress the vehicle machine encrypted upgrade package to obtain the encrypted file and the encrypted parameter file; and after determining that the name of the vehicle machine encrypted upgrade package does not meet the preset vehicle model upgrade file requirement, exit the vehicle machine upgrade operation.

[0020] The asymmetric decryption module is at least configured to, after obtaining the encrypted parameter file, extract a private key of the second asymmetric encryption algorithm in the to-be-upgraded vehicle machine, and decrypt the encrypted parameter file based on the private key of the second asymmetric encryption algorithm to obtain the encrypted parameter; and after obtaining the signature file, extract a public key of the first asymmetric encryption algorithm in the to-be-upgraded vehicle machine, and verify the signature file based on the public key of the first asymmetric encryption algorithm; and if the encrypted parameter file is decrypted successfully and the signature file is verified successfully, perform the vehicle machine upgrade operation; and if the encrypted parameter file fails to be decrypted or the signature file fails to be verified, end the vehicle machine upgrade operation.

[0021] The symmetric decryption module is configured to decrypt the encrypted file using the encryption parameter to obtain the signature file after the encryption parameter is acquired, determine whether the encrypted file is tampered with based on a decryption result of the encrypted file, continue to perform the head unit upgrade operation if the encrypted file is not tampered with because the encrypted file is decrypted successfully, and exit the head unit upgrade operation if the encrypted file is at risk of being tampered with because the encrypted file is decrypted unsuccessfully.

[0022] In a third aspect, the embodiments of the present application further provide a head unit upgrade package encryption method, which is executed by the head unit upgrade package encryption device of the first aspect, and at least includes:

[0023] S1, the encryption device uses a first asymmetric encryption algorithm to sign the head unit upgrade package to obtain a signature file in response to the completion of the head unit upgrade package;

[0024] S2, the encryption device uses a preset symmetric encryption algorithm to generate an encryption parameter in response to the generation of the signature file;

[0025] S3, the encryption device uses the encryption parameter to encrypt the signature file to obtain an encrypted file in response to the generation of the encryption parameter;

[0026] S4, the encryption device writes the encryption parameter into a parameter file, uses a second asymmetric encryption algorithm to encrypt the parameter file to obtain an encrypted parameter file in response to the generation of the encrypted file;

[0027] S5, the encryption device generates a head unit encrypted upgrade package based on the encrypted file and the encrypted parameter file at least after the encrypted file and the encrypted parameter file are generated.

[0028] In a fourth aspect, the embodiments of the present application further provide a head unit upgrade package decryption method, which is executed by the head unit upgrade package decryption device of the second aspect, and at least includes:

[0029] S101, the decryption device acquires a head unit encrypted upgrade package after being started;

[0030] S102, the decryption device acquires an encrypted parameter file and an encrypted file at least after determining that the head unit encrypted upgrade package meets preset head unit upgrade file requirements;

[0031] S103, the decryption device uses a second asymmetric encryption algorithm to decrypt the encrypted parameter file to obtain an encryption parameter;

[0032] S104, the decryption device obtains the signature file by decrypting the encrypted file using the encryption parameter after obtaining the encryption parameter;

[0033] S105, the decryption device verifies the signature file using a first asymmetric encryption algorithm after obtaining the signature file;

[0034] S106, the decryption device obtains the car machine upgrade package after successfully verifying the signature file;

[0035] S107, the decryption device performs a car machine upgrade operation based on the car machine upgrade package.

[0036] In summary, the embodiments of the present application provide a car machine upgrade package encryption device, a decryption device, an encryption method and a decryption method. First, the encryption device uses a first asymmetric encryption algorithm to sign the car machine upgrade package in response to the production of the car machine upgrade package, and obtains a signature file; second, the encryption device generates an encryption parameter using a preset symmetric encryption algorithm in response to the generation of the signature file; third, the encryption device encrypts the signature file using the encryption parameter in response to the generation of the encryption parameter, and obtains an encrypted file; fourth, the encryption device writes the encryption parameter into a parameter file and encrypts the parameter file using a second asymmetric encryption algorithm in response to the generation of the encrypted file, and obtains an encrypted parameter file; finally, the encryption device generates a car machine encrypted upgrade package based on the encrypted file and the encrypted parameter file at least after the encrypted file and the encrypted parameter file are generated.

[0037] It can be understood that in the encryption process of the car machine upgrade package, the encryption device may, for example, be a personal computer (PC) of a car machine upgrade personnel. Based on the technical solutions provided by the embodiments of the present application, the car machine upgrade personnel can use the PC to perform signature and encryption on the car machine upgrade package before performing the intelligent cockpit upgrade of the car, and at least overcome the problem of leakage or malicious tampering of the car machine upgrade package due to the lack of security protection measures of the car machine upgrade package in the process of the existing car cockpit offline upgrade, thereby improving the security of the car machine upgrade package and reducing the security risk of the car cockpit offline upgrade. BRIEF DESCRIPTION OF DRAWINGS

[0038] In order to more clearly illustrate the specific embodiments of the present application or the technical solutions in the prior art, the drawings needed in the specific embodiments or the prior art description will be briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present application, and those skilled in the art can also obtain other drawings according to these drawings without creative labor.

[0039] Fig. 1 is a schematic diagram of the framework of a car machine upgrade package encryption device provided by an embodiment of the present application;

[0040] Figure 2 is an implementation flowchart of a vehicle machine upgrade package encryption device provided by an embodiment of the present application;

[0041] Figure 3 is a framework schematic diagram of a vehicle machine upgrade package decryption device provided by an embodiment of the present application;

[0042] Figure 4 is a flowchart of a vehicle machine upgrade package decryption device provided by an embodiment of the present application;

[0043] Figure 5 is an implementation timing diagram of a vehicle machine upgrade provided by an embodiment of the present application;

[0044] Figure 6 is a flowchart of a vehicle machine upgrade package encryption method provided by an embodiment of the present application;

[0045] Figure 7 is a flowchart of a vehicle machine upgrade package decryption method provided by an embodiment of the present application. DETAILED DESCRIPTION

[0046] The present application will be further described below in conjunction with the accompanying drawings and embodiments. It can be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application. In addition, it should be noted that, for the convenience of description, only the parts related to the present application are shown in the drawings, but not all the structures.

[0047] Figure 1 is a framework schematic diagram of a vehicle machine upgrade package encryption device provided by an embodiment of the present application, as shown in Figure 1. The vehicle machine upgrade package encryption device 100 (hereinafter referred to as the encryption device 100) is at least used to, in response to the making of a vehicle machine upgrade package, use a first asymmetric encryption algorithm to sign the vehicle machine upgrade package to obtain a signature file; and, in response to the generation of the signature file, use a preset symmetric encryption algorithm to generate an encryption parameter; and, in response to the generation of the encryption parameter, use the encryption parameter to encrypt the signature file to obtain an encrypted file; and, in response to the generation of the encrypted file, write the encryption parameter into a parameter file, and use a second asymmetric encryption algorithm to encrypt the parameter file to obtain an encrypted parameter file; and, at least after the encrypted file and the encrypted parameter file are generated, generate a vehicle encrypted upgrade package based on the encrypted file and the encrypted parameter file.

[0048] The encryption device 100 can be a PC, an industrial computer, a single-chip microcomputer, a mobile phone, or the like.

[0049] It can be understood that the signature file can be a compressed package containing a vehicle machine upgrade package file and a corresponding signature (which can be understood as an identifier). In addition, in response to the making of the vehicle machine upgrade package, the vehicle machine upgrade personnel can manually download or copy from a U disk, or the like, to obtain the vehicle machine upgrade package required by the vehicle machine to be upgraded.

[0050] The preset symmetric encryption algorithm can be an AES-GCM algorithm (wherein AES represents Advanced Encryption Standard, which is a symmetric-key block cipher algorithm, and GCM represents Galois / Counter Mode, which is a commonly used counter mode). Generating the encryption parameter using the preset symmetric encryption algorithm can mean that the encryption device 100 generates the encryption key K and the encryption initial vector IV randomly using the AES-GCM algorithm. The encryption initial vector IV changes with the increase of the number of encryption times.

[0051] Continuing to use the AES-GCM algorithm to generate the encryption parameter as an example, encrypting the signature file using the encryption parameter to obtain an encrypted file can mean that the signature file of the vehicle machine upgrade package is encrypted using the encryption key K and the encryption initial vector IV to generate a signature file of the vehicle machine upgrade package including the ciphertext (i.e., the encrypted file). The encryption parameter file can mean a ciphertext file containing the encryption key K and the encryption initial vector IV generated by the aforementioned AES-GCM algorithm. Encrypting the parameter file using the second asymmetric encryption algorithm to obtain the encrypted parameter file can mean that the file containing the encryption key K and the encryption initial vector IV (i.e., the aforementioned parameter file) is encrypted using the public key of the second asymmetric encryption algorithm to obtain the corresponding ciphertext file, which is the encrypted parameter file. Generating the vehicle machine encrypted upgrade package based on the encrypted file and the encrypted parameter file can mean that the encrypted file containing the vehicle machine upgrade package and the encrypted parameter file providing the encryption parameter for the vehicle machine upgrade package are compressed into the same compression package, i.e., the vehicle machine encrypted upgrade package is generated.

[0052] In a specific embodiment, the vehicle machine upgrade personnel presses a PC power-on button to turn on the PC. Further, the vehicle machine upgrade personnel manually downloads the vehicle machine upgrade package required for the vehicle machine to be upgraded this time from the official website of the vehicle manufacturer. Further, after the vehicle machine upgrade package is downloaded, the vehicle machine upgrade personnel double-clicks the shortcut of the upgrade package encryption program on the PC desktop to open the upgrade package encryption program. Further, the vehicle machine upgrade personnel drags the downloaded vehicle machine upgrade package into the upgrade package encryption program. Further, the upgrade package encryption program uses the first asymmetric encryption algorithm to sign each file in the vehicle machine upgrade package, and compresses all the upgrade package files into a compressed package P. Further, the upgrade package encryption program uses the AES-GCM algorithm to randomly generate an encryption key K and an encryption initial vector IV, and uses the encryption key K and the encryption initial vector IV to encrypt the compressed package P to generate an encrypted file enc_P. Further, the upgrade package encryption program writes the encryption key K and the encryption initial vector IV into a parameter file offline_file. Further, the upgrade package encryption program encrypts the parameter file offline_file by using the second asymmetric encryption algorithm to generate an encrypted parameter file enc_offline_file. Finally, the upgrade package encryption program compresses the encrypted file enc_P and the encrypted parameter file enc_offline_file into the same compressed package, thereby obtaining the vehicle machine encrypted upgrade package.

[0053] To sum up, the embodiment can use a PC to perform signing and encryption on a vehicle machine upgrade package before a vehicle machine upgrade personnel performs offline upgrade of an intelligent vehicle cabin, thereby at least overcoming the problem of leakage or malicious tampering of a vehicle machine upgrade package due to lack of security protection measures in the process of offline upgrade of the vehicle cabin, and facilitating improvement of the security of the vehicle machine upgrade package and reduction of the security risk of offline upgrade of the vehicle cabin.

[0054] On the basis of the above embodiments or implementation manners, the embodiment further adds and refines the foregoing vehicle machine upgrade package encryption device 100, but does not constitute a limitation on the present application. Continuing to refer to FIG. 1, in a specific embodiment, the encryption device 100 is further used to, optionally, pre-prepare a key pair of the first asymmetric encryption algorithm and a key pair of the second asymmetric encryption algorithm, so as to realize the action of using the first asymmetric encryption algorithm to sign the vehicle machine upgrade package and using the second asymmetric encryption algorithm to encrypt the parameter file by the encryption device 100.

[0055] The pre-preparation manner of the key pair of the first asymmetric encryption algorithm and the key pair of the second asymmetric encryption algorithm can be that two groups of public key certificates and their corresponding private keys are issued by using a vehicle manufacturer cabin business root certificate.

[0056] In another specific embodiment, the encryption device 100 optionally comprises at least an asymmetric encryption module 110, a symmetric encryption module 120 and an encrypted upgrade package generation module 130.

[0057] The asymmetric encryption module 110 is at least configured to, when signing the head unit upgrade package using the first asymmetric encryption algorithm, extract the private key of the first asymmetric encryption algorithm and sign the head unit upgrade package using the private key of the first asymmetric encryption algorithm; and when encrypting the parameter file using the second asymmetric encryption algorithm, extract the public key of the second asymmetric encryption algorithm and encrypt the parameter file using the public key of the second asymmetric encryption algorithm.

[0058] The symmetric encryption module 120 is at least configured to, after the signature file is generated, generate at least a symmetric encryption key (i.e., the aforementioned encryption key K) and an encryption initial vector (i.e., the aforementioned encryption initial vector IV) using a preset symmetric encryption algorithm; and encrypt the signature file according to the symmetric encryption key and the encryption initial vector.

[0059] The encrypted upgrade package generation module 130 is at least configured to, after the encrypted file and the encrypted parameter file are generated, generate the head unit encrypted upgrade package according to the specified naming rule.

[0060] For example, the specified naming rule can be “manufacturer_ vehicle model_ cabin internal code_ full volume_ date_ version number”.

[0061] For example, assuming that the vehicle model corresponding to the vehicle to be upgraded is FAW Hongqi, the cabin internal code is 0042, the head unit upgrade package full volume flag is 1, the head unit upgrade package download date is 2024.8.25, and the head unit upgrade package version number is V2.01, the manner of generating the head unit encrypted upgrade package according to the specified naming rule can be that, when the encrypted file and the encrypted parameter file are compressed and combined to generate the head unit encrypted upgrade package, the head unit encrypted upgrade package is named “FAW Hongqi_0042_01_2024.8.25_2.01”.

[0062] Based on the specific solutions of the above embodiments, FIG. 2 is an implementation flowchart of a head unit upgrade package encryption device according to an embodiment of the present application.

[0063] Referring to FIG. 2, before performing offline upgrading operation on the intelligent cockpit of the vehicle model FAW Hongqi H5, the vehicle machine upgrader needs to perform encryption operation on the vehicle machine upgrade package of the FAW Hongqi H5. Further, the vehicle machine upgrader issues public key certificates A P and B P by using the cockpit business root certificate of the FAW Hongqi Company, and generates private keys A R and B R corresponding to the public key certificates (equivalent to step A1 in FIG. 2). Further, the vehicle machine upgrader presses the PC power-on button to start the PC. Further, on August 25, 2024, the vehicle machine upgrader searches and enters the official website of the FAW Hongqi Company from the browser to download the vehicle machine upgrade package of the FAW Hongqi H5 with version number V2.05. Further, the vehicle machine upgrader double-clicks the shortcut of the upgrade package encryption program on the PC desktop to open the upgrade package encryption program. Further, the vehicle machine upgrader drags the downloaded vehicle machine upgrade package into the upgrade package encryption program. Further, the upgrade package encryption program signs each file in the vehicle machine upgrade package by using the private key of the first asymmetric encryption algorithm, and compresses all the upgrade package files into a compressed package P (equivalent to step A2 in FIG. 2). Further, the upgrade package encryption program randomly generates an encryption key K and an encryption initial vector IV by using the AES-GCM algorithm (for example, the AES-128-GCM algorithm) (equivalent to step A3 in FIG. 2), and encrypts the compressed package P by using the encryption key K and the encryption initial vector IV to generate an encrypted file enc P (equivalent to step A4 in FIG. 2). Further, the upgrade package encryption program writes the encryption key K and the encryption initial vector IV into a parameter file offline file (equivalent to step A5 in FIG. 2). Further, the upgrade package encryption program encrypts the parameter file offline file by using the public key certificate B P of the second asymmetric encryption algorithm to generate an encrypted parameter file enc offline file (equivalent to step A6 in FIG. 2). Finally, the vehicle machine upgrader learns that the internal code of the cockpit corresponding to the vehicle model to be upgraded is 0072, and the full upgrade flag of the vehicle machine upgrade package is 528, so the vehicle machine upgrader can compress the encrypted file enc P and the encrypted parameter file enc offline file into the same compressed package by using the upgrade package encryption program, and name the compressed package as “FAW Hongqi H5_0072_528_2024.8.25_2.05” (equivalent to step A7 in FIG. 2), and then output the compressed package to the specified directory of the U disk (equivalent to step A8 in FIG. 2). Thus, the vehicle machine upgrade package of the FAW Hongqi H5 is encrypted.

[0064] To sum up, on the one hand, the embodiment can use the AES-128-GCM algorithm to dynamically encrypt the vehicle machine upgrade package before the vehicle machine upgrade personnel performs the offline upgrade of the intelligent cockpit of the vehicle, ensure that the decryption keys of each vehicle machine upgrade package are different, and ensure the confidentiality of the vehicle machine upgrade package while taking into account the integrity of the vehicle machine upgrade package. On the other hand, by using multiple encryption and signature, the embodiment can overcome the problem of leakage or malicious tampering of the vehicle machine upgrade package due to the lack of security protection measures of the vehicle machine upgrade package in the process of offline upgrade of the cockpit, thereby improving the security of the vehicle machine upgrade package and reducing the security risk of offline upgrade of the cockpit of the vehicle.

[0065] The embodiment of the present application also provides a vehicle machine upgrade package decryption device. FIG. 3 is a schematic diagram of the framework of a vehicle machine upgrade package decryption device provided by the embodiment of the present application. As shown in FIG. 3, the vehicle machine upgrade package decryption device 200 (hereinafter referred to as the decryption device 200) is at least used to, in response to the start of the decryption device 200, acquire a vehicle machine encrypted upgrade package; and at least after determining that the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirements, acquire an encrypted parameter file and an encrypted file; and use a second asymmetric encryption algorithm to decrypt the encrypted parameter file to obtain an encrypted parameter; and after obtaining the encrypted parameter, use the encrypted parameter to decrypt the encrypted file to obtain a signature file; and after obtaining the signature file, use a first asymmetric encryption algorithm to verify the signature file; and after successfully verifying the signature file, obtain a vehicle machine upgrade package; and perform a vehicle machine upgrade operation based on the vehicle machine upgrade package.

[0066] Among them, the decryption device 200 can include an upgrade application program in the vehicle machine to be upgraded. In response to the start of the decryption device 200, acquiring a vehicle machine encrypted upgrade package can mean that when a U disk storing a vehicle machine encrypted upgrade package is inserted into a vehicle machine upgrade designated interface of the vehicle machine to be upgraded, the upgrade application program in the vehicle machine to be upgraded starts automatically (that is, the decryption device 200 starts), and the upgrade application program can acquire the vehicle machine encrypted upgrade package from the designated storage path of the U disk.

[0067] In addition, the basis for determining whether it meets the preset vehicle model upgrade file requirements can be whether the naming name of the vehicle machine encrypted upgrade package meets the aforementioned designated naming rule. For example, assuming that the designated naming rule of the vehicle machine encrypted upgrade package is "manufacturer_ vehicle cockpit internal code_ full amount_ date_ version number", if the naming format of the vehicle machine encrypted upgrade package in the U disk meets "manufacturer_ vehicle cockpit internal code_ full amount_ date_ version number" and is suitable for the vehicle machine to be upgraded (for example, "manufacturer" and "vehicle cockpit internal code" are consistent with the corresponding information in the vehicle machine to be upgraded, and "date" is within the valid period), it can be considered that the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirements; otherwise, it can be determined that the vehicle machine encrypted upgrade package does not meet the preset vehicle model upgrade file requirements.

[0068] In a specific embodiment, the naming rule of the designated upgrade package for the vehicle machine to be upgraded is "manufacturer_ vehicle model_ cabin code_ full volume_ date_ version number". Further, the vehicle machine upgrade personnel inserts the U disk storing the encrypted upgrade package of the vehicle machine to be upgraded into the designated upgrade interface of the vehicle machine to be upgraded. Further, the decryption device is activated automatically when the U disk is inserted into the designated upgrade interface. Further, the decryption device obtains the encrypted upgrade package of the vehicle machine from the designated storage path of the U disk. Further, the decryption device can determine that the encrypted upgrade package of the vehicle machine meets the preset vehicle model upgrade file requirement after confirming that the name of the encrypted upgrade package of the vehicle machine meets the designated naming rule; further, the decryption device decompresses the encrypted upgrade package of the vehicle machine to obtain the encrypted parameter file enc_offline_file and the encrypted file enc_P. Further, the decryption device uses the second asymmetric encryption algorithm to decrypt the encrypted parameter file enc_offline_file to obtain the encrypted parameter. Further, the decryption device decrypts the encrypted file enc_P by using the obtained encrypted parameter to obtain the compressed package P containing the signed vehicle machine upgrade package. Further, the decryption device can verify the signature of each vehicle machine upgrade package file in the compressed package P by decompressing and using the first asymmetric encryption algorithm, and the vehicle machine upgrade package is obtained after the signature of each file is successfully verified. Further, the decryption device completes the vehicle machine upgrade operation based on the vehicle machine upgrade package.

[0069] In summary, the present embodiment can use the decryption device to verify and decrypt the encrypted upgrade package of the vehicle machine before performing the offline upgrade of the intelligent cabin of the vehicle, so as to at least solve the problems of unknown source, leakage and malicious tampering of the vehicle machine upgrade package caused by the lack of security protection measures of the vehicle machine upgrade package in the process of the offline upgrade of the cabin of the existing vehicle, thereby improving the security of the vehicle machine upgrade and reducing the security risk of the offline upgrade of the cabin of the vehicle.

[0070] On the basis of the above-mentioned embodiments or embodiments, the present embodiment further adds and refines the vehicle machine upgrade package decryption device 200 of the foregoing embodiments, but is not as a limitation of the present application. Referring to FIG. 3, in a specific embodiment, the decryption device 200 is further used to prestore the public key of the first asymmetric encryption algorithm and the private key of the second asymmetric encryption algorithm in the vehicle machine to be upgraded, so as to realize the decryption of the encrypted parameter file by the decryption device 200 using the second asymmetric encryption algorithm and the verification of the signature file by the decryption device 200 using the first asymmetric encryption algorithm.

[0071] The to-be-upgraded vehicle head unit may be, for example, a vehicle cockpit domain controller composed of a decryption device 200, an intelligent cockpit read-only area, and an intelligent cockpit secure computing storage area, which needs to perform a head unit upgrade operation. Prepositioning the public key of the first asymmetric encryption algorithm and the private key of the second asymmetric encryption algorithm in the to-be-upgraded vehicle head unit may mean prepositioning the public key certificate A P of the first asymmetric encryption algorithm to the intelligent cockpit read-only area of the to-be-upgraded vehicle (such a setting can ensure that the public key certificate A P of the first asymmetric encryption algorithm is not tampered with), and prepositioning the private key certificate B R of the second asymmetric encryption algorithm to the intelligent cockpit secure computing storage area of the to-be-upgraded vehicle (such a configuration can ensure that the private key certificate B R of the second asymmetric encryption algorithm is not read and leaked).

[0072] In another specific embodiment, optionally, the decryption device is further configured to, in response to obtaining the encrypted head unit upgrade package, verify the name of the encrypted head unit upgrade package to determine whether the encrypted head unit upgrade package meets the preset vehicle model upgrade file requirements.

[0073] The verification of the name of the encrypted head unit upgrade package may be, for example, that assuming the file name format of the encrypted head unit upgrade package is “manufacturer (2 digits)_vehicle model (3 digits)_cockpit code (2 digits)_full amount (1 digit)_date (8 digits)_version number (8 digits)”, the decryption device 200 will split the file name of the encrypted head unit upgrade package with “_” as the delimiter, and compare each data (such as manufacturer, vehicle model, cockpit code, version number, etc.) at the corresponding position with the local data information (which may be, for example, the data information stored in the to-be-upgraded vehicle head unit).

[0074] For example, the comparison process of the local data information and each data at the corresponding position in the file name of the encrypted head unit upgrade package may be:

[0075] First, it is determined whether the 2-digit manufacturer code is consistent with the to-be-upgraded vehicle head unit; second, if the manufacturer code is consistent, it is determined whether the 3-digit vehicle model code is consistent with the to-be-upgraded vehicle head unit; third, if the vehicle model code is also consistent with the to-be-upgraded vehicle head unit, it is determined whether the cockpit code is consistent with the to-be-upgraded vehicle head unit; fourth, after the cockpit code is still consistent with the to-be-upgraded vehicle head unit, it is determined whether the date is a reasonable date; finally, after all the foregoing determinations are passed, it is determined whether to perform a full upgrade operation or a differential upgrade operation in the subsequent head unit upgrade operation according to the full amount flag.

[0076] In yet another specific embodiment, optionally, after performing the head unit upgrade operation, the decryption device 200 is further configured to delete the head unit upgrade package and the process file after the head unit upgrade operation is completed.

[0077] The process file can refer to a temporary file (at least including the encryption parameter file, the signature file, etc.) generated due to the vehicle machine upgrading operation after the upgrading of the vehicle machine to be upgraded is completed.

[0078] In yet another specific implementation, the decryption device 200 at least includes an upgrading package verification module 210, an asymmetric decryption module 220, and a symmetric decryption module 230.

[0079] The upgrading package verification module 210 is at least configured to: in response to the start of the decryption device 200, acquire the vehicle machine encryption upgrading package; after acquiring the vehicle machine encryption upgrading package, verify whether the name of the vehicle machine encryption upgrading package meets the preset vehicle model upgrading file requirement; after determining that the name of the vehicle machine encryption upgrading package meets the preset vehicle model upgrading file requirement, decompress the vehicle machine encryption upgrading package to acquire the encrypted file and the encryption parameter file; and after determining that the name of the vehicle machine encryption upgrading package does not meet the preset vehicle model upgrading file requirement, exit the vehicle machine upgrading operation.

[0080] The asymmetric decryption module 220 is at least configured to: after acquiring the encryption parameter file, extract the private key of the second asymmetric encryption algorithm in the vehicle machine to be upgraded, and decrypt the encryption parameter file based on the private key of the second asymmetric encryption algorithm to acquire the encryption parameter; after acquiring the signature file, extract the public key of the first asymmetric encryption algorithm in the vehicle machine to be upgraded, and verify the signature file based on the public key of the first asymmetric encryption algorithm; if the encryption parameter file is decrypted successfully and the signature file is verified successfully, perform the vehicle machine upgrading operation; and if the encryption parameter file is decrypted unsuccessfully or the signature file is verified unsuccessfully, end the vehicle machine upgrading operation.

[0081] The symmetric decryption module 230 is at least configured to: after acquiring the encryption parameter, decrypt the encrypted file using the encryption parameter to obtain the signature file; based on the decryption result of the encrypted file, determine whether the encrypted file is tampered with; if the encrypted file is decrypted successfully, the encrypted file is not tampered with, and the vehicle machine upgrading operation is continued; and if the encrypted file is decrypted unsuccessfully, the encrypted file is at risk of being tampered with, and the vehicle machine upgrading operation is exited.

[0082] Based on the specific solutions of the above embodiments, FIG. 4 is an implementation flowchart of a vehicle machine upgrade package decryption device provided by an embodiment of the present application. Referring to FIG. 4, before performing a vehicle machine upgrade operation on a to-be-upgraded vehicle machine, a vehicle machine upgrade personnel can preset a public key certificate A P of a first asymmetric encryption algorithm to a smart cockpit read-only area of the to-be-upgraded vehicle machine through an upgrade application in the to-be-upgraded vehicle machine, and preset a private key certificate B R of a second asymmetric encryption algorithm to a smart cockpit secure computing storage area of the to-be-upgraded vehicle machine (equivalent to step B1 in FIG. 4). Further, the vehicle machine upgrade personnel inserts a U disk storing a vehicle machine encrypted upgrade package into an upgrade designated interface of the to-be-upgraded vehicle machine (equivalent to step B2 in FIG. 4). Further, the decryption device is activated automatically with the U disk inserted into the upgrade designated interface. Further, the decryption device obtains the vehicle machine encrypted upgrade package from a designated storage path of the U disk (equivalent to step B4 in FIG. 4). Further, the decryption device obtains the vehicle machine encrypted upgrade package with a file name of “03_072_28_1_20240825_00002005”. Further, the decryption device judges whether the file name of the vehicle machine encrypted upgrade package meets preset vehicle model upgrade file requirements. Further, the decryption device judges whether the 2-bit manufacturer code (i.e., the aforementioned “03”) and the to-be-upgraded vehicle machine are consistent. Further, the decryption device judges whether the 3-bit vehicle model code (i.e., the aforementioned “072”) and the to-be-upgraded vehicle machine are consistent. Further, the decryption device continues to judge whether the 2-bit cockpit code (i.e., the aforementioned “28”) and the to-be-upgraded vehicle machine are consistent. Further, the decryption device judges whether the download date “20240825” of the vehicle machine encrypted upgrade package is within a valid period of vehicle machine upgrade (the valid period can be a date interval, for example, can be “20240801-20240831”). Further, the decryption device determines that the to-be-upgraded vehicle machine performs full upgrade operation based on the vehicle machine encrypted upgrade package according to the full upgrade flag bit “1” of the vehicle machine encrypted upgrade package. Further, the decryption device decompresses the vehicle machine encrypted upgrade package to obtain an encrypted parameter file enc offline file and an encrypted file enc P. Further, the decryption device decrypts the encrypted parameter file enc offline file using the private key certificate B R preset in the smart cockpit secure computing storage area to obtain an encryption key K and an encryption initial vector IV (equivalent to step B5 in FIG. 4). Further, the decryption device decrypts the encrypted file enc P using the encryption key K and the encryption initial vector IV to obtain a compressed package P containing a signed vehicle machine upgrade package (equivalent to step B6 in FIG. 4). Further, the decryption device verifies the signature of the compressed package P using the public key certificate A P preset in the smart cockpit read-only area of the to-be-upgraded vehicle machine (equivalent to step B7 in FIG. 4) to obtain the vehicle machine upgrade package.Further, the decryption device performs a full upgrade operation on the to-be-upgraded vehicle machine based on the vehicle machine upgrade package (equivalent to step B8 in FIG. 4), and deletes the vehicle machine upgrade package, the encrypted parameter file enc_offline_file, the encrypted file enc_P, etc. after the full upgrade is completed (equivalent to step B9 in FIG. 4). Further, after the to-be-upgraded vehicle machine is upgraded, the decryption device is automatically turned off (equivalent to step B10 in FIG. 4).

[0083] To sum up, on one hand, the present embodiment can check the file name of the vehicle machine encrypted upgrade package using the common coding rule before the vehicle machine upgrade personnel performs the off-line upgrade of the intelligent cockpit of the vehicle, so as to avoid the situation that the subsequent cryptographic calculation is performed using the vehicle machine encrypted upgrade package that does not meet the requirements of the preset vehicle model upgrade file, and to reduce the resource occupation of the vehicle machine upgrade system (which can be jointly constituted by the aforementioned encryption device and decryption device). On the other hand, the present embodiment can use the decryption device to perform decryption and signature verification on the vehicle machine encrypted upgrade package, so as to at least solve the problems of unknown source, leakage and malicious tampering of the vehicle machine upgrade package caused by the lack of security protection measures of the vehicle machine upgrade package in the process of off-line upgrade of the cockpit of the vehicle, and to improve the security of the vehicle machine upgrade and reduce the security risk of the off-line upgrade of the cockpit of the vehicle.

[0084] It should be noted that in a specific embodiment, FIG. 5 is an implementation timing diagram of a vehicle machine upgrade provided by the present embodiment, as shown in FIG. 5. During the execution of the vehicle machine upgrade operation, since the vehicle machine upgrade personnel can be one or more, when performing the off-line upgrade of the vehicle machine, the part of the operation shown in FIG. 5 can be processed in parallel (for example, the operations of preinstalling the public key certificate A_P into the read-only area of the intelligent cockpit of the to-be-upgraded vehicle machine and preinstalling the private key certificate B_R into the secure calculation storage area of the intelligent cockpit of the to-be-upgraded vehicle machine can be processed in parallel), so as to reduce the vehicle machine upgrade time and improve the efficiency of the vehicle machine upgrade.

[0085] The present embodiment further provides a vehicle machine upgrade package encryption method, and FIG. 6 is a flowchart of a vehicle machine upgrade package encryption method provided by the present embodiment. The present embodiment can be applicable to the encryption scene of the vehicle machine upgrade package in various vehicles, such as fuel vehicles, pure electric vehicles, hybrid electric vehicles, plug-in hybrid electric vehicles, extended-range electric vehicles, and self-driving vehicles. The vehicle machine upgrade package encryption method can be executed by the vehicle machine upgrade package encryption device in the present embodiment as an execution subject, and the execution subject can be realized in the form of software and / or hardware. As shown in FIG. 6, the vehicle machine upgrade package encryption method at least includes the following steps:

[0086] S1, in response to the production of the vehicle machine upgrade package, the encryption device uses a first asymmetric encryption algorithm to sign the vehicle machine upgrade package to obtain a signature file.

[0087] S2, the encryption device generates an encryption parameter using a preset symmetric encryption algorithm in response to the generation of the signature file.

[0088] S3, the encryption device encrypts the signature file using the encryption parameter to obtain an encrypted file in response to the generation of the encryption parameter.

[0089] S4, the encryption device writes the encryption parameter into a parameter file, encrypts the parameter file using a second asymmetric encryption algorithm to obtain an encrypted parameter file in response to the generation of the encrypted file.

[0090] S5, the encryption device generates a car machine encryption upgrade package based on the encrypted file and the encrypted parameter file at least after the encrypted file and the encrypted parameter file are generated.

[0091] Optionally, the car machine upgrade package encryption method further comprises at least:

[0092] The encryption device pre-prepares a key pair of the first asymmetric encryption algorithm and a key pair of the second asymmetric encryption algorithm to realize the actions of the encryption device signing the car machine upgrade package using the first asymmetric encryption algorithm and encrypting the parameter file using the second asymmetric encryption algorithm.

[0093] The key pair pre-preparation step can be performed before the foregoing step S1.

[0094] Optionally, the encryption device comprises at least an asymmetric encryption module, a symmetric encryption module, and an encrypted upgrade package generation module.

[0095] The asymmetric encryption module is at least used for extracting a private key of the first asymmetric encryption algorithm and signing the car machine upgrade package using the private key of the first asymmetric encryption algorithm when signing the car machine upgrade package using the first asymmetric encryption algorithm (corresponding to the foregoing step S1), and extracting a public key of the second asymmetric encryption algorithm and encrypting the parameter file using the public key of the second asymmetric encryption algorithm when encrypting the parameter file using the second asymmetric encryption algorithm (corresponding to the foregoing step S4);

[0096] The symmetric encryption module is at least used for generating at least a symmetric encryption key and an encryption initial vector using a preset symmetric encryption algorithm after the signature file is generated (corresponding to the foregoing step S2), and encrypting the signature file according to the symmetric encryption key and the encryption initial vector (corresponding to the foregoing step S3);

[0097] The encrypted upgrade package generation module is at least used for generating the car machine encrypted upgrade package according to the encrypted file and the encrypted parameter file according to a specified naming rule after the encrypted file and the encrypted parameter file are generated (corresponding to the foregoing step S5).

[0098] The technical scheme provided by the embodiment first, in response to the making of the car machine upgrade package, the first asymmetric encryption algorithm is used to sign the car machine upgrade package, and the signature file is obtained; further, in response to the generation of the signature file, the encryption device generates an encryption parameter using a preset symmetric encryption algorithm; further, in response to the generation of the encryption parameter, the encryption device uses the encryption parameter to encrypt the signature file, and obtains an encrypted file; further, in response to the generation of the encrypted file, the encryption device writes the encryption parameter into a parameter file, and uses the second asymmetric encryption algorithm to encrypt the parameter file, and obtains an encrypted parameter file; finally, the encryption device generates the car machine encrypted upgrade package based on the encrypted file and the encrypted parameter file at least after the encrypted file and the encrypted parameter file are generated.

[0099] Therefore, before performing the offline upgrade of the intelligent cockpit of the automobile, the encryption device can be used to perform the signature and encryption of the car machine upgrade package, at least overcoming the problem of leakage or malicious tampering of the car machine upgrade package due to the lack of security protection measures of the car machine upgrade package in the process of the offline upgrade of the cockpit of the existing automobile, thereby improving the security of the car machine upgrade package and reducing the security risk of the offline upgrade of the cockpit of the automobile.

[0100] The embodiment of the application also provides a car machine upgrade package decryption method, and FIG. 7 is a flowchart of a car machine upgrade package decryption method provided by the embodiment of the application. The embodiment can be applied to the decryption of the encrypted car machine upgrade package in various vehicles, such as fuel automobiles, pure electric automobiles, hybrid electric automobiles, plug-in hybrid electric automobiles, extended-range electric automobiles, and self-driving automobiles. The car machine upgrade package decryption method can be executed by the car machine upgrade package decryption device in the embodiment of the application as an execution subject, and the execution subject can be realized in the form of software and / or hardware. As shown in FIG. 7, the car machine upgrade package decryption method at least includes the following steps:

[0101] S101, after the decryption device is started, the car machine encrypted upgrade package is obtained.

[0102] S102, the decryption device obtains the encrypted parameter file and the encrypted file at least after determining that the car machine encrypted upgrade package meets the preset vehicle model upgrade file requirements.

[0103] S103, the decryption device uses the second asymmetric encryption algorithm to decrypt the encrypted parameter file, and obtains the encryption parameter.

[0104] S104, after obtaining the encryption parameter, the decryption device uses the encryption parameter to decrypt the encrypted file, and obtains the signature file.

[0105] S105, after obtaining the signature file, the decryption device uses the first asymmetric encryption algorithm to verify the signature file.

[0106] S106. After successfully verifying the signature file, the decryption device obtains the vehicle system upgrade package.

[0107] S107. The decryption device performs a vehicle system upgrade operation based on the vehicle system upgrade package.

[0108] Optionally, the decryption method for the vehicle infotainment system upgrade package may also include at least:

[0109] The decryption device pre-installs the public key of the first asymmetric encryption algorithm and the private key of the second asymmetric encryption algorithm in the vehicle's infotainment system to be upgraded, so that the decryption device can use the second asymmetric encryption algorithm to decrypt the encrypted parameter file and use the first asymmetric encryption algorithm to verify the signature file.

[0110] The step of pre-setting the public and private keys of the vehicle system to be upgraded can be performed before the aforementioned step S101.

[0111] Optionally, the decryption method for the vehicle infotainment system upgrade package may also include at least:

[0112] In response to the acquisition of the vehicle infotainment system encrypted upgrade package, the decryption device verifies the name of the vehicle infotainment system encrypted upgrade package to determine whether the vehicle infotainment system encrypted upgrade package meets the preset vehicle model upgrade file requirements.

[0113] The step of verifying the name of the vehicle infotainment encryption upgrade package can be performed before step S102.

[0114] Optionally, the decryption method for the vehicle infotainment system upgrade package may also include at least:

[0115] After the vehicle infotainment system upgrade is completed, the decryption device deletes the upgrade package and process files.

[0116] The step of deleting the vehicle infotainment system upgrade package and process files can be performed after step S107.

[0117] Optionally, the decryption device includes at least an upgrade package verification module, an asymmetric decryption module, and a symmetric decryption module;

[0118] The upgrade package verification module is at least used to: obtain the vehicle infotainment encrypted upgrade package in response to the opening of the decryption device (corresponding to the aforementioned step S101); and, after obtaining the vehicle infotainment encrypted upgrade package, verify whether the name of the vehicle infotainment encrypted upgrade package conforms to the preset vehicle model upgrade file requirements; and, after determining that the name of the vehicle infotainment encrypted upgrade package conforms to the preset vehicle model upgrade file requirements, decompress the vehicle infotainment encrypted upgrade package to obtain the encrypted file and the encrypted parameter file (corresponding to the aforementioned step S102); and, after determining that the name of the vehicle infotainment encrypted upgrade package does not conform to the preset vehicle model upgrade file requirements, exit the vehicle infotainment upgrade operation.

[0119] The asymmetric decryption module is configured to: extract a private key of a second asymmetric encryption algorithm in the vehicle machine to be upgraded after obtaining the encrypted parameter file, and decrypt the encrypted parameter file based on the private key of the second asymmetric encryption algorithm to obtain the encrypted parameter (corresponding to the step S103); extract a public key of a first asymmetric encryption algorithm in the vehicle machine to be upgraded after obtaining the signature file, and verify the signature file based on the public key of the first asymmetric encryption algorithm (corresponding to the step S105); and if the encrypted parameter file is decrypted successfully and the signature file is verified successfully, perform the vehicle machine upgrading operation; and if the encrypted parameter file is decrypted unsuccessfully or the signature file is verified unsuccessfully, end the vehicle machine upgrading operation.

[0120] The symmetric decryption module is configured to: decrypt the encrypted file using the encrypted parameter to obtain the signature file (corresponding to the step S104); and determine whether the encrypted file is tampered based on a result of the decryption of the encrypted file, if the encrypted file is decrypted successfully, the encrypted file is not tampered, and the vehicle machine upgrading operation is continued (corresponding to the steps S106 and S107); and if the encrypted file is decrypted unsuccessfully, the encrypted file is at risk of being tampered, and the vehicle machine upgrading operation is exited.

[0121] The technical scheme provided by the embodiment comprises the following steps: first, the decryption device is started, and the encrypted vehicle machine upgrading package is obtained; further, the decryption device obtains the encrypted parameter file and the encrypted file after determining that the encrypted vehicle machine upgrading package meets the preset vehicle model upgrading file requirement; further, the decryption device decrypts the encrypted parameter file using a second asymmetric encryption algorithm to obtain the encrypted parameter; further, the decryption device decrypts the encrypted file using the encrypted parameter to obtain the signature file after obtaining the encrypted parameter; further, the decryption device verifies the signature file using a first asymmetric encryption algorithm after obtaining the signature file; further, the decryption device obtains the vehicle machine upgrading package after successfully verifying the signature file; and finally, the decryption device performs the vehicle machine upgrading operation based on the vehicle machine upgrading package.

[0122] Therefore, the embodiment can verify and decrypt the encrypted vehicle machine upgrading package using the decryption device before performing the offline upgrading of the intelligent vehicle cabin, so as to at least solve the problems of unknown source, leakage and malicious tampering of the vehicle machine upgrading package caused by the lack of security protection measures of the vehicle machine upgrading package in the process of the offline upgrading of the vehicle cabin, and improve the security of the vehicle machine upgrading and reduce the security risk of the offline upgrading of the vehicle cabin.

[0123] Note that the above merely describes preferred embodiments of the present application and the principles of the technology applied. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and that various obvious changes, modifications and substitutions can be made without departing from the scope of the present application. Therefore, although the present application has been described in detail through the above embodiments, the present application is not limited to the above embodiments, and can include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the claims.

Claims

1. A device for encrypting a car kit upgrade package, characterized in that, The encryption device is used at least for: in response to the vehicle machine upgrade package being made, signing the vehicle machine upgrade package using a first asymmetric encryption algorithm to obtain a signature file; and, in response to the signature file being generated, generating an encryption parameter using a preset symmetric encryption algorithm; and, in response to the encryption parameter being generated, encrypting the signature file using the encryption parameter to obtain an encrypted file; and, in response to the encrypted file being generated, writing the encryption parameter into a parameter file, and encrypting the parameter file using a second asymmetric encryption algorithm to obtain an encrypted parameter file; and, at least after the encrypted file and the encrypted parameter file are generated, generating a vehicle machine encrypted upgrade package based on the encrypted file and the encrypted parameter file.

2. The dongle upgrade package encryption apparatus of claim 1, wherein, The encryption device is further used at least for pre-preparing a key pair of the first asymmetric encryption algorithm and a key pair of the second asymmetric encryption algorithm, so as to realize the actions of the encryption device signing the vehicle machine upgrade package using the first asymmetric encryption algorithm and encrypting the parameter file using the second asymmetric encryption algorithm.

3. The dongle upgrade package encryption apparatus of claim 1, wherein, The encryption device at least comprises an asymmetric encryption module, a symmetric encryption module and an encrypted upgrade package generation module; The asymmetric encryption module is used at least for, when signing the vehicle machine upgrade package using the first asymmetric encryption algorithm, extracting a private key of the first asymmetric encryption algorithm and signing the vehicle machine upgrade package using the private key of the first asymmetric encryption algorithm; and, when encrypting the parameter file using the second asymmetric encryption algorithm, extracting a public key of the second asymmetric encryption algorithm and encrypting the parameter file using the public key of the second asymmetric encryption algorithm; The symmetric encryption module is used at least for, after the signature file is generated, generating at least a symmetric encryption key and an encryption initial vector using the preset symmetric encryption algorithm; and encrypting the signature file according to the symmetric encryption key and the encryption initial vector; The encrypted upgrade package generation module is used at least for, after the encrypted file and the encrypted parameter file are generated, generating the vehicle machine encrypted upgrade package according to the encrypted file and the encrypted parameter file according to a specified naming rule.

4. A vehicle head unit upgrade package decryption apparatus, characterized by comprising: The decryption device is used at least for: in response to the decryption device being started, obtaining a vehicle machine encrypted upgrade package; and, at least after it is determined that the vehicle machine encrypted upgrade package meets preset vehicle model upgrade file requirements, obtaining an encrypted parameter file and an encrypted file; and, decrypting the encrypted parameter file using a second asymmetric encryption algorithm to obtain an encryption parameter; and, after the encryption parameter is obtained, decrypting the encrypted file using the encryption parameter to obtain a signature file; and, after the signature file is obtained, verifying the signature file using a first asymmetric encryption algorithm; and, after successfully verifying the signature file, obtaining a vehicle machine upgrade package; and, based on the vehicle machine upgrade package, performing a vehicle machine upgrade operation.

5. The car kit upgrade package decryption apparatus of claim 4, wherein, The decryption device is further configured to preset a public key of the first asymmetric encryption algorithm and a private key of the second asymmetric encryption algorithm in a to-be-upgraded vehicle machine, so that the decryption device uses the second asymmetric encryption algorithm to decrypt the encrypted parameter file and uses the first asymmetric encryption algorithm to verify the signature file.

6. The car kit upgrade package decryption apparatus of claim 5, wherein, The decryption device is further configured to, in response to obtaining of the vehicle machine encrypted upgrade package, verify a name of the vehicle machine encrypted upgrade package to determine whether the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement.

7. The car kit upgrade package decryption apparatus of claim 4, wherein, The decryption device is further configured to delete the vehicle machine upgrade package and process file after the vehicle machine upgrade operation is completed.

8. The car kit upgrade package decryption apparatus of claim 6, wherein, The decryption device at least comprises an upgrade package verification module, an asymmetric decryption module and a symmetric decryption module. The upgrade package verification module is at least configured to, in response to starting of the decryption device, obtain the vehicle machine encrypted upgrade package; and after obtaining the vehicle machine encrypted upgrade package, verify whether a name of the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement. After determining that the name of the vehicle machine encrypted upgrade package meets the preset vehicle model upgrade file requirement, the decryption device decompresses the vehicle machine encrypted upgrade package to obtain the encrypted file and the encrypted parameter file. After determining that the name of the vehicle machine encrypted upgrade package does not meet the preset vehicle model upgrade file requirement, the decryption device exits the vehicle machine upgrade operation. The asymmetric decryption module is at least configured to, after obtaining the encrypted parameter file, extract the private key of the second asymmetric encryption algorithm in the to-be-upgraded vehicle machine, and decrypt the encrypted parameter file based on the private key of the second asymmetric encryption algorithm to obtain the encrypted parameter; and after obtaining the signature file, extract the public key of the first asymmetric encryption algorithm in the to-be-upgraded vehicle machine, and verify the signature file based on the public key of the first asymmetric encryption algorithm; and if the encrypted parameter file is successfully decrypted and the signature file is verified, the vehicle machine upgrade operation is performed; and if the encrypted parameter file is not successfully decrypted or the signature file is not verified, the vehicle machine upgrade operation is ended. The symmetric decryption module is at least configured to, after obtaining the encrypted parameter, use the encrypted parameter to decrypt the encrypted file to obtain the signature file. The symmetric decryption module is at least configured to, after obtaining the encrypted parameter, use the encrypted parameter to decrypt the encrypted file to obtain the signature file. If the encrypted file is successfully decrypted, the encrypted file is not tampered with, and the vehicle machine upgrade operation is continued. If the encrypted file is not successfully decrypted, the encrypted file is at risk of being tampered with, and the vehicle machine upgrade operation is exited.

9. A vehicle head unit upgrade package encryption method, characterized by, The method comprises the following steps: S1. The encryption device uses a first asymmetric encryption algorithm to sign the vehicle machine upgrade package to obtain a signature file in response to manufacturing of the vehicle machine upgrade package. S2. The encryption device uses a preset symmetric encryption algorithm to generate an encrypted parameter in response to generation of the signature file. S3, the encryption device, in response to generation of the encryption parameter, encrypts the signature file using the encryption parameter to obtain an encrypted file; S4, the encryption device, in response to generation of the encrypted file, writes the encryption parameter into a parameter file and encrypts the parameter file using a second asymmetric encryption algorithm to obtain an encrypted parameter file; S5, the encryption device generates a car machine encryption upgrade package based on the encrypted file and the encrypted parameter file at least after the encrypted file and the encrypted parameter file are generated.

10. A vehicle head unit upgrade package decryption method, characterized by, The car machine offline upgrade decryption device of claim 4 executes the method, and the method at least comprises: S101, the decryption device obtains a car machine encryption upgrade package after being started; S102, the decryption device obtains an encrypted parameter file and an encrypted file at least after determining that the car machine encryption upgrade package meets preset vehicle model upgrade file requirements; S103, the decryption device decrypts the encrypted parameter file using a second asymmetric encryption algorithm to obtain an encryption parameter; S104, the decryption device decrypts the encrypted file using the encryption parameter to obtain a signature file after obtaining the encryption parameter; S105, the decryption device verifies the signature file using a first asymmetric encryption algorithm after obtaining the signature file; S106, the decryption device obtains a car machine upgrade package after successfully verifying the signature file; S107, the decryption device executes a car machine upgrade operation based on the car machine upgrade package.

Images