CN117675575A - Processing method of vehicle remote upgrade data packet and electronic equipment - Google Patents

Abstract

The invention discloses a processing method of a vehicle remote upgrade data packet and electronic equipment. Wherein the method comprises the following steps: acquiring a task upgrading packet corresponding to a vehicle-end upgrading task, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle-end, and the task upgrading packet at least comprises basic information of the upgrading task; decrypting and signature verification are carried out on the task upgrading packet so as to determine whether the task upgrading packet is correct or not; responding to the correctness of the task upgrade package, and acquiring an equipment upgrade package corresponding to equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded; decrypting and signature verification are carried out on the equipment upgrading package to determine whether the equipment upgrading package is correct or not; and responding to the correct equipment upgrade package, and executing an upgrade task based on the basic information so as to upgrade the equipment to be upgraded by using the upgrade information. The invention solves the technical problems of poor reliability and security of the processing method of the remote upgrading data packet provided by the related technology.

Description

Processing method of vehicle remote upgrade data packet and electronic equipment

Technical Field

The invention relates to the field of vehicle cloud communication, in particular to a processing method of a vehicle remote upgrade data packet and electronic equipment.

Background

The process of remote upgrade of the whole vehicle relates to file transmission between a vehicle end (client) and a cloud end (server), and because the vehicle end stores relevant sensitive information of users such as account passwords and the like and the vehicle end electronic control units (Electronic Control Unit, ECU) are communicated with each other mostly through a controller local area network (Controller Area Network, CAN) bus or a vehicle-mounted Ethernet, when the communication process is invaded, all control information of the whole vehicle network is at risk of being stolen, so that in the process of upgrading vehicle end equipment, the safety of data transmission of an upgrade package is necessary.

As can be seen from the above analysis, no effective solution has been proposed at present for the problem of poor reliability and security of the processing method of the remote upgrade data packet provided by the above related art.

Disclosure of Invention

The embodiment of the invention provides a processing method of a vehicle remote upgrading data packet and electronic equipment, which at least solve the technical problems of poor reliability and safety of the processing method of the remote upgrading data packet provided by the related technology.

According to an aspect of the embodiment of the invention, there is provided a method for processing a vehicle remote upgrade data packet, including:

Acquiring a task upgrading packet corresponding to a vehicle-end upgrading task, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle-end, and the task upgrading packet at least comprises basic information of the upgrading task; decrypting and signature verification are carried out on the task upgrading packet so as to determine whether the task upgrading packet is correct or not; responding to the correctness of the task upgrade package, and acquiring an equipment upgrade package corresponding to equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded; decrypting and signature verification are carried out on the equipment upgrading package to determine whether the equipment upgrading package is correct or not; and responding to the correct equipment upgrade package, and executing an upgrade task based on the basic information so as to upgrade the equipment to be upgraded by using the upgrade information.

Optionally, the task upgrade package is obtained by performing file compression on the basic information, the first encoded file and the first digital signature file, and the equipment upgrade package is obtained by performing file compression on the upgrade information, the second encoded file and the second digital signature file.

Optionally, the first encoded file is obtained after encoding and operating the content of the basic information based on the first encryption algorithm, the second encoded file is obtained after encoding and operating the content of the upgrade information based on the first encryption algorithm, the first digital signature file is obtained after compressing the third encoded file and the preset public key, the third encoded file is obtained after encoding and operating the content of the first encoded file based on the second encryption algorithm, the second digital signature file is obtained after compressing the fourth encoded file and the preset public key, the fourth encoded file is obtained after encoding and operating the content of the second encoded file based on the second encryption algorithm, and the security of the first encryption algorithm is higher than that of the second encryption algorithm.

Optionally, in response to the task upgrade package being correct, acquiring the device upgrade package corresponding to the device to be upgraded based on the task upgrade package, including: responding to the correctness of the task upgrading packet, analyzing the task upgrading packet to obtain the downloading information of the equipment upgrading packet, wherein the downloading information at least comprises the downloading address of the equipment upgrading packet; and acquiring the equipment upgrade package based on the download address.

Optionally, decrypting and signature verifying the device upgrade package to determine whether the device upgrade package is correct, including: decrypting the equipment upgrading packet to obtain a decrypted file; decompressing the compressed file in the decrypted file to obtain a sub-file of the equipment upgrading package; the subfiles are signature verified based on the trusted execution environment to determine if the subfiles are correct.

Optionally, decrypting the device upgrade package to obtain a decrypted file, including: decrypting the ciphertext of the equipment upgrading packet based on a preset root key to obtain a decrypted data packet; and decoding the content of the decrypted data packet based on a decryption algorithm to obtain a decrypted file.

Optionally, the subfile includes upgrade information, a second encoded file, and a second digital signature file in the device upgrade package, and signature verification is performed on the subfile based on the trusted execution environment to determine whether the subfile is correct, including: verifying the second encoded file based on the signed certificate within the trusted execution environment to determine if the second encoded file is correct; and in response to the second encoded file being correct, performing a decoding operation on the second encoded file based on the second digital signature file to determine whether the underlying information is correct.

Optionally, the method for processing the vehicle remote upgrade data packet further includes: acquiring state information of a task upgrade package and a device upgrade package, wherein the state information at least comprises: download status, encryption status, decryption status, signature verification status; detecting the state information and feeding back a detection result, wherein the detection result is used for determining whether the processing flows of the task upgrade package and the equipment upgrade package are abnormal or not.

Optionally, the method for processing the vehicle remote upgrade data packet further includes: and generating exception prompt information and executing exception handling measures in response to the processing flow exception.

According to another aspect of the embodiment of the present invention, there is also provided a processing device for a vehicle remote upgrade data packet, including:

the system comprises a first acquisition module, a second acquisition module and a first processing module, wherein the first acquisition module is used for acquiring a task upgrading packet corresponding to a vehicle-end upgrading task, the upgrading task is used for upgrading equipment to be upgraded of the vehicle-end, and the task upgrading packet at least comprises basic information of the upgrading task; the first processing module is used for decrypting and verifying the signature of the task upgrading packet so as to determine whether the task upgrading packet is correct or not; the second acquisition module is used for responding to the correctness of the task upgrade package and acquiring an equipment upgrade package corresponding to equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded; the second processing module is used for decrypting and signature verification of the equipment upgrading package so as to determine whether the equipment upgrading package is correct or not; and the upgrading module is used for responding to the correctness of the equipment upgrading packet, executing the upgrading task based on the basic information and upgrading the equipment to be upgraded by utilizing the upgrading information.

Optionally, the first acquisition module and the second acquisition module are further configured to: the task upgrade package is obtained by carrying out file compression on the basic information, the first coded file and the first digital signature file, and the equipment upgrade package is obtained by carrying out file compression on the upgrade information, the second coded file and the second digital signature file.

Optionally, the first acquisition module and the second acquisition module are further configured to: the method comprises the steps that a first coded file is obtained after coding operation is conducted on content of basic information based on a first encryption algorithm, a second coded file is obtained after coding operation is conducted on content of upgrade information based on a first encryption algorithm, a first digital signature file is obtained after file compression is conducted on a third coded file and a preset public key, a third coded file is obtained after coding operation is conducted on content of the first coded file based on a second encryption algorithm, a second digital signature file is obtained after file compression is conducted on a fourth coded file and a preset public key, a fourth coded file is obtained after coding operation is conducted on content of the second coded file based on a second encryption algorithm, and safety of the first encryption algorithm is higher than that of the second encryption algorithm.

Optionally, the second obtaining module is further configured to: responding to the correct task upgrading packet, acquiring the equipment upgrading packet corresponding to the equipment to be upgraded based on the task upgrading packet, wherein the method comprises the following steps: responding to the correctness of the task upgrading packet, analyzing the task upgrading packet to obtain the downloading information of the equipment upgrading packet, wherein the downloading information at least comprises the downloading address of the equipment upgrading packet; and acquiring the equipment upgrade package based on the download address.

Optionally, the second processing module is further configured to: decrypting and signature verification of the device upgrade package to determine whether the device upgrade package is correct, including: decrypting the equipment upgrading packet to obtain a decrypted file; decompressing the compressed file in the decrypted file to obtain a sub-file of the equipment upgrading package; the subfiles are signature verified based on the trusted execution environment to determine if the subfiles are correct.

Optionally, the second processing module is further configured to: decrypting the equipment upgrade package to obtain a decrypted file, including: decrypting the ciphertext of the equipment upgrading packet based on a preset root key to obtain a decrypted data packet; and decoding the content of the decrypted data packet based on a decryption algorithm to obtain a decrypted file.

Optionally, the second processing module is further configured to: the subfiles comprise upgrade information, a second coded file and a second digital signature file in the device upgrade package, and signature verification is performed on the subfiles based on a trusted execution environment to determine whether the subfiles are correct, and the method comprises the following steps: verifying the second encoded file based on the signed certificate within the trusted execution environment to determine if the second encoded file is correct; and in response to the second encoded file being correct, performing a decoding operation on the second encoded file based on the second digital signature file to determine whether the underlying information is correct.

Optionally, the processing device of the vehicle remote upgrade data packet further includes: the third obtaining module is configured to obtain status information of the task upgrade package and the equipment upgrade package, where the status information at least includes: download status, encryption status, decryption status, signature verification status; detecting the state information and feeding back a detection result, wherein the detection result is used for determining whether the processing flows of the task upgrade package and the equipment upgrade package are abnormal or not.

Optionally, the processing device of the vehicle remote upgrade data packet further includes: and the third processing module is used for responding to the abnormality of the processing flow, generating abnormality prompt information and executing abnormality processing measures.

According to still another aspect of the embodiment of the present invention, there is also provided an electronic device including an in-vehicle memory in which a computer program is stored, and an in-vehicle processor configured to run the computer program to perform the method for processing the vehicle remote upgrade data packet of any one of the foregoing.

In the embodiment of the invention, a task upgrade package corresponding to a vehicle-end upgrade task is firstly obtained, wherein the upgrade task is used for upgrading equipment to be upgraded of the vehicle-end, the task upgrade package at least comprises basic information of the upgrade task, then decryption and signature verification are carried out on the task upgrade package to determine whether the task upgrade package is correct, then the equipment upgrade package corresponding to the equipment to be upgraded is obtained based on the task upgrade package in response to the correctness of the task upgrade package, the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded, decryption and signature verification are carried out on the equipment upgrade package to determine whether the equipment upgrade package is correct, and finally, the upgrade task is executed based on the basic information in response to the correctness of the equipment upgrade package to upgrade the equipment to be upgraded by utilizing the upgrade information.

It is easy to understand that the method provided by the invention achieves the aim of safely transmitting the upgrade data packages such as the task upgrade package, the equipment upgrade package and the like by decrypting and signing and verifying the task upgrade package and the equipment upgrade package for a plurality of times, thereby realizing the technical effects of improving the reliability and the safety of the task upgrade package and the equipment upgrade package in the transmission process, and further solving the technical problem that the reliability and the safety of the remote upgrade data package processing method provided by the related technology are poor.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the invention and do not constitute a limitation on the invention. In the drawings:

FIG. 1 is a hardware block diagram of a vehicle terminal according to an alternative method for processing a vehicle remote upgrade data packet according to an embodiment of the present invention;

FIG. 2 is a flow chart of a method of processing a vehicle remote upgrade data packet according to an embodiment of the present invention;

FIG. 3 is a schematic illustration of an alternative vehicle remote upgrade package processing procedure according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of an alternative vehicle remote upgrade package according to an embodiment of the present invention;

FIG. 5 is a schematic illustration of an alternative vehicle remote upgrade data package processing flow in accordance with an embodiment of the present invention;

FIG. 6 is a schematic diagram of an alternative vehicle remote upgrade package processing procedure according to an embodiment of the present invention;

FIG. 7 is a block diagram of an alternative processing device for a vehicle remote upgrade data package according to an embodiment of the present invention;

FIG. 8 is a block diagram of an alternative processing device for a vehicle remote upgrade data package according to an embodiment of the present invention;

Fig. 9 is a block diagram of a processing apparatus of a remote upgrade data packet of a vehicle according to still another alternative embodiment of the present invention.

Detailed Description

In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.

It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

According to an embodiment of the present invention, there is provided a method embodiment of a method for processing a vehicle remote upgrade data package, it should be noted that the steps illustrated in the flowchart of the drawings may be performed in a computer system such as a set of computer executable instructions, and that although a logical order is illustrated in the flowchart, in some cases, the steps illustrated or described may be performed in an order different from that herein.

Fig. 1 is a hardware block diagram of a vehicle terminal according to an alternative method of processing a vehicle remote upgrade data package according to an embodiment of the present invention, as shown in fig. 1, a vehicle terminal 10 (or a mobile device 10 having communication association with a vehicle) may include one or more processors 102 (the processors 102 may include, but are not limited to, a processing means such as a microprocessor (Microcontroller Unit, MCU) or a programmable logic device (Field Programmable Gate Array, FPGA)), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, the method may further include: display device 110, input/output device 108 (i.e., I/O device), universal serial bus (Universal Serial Bus, USB) port (which may be included as one of the ports of a computer bus, not shown), network interface (not shown), power supply (not shown), and/or camera (not shown). It will be appreciated by those skilled in the art that the configuration shown in fig. 1 is merely illustrative and is not intended to limit the configuration of the vehicle terminal 1 described above. For example, the vehicle terminal 10 may also include more or fewer components than shown in FIG. 1, or have a different configuration than shown in FIG. 1.

It should be noted that the one or more processors 102 and/or other data processing circuits described above may be embodied in whole or in part in software, hardware, firmware, or any combination thereof. Further, the data processing circuitry may be a single stand-alone processing module, or incorporated in whole or in part into any of the other elements in the vehicle terminal 10 (or mobile device).

The memory 104 may be used to store software programs and modules of application software, such as program instructions/data storage devices corresponding to the processing method of the vehicle remote upgrade data packet in the embodiment of the present invention, and the processor 102 executes the software programs and modules stored in the memory 104, thereby executing various functional applications and data processing, that is, implementing the processing method of the vehicle remote upgrade data packet. Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include memory remotely located relative to the processor 102, which may be connected to the vehicle terminal 10 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission device 106 is used to receive or transmit data via a network. The specific examples of the network described above may include a wireless network provided by a communication provider of the vehicle terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC) that can connect to other network devices through a base station to communicate with the internet. In one example, the transmission device 106 may be a Radio Frequency (RF) module for communicating with the internet wirelessly.

In the above-mentioned operating environment, the embodiment of the present invention provides a method for processing a vehicle remote upgrade data packet as shown in fig. 2, and fig. 2 is a flowchart of a method for processing a vehicle remote upgrade data packet according to an embodiment of the present invention, as shown in fig. 2, where the embodiment shown in fig. 2 may at least include implementation steps, that is, may be the technical solutions implemented in steps S201 to S205.

Step S201, a task upgrading package corresponding to a vehicle-end upgrading task is obtained, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle-end, and the task upgrading package at least comprises basic information of the upgrading task;

Step S202, decrypting and signature verification are carried out on the task upgrade package to determine whether the task upgrade package is correct or not;

step S203, in response to the correctness of the task upgrade package, acquiring an equipment upgrade package corresponding to the equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded;

step S204, decrypting and signature verification are carried out on the equipment upgrade package to determine whether the equipment upgrade package is correct or not;

step S205, in response to the equipment upgrade package being correct, an upgrade task is executed based on the basic information so as to upgrade the equipment to be upgraded by using the upgrade information.

In the technical solutions provided in the steps S201 to S203, the vehicle-end upgrade task may be to upgrade and update vehicle equipment, and the vehicle-end equipment may include, but is not limited to: one or more ECUs, in-vehicle entertainment systems (in-vehicle navigation, audio, video, etc.), in-vehicle communication systems (in-vehicle telephone, bluetooth connection, wireless network, etc.), vehicle driving assistance systems (lane keeping assistance, adaptive cruise control, automatic parking, etc.). The task upgrade package may include basic information such as upgrade orders of a plurality of vehicle devices to be upgraded, upgrade policies, and the like, where the upgrade policies may include types supported by upgrade files, upgrade modes and protocols of the devices to be upgraded. The device upgrade package may include upgrade data corresponding to a single device to be upgraded, including but not limited to: upgrade files, code files, digital signature files.

The above method is further described below in conjunction with fig. 3.

FIG. 3 is a schematic diagram of an alternative processing procedure of a vehicle remote upgrade data packet according to an embodiment of the present invention, and as shown in FIG. 3, the processing system of the vehicle remote upgrade data packet includes: the remote download cloud may be an Over-The-Air Technology (OTA) cloud, a server, which may be a content delivery network (Content Delivery Network, CDN) server, a gateway/content delivery network, a remote download component, and an independent download electronic control unit. The electronic control unit for independent downloading can be preset with a communication root certificate chain and a signature root certificate chain, and can realize decryption and signature verification of the OTA upgrade package, so that the transmission safety and reliability of the OTA upgrade package are improved.

In the embodiment of the invention, a task upgrade package corresponding to a vehicle-end upgrade task is firstly obtained, wherein the upgrade task is used for upgrading equipment to be upgraded of the vehicle-end, the task upgrade package at least comprises basic information of the upgrade task, then decryption and signature verification are carried out on the task upgrade package to determine whether the task upgrade package is correct, then the equipment upgrade package corresponding to the equipment to be upgraded is obtained based on the task upgrade package in response to the correctness of the task upgrade package, the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded, decryption and signature verification are carried out on the equipment upgrade package to determine whether the equipment upgrade package is correct, and finally, the upgrade task is executed based on the basic information in response to the correctness of the equipment upgrade package to upgrade the equipment to be upgraded by utilizing the upgrade information.

It is easy to understand that the method provided by the invention achieves the aim of safely transmitting the upgrade data packages such as the task upgrade package, the equipment upgrade package and the like by decrypting and signing and verifying the task upgrade package and the equipment upgrade package for a plurality of times, thereby realizing the technical effects of improving the reliability and the safety of the task upgrade package and the equipment upgrade package in the transmission process, and further solving the technical problem that the reliability and the safety of the remote upgrade data package processing method provided by the related technology are poor.

The above-described methods of embodiments of the present invention are further described below.

In an alternative embodiment, the task upgrade package is obtained by performing file compression on the basic information, the first encoded file and the first digital signature file, and the device upgrade package is obtained by performing file compression on the upgrade information, the second encoded file and the second digital signature file.

The method comprises the steps that a first encoding file is obtained after encoding operation is conducted on content of basic information based on a first encryption algorithm, a second encoding file is obtained after encoding operation is conducted on content of upgrade information based on the first encryption algorithm, a first digital signature file is obtained after file compression is conducted on a third encoding file and a preset public key, a third encoding file is obtained after encoding operation is conducted on content of the first encoding file based on the second encryption algorithm, a second digital signature file is obtained after file compression is conducted on a fourth encoding file and the preset public key, the fourth encoding file is obtained after encoding operation is conducted on content of the second encoding file based on the second encryption algorithm, and safety of the first encryption algorithm is higher than that of the second encryption algorithm.

The above method is further described below with reference to fig. 4 and 5.

Fig. 4 is a schematic diagram of an optional vehicle remote upgrade data packet according to an embodiment of the present invention, as shown in fig. 4, as an optional implementation manner, the device to be upgraded is N electronic controllers, and the vehicle remote upgrade data packet may include: the system comprises a task upgrade package, a first device upgrade package, an nth device upgrade package and a third device upgrade package, wherein any device upgrade package is an upgrade package corresponding to any electronic controller. It should also be noted that the task upgrade package (manifest. Zip) may include: a file list (manifiest. Xml), attribute information (mechanism. Xml) of an electronic controller corresponding to each whole vehicle hardware version, policy information (policy. Xml) corresponding to each whole vehicle hardware version, a presetting list (vehwvpl. Xml) of the hardware version of the whole vehicle electronic controller, a presetting list (veswvpl. Xml) of the software version of the whole vehicle electronic controller, a release specification file (release_note. Zip), a coding file (signature. Txt) of each sub-file, and a digital signature file (signature. P7); any of the device upgrade packages may include: installation files (xml), upgrade files, encoding files (signature. Txt), digital signature files (signature. P7).

Fig. 5 is a schematic diagram of an optional processing flow of a vehicle remote upgrade data packet according to an embodiment of the present invention, as shown in fig. 5, in the technical solution provided in the present invention, in an execution cycle of an upgrade task for upgrading a plurality of ECUs, the upgrade task may include a plurality of (N) devices to be upgraded, an ECU provider may upload an upgrade file of each device to be upgraded to a cloud (remote download server) in advance, the cloud first performs an encoding operation on a content of the upgrade file of each device to be upgraded using a first encryption algorithm (such as SHA 512), generates an encoding file (signature. Txt), then performs an operation on a content of the encoding file using a second encryption algorithm (such as SHA 256), and packages a calculation result and a preset public key stored in the cloud to a digital signature file (signature. P7), and further packages an installation file, an upgrade file, the encoding file and the digital signature file of each device to be upgraded to a first device upgrade package [ ECU ] [1] zip ] to [ N ] ECU ]. Zip ] shown in fig. 4.

As still shown in fig. 5, in addition, the cloud may store task information such as an upgrade order and an upgrade policy of a plurality of devices to be upgraded, and when the upgrade file of each device to be upgraded is encrypted, the content of the task information is encoded and operated by using the first encryption algorithm to obtain an encoded file of the task information, then, the content of the encoded file is operated by using a second encryption algorithm (such as SHA 256), and the operation result and a preset public key stored in the cloud are packaged into a digital signature file (signature.p7), further, the cloud compresses a file list of the upgrade information, attribute information of an electronic controller corresponding to each whole vehicle hardware version, policy information corresponding to each whole vehicle hardware version, a preset list of the whole vehicle electronic controller software version, a release specification file, and the encoded file and the digital signature file corresponding to subfiles of each type of task information to a task upgrade package (manifest.zip) shown in fig. 4.

In an optional embodiment, in step S203, in response to the task upgrade packet being correct, obtaining, based on the task upgrade packet, a device upgrade packet corresponding to a device to be upgraded, including:

step S2031, resolving the task upgrade package to obtain the download information of the equipment upgrade package in response to the correctness of the task upgrade package, wherein the download information at least comprises the download address of the equipment upgrade package;

step S2032, acquire the device upgrade package based on the download address.

In the technical scheme provided by the invention, the vehicle end and the cloud end can interact and synchronously upgrade data through a hypertext transfer security (Hypertext Transfer Protocol Secure, HTTPS) protocol, under the condition, the communication between the vehicle end and the cloud end can be carried out based on transmission layer security (Transport Layer Security, TLS) encryption, and the vehicle end and the cloud end can be used for synchronously issuing upgrade tasks, reporting the execution progress of the upgrade tasks and the like.

In the technical scheme provided by the invention, as shown in fig. 5, after an upgrade task is determined, upgrade information can be written in by using a Device Manager (DM) and upgrade is triggered, a vehicle end can firstly obtain a download address of a task upgrade package, download the task upgrade package corresponding to the upgrade task from a cloud CDN based on the download address, further decrypt and check the task upgrade package to determine whether the task upgrade package is correct, and analyze the task upgrade package under the condition that the task upgrade package is correct to obtain information such as download addresses, download sequences, preset lists and the like of a plurality of ECUs to be upgraded, wherein the download address of each ECU to be upgraded is issued to an OTA component (remote download component) by the cloud end and is safely stored, and the download sequence of the Device upgrade package of each ECU to be upgraded can be determined by strategy information corresponding to each whole vehicle hardware version in the task upgrade package shown in fig. 4.

In the technical scheme provided by the invention, further, the main control node of the vehicle-end upgrading task can transmit the download address of each equipment upgrading packet to a plurality of independent download nodes, each independent download node is used for processing the download flow of the equipment upgrading packet of a single ECU to be upgraded, the OTA component of the vehicle end can transmit the download address of the single equipment upgrading packet to the inside of the independent download ECU through a bus, and the encryption data transmission based on the HTTPS protocol can be realized between the cloud CDN and the independent download ECU.

In an alternative embodiment, in step S204, decrypting and signature verification is performed on the device upgrade package to determine whether the device upgrade package is correct, including:

step S2041, decrypting the equipment upgrade package to obtain a decrypted file;

step S2042, decompressing the compressed file in the decrypted file to obtain a subfile of the equipment upgrade package;

in step S2043, the subfiles are signature verified based on the trusted execution environment to determine whether the subfiles are correct.

In step S2041, the device upgrade package is decrypted to obtain a decrypted file, which includes:

step S20411, decrypting the ciphertext of the equipment upgrade package based on the preset root key to obtain a decrypted data package;

In step S20412, the content of the decrypted data packet is decoded based on the decryption algorithm to obtain a decrypted file.

As shown in fig. 5, the independent download ECU may download the device upgrade package through the CDN server based on the download address of the device upgrade package, decrypt the device upgrade package after the downloading is completed, first decrypt the TEE ciphertext of the device upgrade package by using a root key (preset root key) that is safely stored inside the TEE, output a decrypted file (decrypted data packet) by the TEE, and then, perform a lower-layer decryption on the decrypted file by the OTA component by using a decryption algorithm, and perform a decompression operation on the decrypted data packet after the lower-layer decryption is completed, so as to obtain a decrypted file.

In an alternative embodiment, in step S2043, the subfile includes upgrade information in the device upgrade package, a second encoded file, and a second digital signature file, and signature verification is performed on the subfile based on the trusted execution environment to determine whether the subfile is correct, including:

step S20431, verify the second encoded file based on the signature certificate within the trusted execution environment to determine whether the second encoded file is correct;

in step S20432, in response to the second encoded file being correct, a decoding operation is performed on the second encoded file based on the second digital signature file to determine whether the underlying information is correct.

In the technical scheme provided by the invention, a trusted execution environment (Trusted Execution Environment, TEE) can be mutually called with external equipment through a trusted execution environment library interface, the trusted execution environment can provide safe operation environment protection for data transmission, a transmission layer communication certificate chain can be preset in the TEE of an ECU end for enabling an independent download ECU to carry out encrypted communication with a CDN, an upgrade package verification certificate chain can be preset in the TEE of the ECU end for enabling the independent download ECU to carry out signature verification on an equipment upgrade package, a public key infrastructure software development kit (Public Key Infrastructure Software Development Kit, PKI SDK) can realize verification on the upgrade package, a coded file and a digital signature file by calling a TEE interface, a key double decryption process can call the interface to transmit a TEE ciphertext, and the TEE interface can feed back and output a plaintext file.

Still as shown in fig. 5, the above-mentioned decryption file may include any upgrade information file stored in the upgrade package, and after the decryption file is obtained by decompression, digital signature verification is performed on the decryption file to verify the correctness and integrity of the upgrade package, specifically: the method comprises the steps of transmitting a coded file and a digital signature file to the inside of a TEE based on a communication interface, checking the coded file in the TEE by using the digital signature file (comprising a preset public key of a cloud server) based on a signature root certificate chain (signature certificate) so as to verify the correctness of the coded file, and further verifying the content (such as SHA512 value of an upgrade information file) of the coded file after the correctness of the content of the coded file is confirmed so as to verify the correctness of the content of each upgrade information file, wherein when the contents of all the upgrade information files in the upgrade package pass the check, the correctness and completeness of the content of the upgrade package are confirmed.

In an optional embodiment, the method for processing a remote upgrade data packet of a vehicle further includes:

step S2061, obtaining status information of the task upgrade package and the device upgrade package, where the status information at least includes: download status, encryption status, decryption status, signature verification status;

step S2062, detecting the status information and feeding back a detection result, where the detection result is used to determine whether the processing flows of the task upgrade package and the equipment upgrade package are abnormal.

The method comprises the steps of,

step S207, in response to the processing flow abnormality, generating abnormality prompt information and executing abnormality processing measures.

In the technical scheme provided by the invention, based on the upgrading task of a plurality of ECUs to be upgraded, in the independent downloading process of each ECU, the OTA component can periodically acquire the state information of the independent downloading ECU, including but not limited to: the independent downloading process (such as the downloading state of the upgrade package), the encryption state of the upgrade file, the decryption state of the upgrade package, and the signature verification state of the decryption file, the state information can interact with a component (such as an OTA component) and a carrier (such as a master control node) in the system through a Service interface, and the component and the carrier can interact with other independent downloading ECUs through a Service-oriented Scalable Service-Oriented Middleware over IP (SOME/IP) protocol located above an internet protocol (Internet Protocol, IP) protocol layer.

As an alternative embodiment, when an abnormality occurs in the flow of the independent download, for example: the upgrade package downloads the abnormality, automatically generates corresponding abnormality prompt information, the abnormality prompt information can be used for locating an abnormal processing flow, and a master control node at the vehicle end can execute corresponding abnormality processing measures according to the abnormality prompt information, for example: and re-initiating the downloading request and terminating the downloading flow. As another optional implementation manner, when the signature verification process of the upgrade package fails, it is determined that the security of the controller environment is poor, and the vehicle-end master control node may terminate the upgrade process. The cloud may restart the upgrade task and restart the upgrade process in the next cloud communication period when the upgrade process in a certain cloud communication period is abnormal.

The processing method of the vehicle remote upgrading data packet provided by the invention has the following technical effects:

(1) The upgrade package is encrypted, decrypted and signature verified for a plurality of times, so that the upgrade package and the data in the package are ensured to be correct and complete, and the security of an upgrade process is improved;

(2) The trusted execution environment is pre-established, and the signature certificate is preset in the trusted execution environment, so that the upgrade package content after the ciphertext decryption verification is passed is quickly decrypted and subjected to signature verification, the security of an upgrade process is further improved, and the processing efficiency of the upgrade package is also improved.

In this embodiment, a processing device for a remote upgrade data packet of a vehicle is further provided, and the device is used to implement the foregoing embodiments and preferred embodiments, and will not be described again. As used below, a combination of software and/or hardware that belongs to a "module" may implement a predetermined function. While the means described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

Fig. 7 is a block diagram illustrating a configuration of an apparatus for processing a remote upgrade data packet of a vehicle according to an embodiment of the present invention, as shown in fig. 7, the apparatus including:

the first obtaining module 701 is configured to obtain a task upgrade package corresponding to a vehicle-end upgrade task, where the upgrade task is used to upgrade a device to be upgraded of the vehicle-end, and the task upgrade package at least includes basic information of the upgrade task;

the first processing module 702 is configured to decrypt and verify a signature of the task upgrade package to determine whether the task upgrade package is correct;

a second obtaining module 703, configured to obtain, based on the task upgrade package, a device upgrade package corresponding to the device to be upgraded, where the device upgrade package at least includes upgrade information of the device to be upgraded, in response to the task upgrade package being correct;

A second processing module 704, configured to decrypt and verify the signature of the device upgrade package to determine whether the device upgrade package is correct;

and the upgrade module 705 is configured to execute an upgrade task based on the basic information in response to the device upgrade package being correct, so as to upgrade the device to be upgraded with the upgrade information.

Optionally, the first acquisition module 701 and the second acquisition module 703 are further configured to: the task upgrade package is obtained by carrying out file compression on the basic information, the first coded file and the first digital signature file, and the equipment upgrade package is obtained by carrying out file compression on the upgrade information, the second coded file and the second digital signature file.

Optionally, the first acquisition module 701 and the second acquisition module 703 are further configured to: the method comprises the steps that a first coded file is obtained after coding operation is conducted on content of basic information based on a first encryption algorithm, a second coded file is obtained after coding operation is conducted on content of upgrade information based on a first encryption algorithm, a first digital signature file is obtained after file compression is conducted on a third coded file and a preset public key, a third coded file is obtained after coding operation is conducted on content of the first coded file based on a second encryption algorithm, a second digital signature file is obtained after file compression is conducted on a fourth coded file and a preset public key, a fourth coded file is obtained after coding operation is conducted on content of the second coded file based on a second encryption algorithm, and safety of the first encryption algorithm is higher than that of the second encryption algorithm.

Optionally, the second obtaining module 703 is further configured to: responding to the correct task upgrading packet, acquiring the equipment upgrading packet corresponding to the equipment to be upgraded based on the task upgrading packet, wherein the method comprises the following steps: responding to the correctness of the task upgrading packet, analyzing the task upgrading packet to obtain the downloading information of the equipment upgrading packet, wherein the downloading information at least comprises the downloading address of the equipment upgrading packet; and acquiring the equipment upgrade package based on the download address.

Optionally, the second processing module 704 is further configured to: decrypting and signature verification of the device upgrade package to determine whether the device upgrade package is correct, including: decrypting the equipment upgrading packet to obtain a decrypted file; decompressing the compressed file in the decrypted file to obtain a sub-file of the equipment upgrading package; the subfiles are signature verified based on the trusted execution environment to determine if the subfiles are correct.

Optionally, the second processing module 704 is further configured to: decrypting the equipment upgrade package to obtain a decrypted file, including: decrypting the ciphertext of the equipment upgrading packet based on a preset root key to obtain a decrypted data packet; and decoding the content of the decrypted data packet based on a decryption algorithm to obtain a decrypted file.

Optionally, the second processing module 704 is further configured to: the subfiles comprise upgrade information, a second coded file and a second digital signature file in the device upgrade package, and signature verification is performed on the subfiles based on a trusted execution environment to determine whether the subfiles are correct, and the method comprises the following steps: verifying the second encoded file based on the signed certificate within the trusted execution environment to determine if the second encoded file is correct; and in response to the second encoded file being correct, performing a decoding operation on the second encoded file based on the second digital signature file to determine whether the underlying information is correct.

Alternatively, fig. 8 is a block diagram of a processing apparatus for a remote upgrade data packet of a vehicle according to another alternative embodiment of the present invention, as shown in fig. 8, which includes, in addition to all the modules shown in fig. 7: a third obtaining module 706, configured to obtain status information of the task upgrade package and the device upgrade package, where the status information at least includes: download status, encryption status, decryption status, signature verification status; detecting the state information and feeding back a detection result, wherein the detection result is used for determining whether the processing flows of the task upgrade package and the equipment upgrade package are abnormal or not.

Optionally, fig. 9 is a block diagram of a processing device for a remote upgrade data packet of a vehicle according to still another alternative embodiment of the present invention, and as shown in fig. 9, the device includes, in addition to all the modules shown in fig. 8: and the third processing module 707 is configured to generate an exception prompt message and execute an exception handling measure in response to the processing procedure exception.

It should be noted that each of the above modules may be implemented by software or hardware, and for the latter, it may be implemented by, but not limited to: the modules are all located in the same processor; alternatively, the above modules may be located in different processors in any combination.

According to still another aspect of the embodiment of the present invention, there is further provided a storage medium, where the storage medium includes a stored program, and when the program runs, the device where the storage medium is controlled to execute the method for processing the remote upgrade data packet of any one of the foregoing vehicles.

Alternatively, in the present embodiment, the above-described storage medium may be configured to store a computer program for performing the steps of:

step S1, a task upgrading packet corresponding to a vehicle-end upgrading task is obtained, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle end, and the task upgrading packet at least comprises basic information of the upgrading task;

Step S2, decrypting and signature verification are carried out on the task upgrading packet so as to determine whether the task upgrading packet is correct or not;

step S3, responding to the correctness of the task upgrade package, and acquiring an equipment upgrade package corresponding to equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded;

s4, decrypting and signature verification are carried out on the equipment upgrading package so as to determine whether the equipment upgrading package is correct or not;

and step S5, in response to the correctness of the equipment upgrading packet, executing an upgrading task based on the basic information so as to upgrade the equipment to be upgraded by utilizing the upgrading information.

Alternatively, in the present embodiment, the storage medium may include, but is not limited to: a usb disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a removable hard disk, a magnetic disk, or an optical disk, or other various media in which a computer program can be stored.

According to still another aspect of the embodiment of the present invention, there is also provided an electronic device including an in-vehicle memory in which a computer program is stored, and an in-vehicle processor configured to run the computer program to perform the method for processing the vehicle remote upgrade data packet of any one of the foregoing.

Alternatively, in the present embodiment, the above-described in-vehicle processor may be configured to execute the following steps by a computer program:

step S1, a task upgrading packet corresponding to a vehicle-end upgrading task is obtained, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle end, and the task upgrading packet at least comprises basic information of the upgrading task;

step S2, decrypting and signature verification are carried out on the task upgrading packet so as to determine whether the task upgrading packet is correct or not;

step S3, responding to the correctness of the task upgrade package, and acquiring an equipment upgrade package corresponding to equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded;

s4, decrypting and signature verification are carried out on the equipment upgrading package so as to determine whether the equipment upgrading package is correct or not;

and step S5, in response to the correctness of the equipment upgrading packet, executing an upgrading task based on the basic information so as to upgrade the equipment to be upgraded by utilizing the upgrading information.

Alternatively, specific examples in this embodiment may refer to examples described in the foregoing embodiments and alternative implementations thereof, and this embodiment is not described herein.

The foregoing embodiment numbers of the present invention are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.

In the foregoing embodiments of the present invention, the descriptions of the embodiments are emphasized, and for a portion of this disclosure that is not described in detail in this embodiment, reference is made to the related descriptions of other embodiments.

In the several embodiments provided in the present invention, it should be understood that the disclosed technology may be implemented in other manners. The above-described embodiments of the apparatus are merely exemplary, and the division of the units, for example, may be a logic function division, and may be implemented in another manner, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some interfaces, units or modules, or may be in electrical or other forms.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.

The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied essentially or in part or all of the technical solution or in part in the form of a software product stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a removable hard disk, a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing is merely a preferred embodiment of the present invention and it should be noted that modifications and adaptations to those skilled in the art may be made without departing from the principles of the present invention, which are intended to be comprehended within the scope of the present invention.

Claims (10)

1. A method for processing a vehicle remote upgrade data packet, comprising:

acquiring a task upgrading packet corresponding to a vehicle-end upgrading task, wherein the upgrading task is used for upgrading equipment to be upgraded of the vehicle-end, and the task upgrading packet at least comprises basic information of the upgrading task;

decrypting and signature verification are carried out on the task upgrading packet so as to determine whether the task upgrading packet is correct or not;

responding to the correctness of the task upgrade package, and acquiring an equipment upgrade package corresponding to the equipment to be upgraded based on the task upgrade package, wherein the equipment upgrade package at least comprises upgrade information of the equipment to be upgraded;

decrypting and signature verification are carried out on the equipment upgrading package to determine whether the equipment upgrading package is correct or not;

and responding to the equipment upgrade package is correct, and executing the upgrade task based on the basic information so as to upgrade the equipment to be upgraded by utilizing the upgrade information.

2. The processing method according to claim 1, wherein the task upgrade package is obtained by file-compressing the basic information, the first encoded file, and the first digital signature file, and the device upgrade package is obtained by file-compressing the upgrade information, the second encoded file, and the second digital signature file.

3. The processing method according to claim 2, wherein the first encoded file is obtained by encoding the content of the basic information based on a first encryption algorithm, the second encoded file is obtained by encoding the content of the upgrade information based on the first encryption algorithm, the first digital signature file is obtained by file-compressing a third encoded file and a preset public key, the third encoded file is obtained by encoding the content of the first encoded file based on a second encryption algorithm, the second digital signature file is obtained by file-compressing a fourth encoded file and the preset public key, the fourth encoded file is obtained by encoding the content of the second encoded file based on the second encryption algorithm, and the security of the first encryption algorithm is higher than the security of the second encryption algorithm.

4. The processing method according to claim 1, wherein, in response to the task upgrade package being correct, obtaining the device upgrade package corresponding to the device to be upgraded based on the task upgrade package, includes:

analyzing the task upgrading packet to obtain the downloading information of the equipment upgrading packet in response to the correctness of the task upgrading packet, wherein the downloading information at least comprises the downloading address of the equipment upgrading packet;

and acquiring the equipment upgrading package based on the download address.

5. The processing method of claim 1, wherein decrypting and signature verification of the device upgrade package to determine if the device upgrade package is correct comprises:

decrypting the equipment upgrading packet to obtain a decrypted file;

decompressing the compressed file in the decrypted file to obtain a subfile of the equipment upgrading package;

and carrying out signature verification on the subfiles based on the trusted execution environment to determine whether the subfiles are correct.

6. The processing method according to claim 5, wherein decrypting the device upgrade package to obtain the decrypted file comprises:

Decrypting the ciphertext of the equipment upgrading packet based on a preset root key to obtain a decrypted data packet;

and decoding the content of the decrypted data packet based on a decryption algorithm to obtain the decrypted file.

7. The processing method of claim 5, wherein the subfile includes upgrade information, a second encoded file, and a second digitally signed file in the device upgrade package, and wherein signing the subfile based on the trusted execution environment to determine if the subfile is correct comprises:

verifying the second encoded file based on a signed certificate within the trusted execution environment to determine if the second encoded file is correct;

and in response to the second encoded file being correct, performing a decoding operation on the second encoded file based on the second digital signature file to determine whether the base information is correct.

8. A method of processing according to claim 1, wherein the method further comprises:

acquiring state information of the task upgrade package and the equipment upgrade package, wherein the state information at least comprises: download status, encryption status, decryption status, signature verification status;

And detecting the state information and feeding back a detection result, wherein the detection result is used for determining whether the processing flows of the task upgrading package and the equipment upgrading package are abnormal or not.

9. The method of processing according to claim 8, further comprising:

and generating exception prompt information and executing exception handling measures in response to the processing flow exception.

10. An electronic device comprising an in-vehicle memory having a computer program stored therein and an in-vehicle processor arranged to run the computer program to perform the method of processing the vehicle remote upgrade data package of any one of claims 1 to 9.