WO2023279336A1 - 数据更新方法、装置以及*** - Google Patents

数据更新方法、装置以及*** Download PDF

Info

Publication number
WO2023279336A1
WO2023279336A1 PCT/CN2021/105286 CN2021105286W WO2023279336A1 WO 2023279336 A1 WO2023279336 A1 WO 2023279336A1 CN 2021105286 W CN2021105286 W CN 2021105286W WO 2023279336 A1 WO2023279336 A1 WO 2023279336A1
Authority
WO
WIPO (PCT)
Prior art keywords
ota
client
server
data
subscription information
Prior art date
Application number
PCT/CN2021/105286
Other languages
English (en)
French (fr)
Inventor
王勇
周铮
马涛
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to CN202180100093.3A priority Critical patent/CN117597907A/zh
Priority to PCT/CN2021/105286 priority patent/WO2023279336A1/zh
Publication of WO2023279336A1 publication Critical patent/WO2023279336A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/568—Storing data temporarily at an intermediate stage, e.g. caching
    • H04L67/5682—Policies or rules for updating, deleting or replacing the stored data

Definitions

  • the present application relates to the field of data security, in particular to a data updating method, device and system.
  • high-precision maps play a central role in the entire field. They can help autonomous driving equipment perceive complex road surface information in advance, such as slope, curvature, heading, etc., combined with intelligent path planning, let autonomous driving equipment do make the right decision.
  • a high-precision map refers to a high-precision, finely defined map. Its precision needs to reach the decimeter level to be able to distinguish each lane.
  • high-precision positioning has become possible.
  • the refined definition requires formatted storage of various traffic elements in traffic scenarios, including road network data, lane network data, lane lines, and traffic signs of traditional maps. Different from traditional electronic maps, the main service object of high-precision maps is automatic driving equipment. Therefore, high-precision maps have richer and more detailed road information, which can more accurately reflect the real situation of the road.
  • HD maps are highly sensitive, so how to ensure that HD maps are not leaked is an important technical direction.
  • the present application provides a data updating method, device and system, which can prevent the data of the first OTA server from being acquired by the second OTA server.
  • a data update method is provided, which is applied to the OTA client of the first over-the-air technology, including the following steps:
  • the update result notification is used to instruct the first OTA client to update and complete the data sent by the first OTA server, the first OTA client and the
  • the second OTA client is configured on the same terminal device.
  • the data in the first OTA server can be directly sent to the first OTA client, without the need for the first OTA server to send the data to the second OTA server, and the second OTA server to send the data to The second OTA client, thereby preventing the data of the first OTA server from being acquired by the second OTA server.
  • receiving the data sent by the first OTA server based on the subscription information includes: receiving the data sent by the first OTA server based on the subscription information according to authority information.
  • the permission information is generated by the first OTA server according to the subscription information and sent to the first OTA client; or, the permission information is the second OTA Generated by the server according to the subscription information, and sent to the first OTA client through the second OTA client.
  • the authority information includes one or more of an authorization certificate or a token.
  • the subscription information includes a user identifier, and the subscription information further includes one or more of the data range and usage time.
  • a method for updating data is provided, which is applied to the first OTA server, including the following steps:
  • the subscription information indicates that the first OTA client has the authority to use the data in the first OTA server;
  • the data is sent to the first OTA client, where the first OTA client and the second OTA client are configured on the same terminal device.
  • sending the data to the first OTA client includes: the subscription information includes a user ID, and the first OTA client is authenticated and authorized based on the user ID ; When the authentication and authorization pass, send the data to the first OTA client according to the authority information.
  • the permission information is generated by the first OTA server according to the subscription information; or, the permission information is sent by the first OTA client to the first OTA server .
  • the authority information includes one or more of an authorization certificate or a token.
  • the subscription information also includes one or more of the data range and usage time.
  • a first OTA client in a third aspect, characterized in that it includes a receiving module and a sending module,
  • the receiving module is used to receive data sent by the first OTA server based on the subscription information, wherein the subscription information indicates that the first OTA client has the authority to use the data in the OTA server;
  • the sending module is configured to send an update result notification to the second OTA client, wherein the update result notification is used to instruct the first OTA client to update and complete the data sent by the first OTA server, the second An OTA client and the second OTA client are configured on the same terminal device.
  • the receiving module is specifically configured to receive the data sent by the first OTA server based on the subscription information according to permission information.
  • the permission information is generated by the first OTA server according to the subscription information and sent to the first OTA client; or,
  • the permission information is generated by the second OTA server according to the subscription information, and is sent to the first OTA client through the second OTA client.
  • the authority information includes one or more of an authorization certificate or a token.
  • the subscription information includes a user identifier, and the subscription information further includes one or more of the data range and usage time.
  • a first OTA server including a receiving module and a sending module;
  • the receiving module is used to receive the subscription information sent by the second OTA server, wherein the subscription information indicates that the first OTA client has the authority to use the data in the first OTA server;
  • the sending module is configured to send the data to a first OTA client based on the subscription information, wherein the first OTA client and the second OTA client are configured on the same terminal device.
  • the subscription information includes a user identifier
  • the server further includes a processing module
  • the processing module is configured to perform authentication and authorization on the first OTA client based on the user identifier
  • the sending module is configured to send the data to the first OTA client according to the permission information when the authentication and authorization pass.
  • the authority information is generated by the first OTA server according to the subscription information; or,
  • the permission information is sent by the first OTA client to the first OTA server.
  • the authority information includes one or more of an authorization certificate or a token.
  • the subscription information also includes one or more of the data range and usage time.
  • a chip including a processor and a memory, where instructions are stored in the memory, and the processor is used to execute the instructions in the memory, so as to implement any one of the first aspect or the second aspect. described method.
  • a terminal device including a processor and a memory, the memory stores instructions, and the processor is used to execute the instructions in the memory, so as to implement the method according to any one of the first aspect .
  • a server including a processor and a memory, where instructions are stored in the memory, and the processor is configured to execute the instructions in the memory, so as to implement the method according to any one of the second aspect.
  • the embodiment of the present application also provides a readable storage medium, the readable storage medium stores a program or an instruction, and when it is run on a computer, any data update method in the above aspects is executed .
  • the embodiment of the present application further provides a computer program product containing instructions, which, when run on a computer, causes the computer to execute any data update method in the above aspects.
  • Fig. 1 is a schematic structural view of a collection vehicle according to an embodiment of the present application
  • Fig. 2 is a schematic structural diagram of an OTA system according to an embodiment of the present application.
  • Fig. 3 is a schematic structural diagram of an electronic map downloading system provided by the present application.
  • FIG. 4 is a schematic flow diagram of a method for downloading an electronic map provided by the present application.
  • Fig. 5 is a schematic flow chart of another electronic map downloading method provided by the present application.
  • Fig. 6 is a schematic flow chart of another electronic map downloading method provided by the present application.
  • Fig. 7 is a flow chart of a data updating method provided by the present application.
  • FIG. 8 is a schematic structural diagram of a data updating device provided by the present application.
  • FIG. 9 is a schematic structural diagram of a data updating device provided by the present application.
  • Fig. 10 is a schematic structural diagram of a remote computing terminal provided by the present application.
  • FIG. 11 is a schematic structural diagram of a terminal device provided by the present application.
  • Map vendors refer to suppliers that provide electronic maps. Wherein, the electronic map may include a high-precision map. Because geographic information in electronic maps often involves important information, only map vendors with nationally recognized qualifications can produce high-precision maps. Map vendors usually use high-precision collection vehicles to complete the initial drawing of high-precision maps, and use low-precision collection vehicles to update high-precision maps in the subsequent process. As shown in Figure 1, the collection vehicle is usually equipped with various sensors, such as lidar, camera, global navigation satellite system (global navigation satellite system, GNSS) and inertial measurement unit (Inertial measurement unit, IMU).
  • sensors such as lidar, camera, global navigation satellite system (global navigation satellite system, GNSS) and inertial measurement unit (Inertial measurement unit, IMU).
  • lidar is mainly used to collect point cloud data to obtain information such as the width of the road surface and the height of traffic lights
  • the camera is mainly used to collect two-dimensional images to obtain information such as road signs and lane lines.
  • GNSS is used to obtain the location information of the collection vehicle, and records the coordinates of the current collection point.
  • the IMU usually includes a three-axis gyroscope and a three-axis accelerometer, and some IMUs also include a three-axis magnetometer, which is used to capture the angle and acceleration of the collection vehicle and to correct the position and angle of the collection vehicle.
  • An original equipment manufacturer is a supplier of autonomous driving equipment. Taking the OEM manufacturer as an example of a self-driving vehicle manufacturer, the OEM manufacturer is usually a manufacturer that has mastered major technologies such as engines and gearboxes.
  • the OEM manufacturer has an over-the-air (OTA) system as shown in FIG. can communicate through the network device 120.
  • the remote computing terminal 130 may be deployed on the cloud, or may be deployed on the edge.
  • the terminal device 110 may be an automatic driving device, for example, an unmanned vehicle or the like.
  • the terminal device 110 may include hardware, an operating system, and an OTA client.
  • the OTA client may include an OTA master module and multiple OTA slave modules. Since the automatic driving equipment usually involves multiple components, the OTA master module needs to coordinate and control multiple OTA slave modules to upgrade multiple components, and jointly complete the upgrade of the entire equipment.
  • the network device 120 is used to transmit data between the terminal device 110 and the remote computing terminal 130 through any communication mechanism/communication standard communication network.
  • the communication network may be a wide area network, a local area network, a point-to-point connection, etc., or any combination thereof.
  • the remote computing terminal 130 includes multiple computing nodes, and each computing node includes hardware, virtualization service, and OTA server from bottom to top.
  • hardware includes computing resources, storage resources, and network resources.
  • Computing resources can adopt heterogeneous computing architecture, for example, central processing unit (central processing unit, CPU) + graphics processing unit (graphics processing unit, GPU) architecture, CPU+AI chip, CPU+GPU+AI chip architecture, etc. , not specifically limited here.
  • Storage resources may include memory, among others.
  • Network resources may include network cards and the like.
  • Virtualization service is a service that builds the resources of multiple physical hosts into a unified resource pool through virtualization technology, and flexibly isolates mutually independent resources according to user needs to run user applications. Commonly, virtualization services may include virtual machine (virtual machine, VM) services and container (container) services.
  • the OTA server can be used to download software upgrade packages.
  • the map vendor sends the high-definition map produced by itself from the map vendor’s OTA server to the OEM’s OTA server, and the OEM’s OTA server then downloads the high-definition map to the OEM’s autonomous driving device through OTA.
  • the OTA server in the remote computing terminal packs the high-precision map into a software upgrade package.
  • the OTA server in the remote computing terminal sends the software upgrade package containing the high-precision map to the main module in the OTA server in the car terminal through the network device.
  • the main module in the OTA server in the car terminal disassembles the software upgrade package and distributes it to the corresponding slave module in the OTA server for upgrading.
  • the map vendor needs to send the high-precision map from the map vendor's OTA server to the OEM manufacturer's OTA server, and there is a risk of leakage.
  • the embodiments of the present application provide a method, device and system for downloading an electronic map, which can ensure that the data of the electronic map will not be leaked.
  • FIG. 3 is a schematic structural diagram of an electronic map downloading system provided by an embodiment of the present application.
  • the electronic map downloading system provided by the embodiment of the present application includes: a terminal device 210 , a network device 220 , an OEM remote computing terminal 230 and a map vendor remote computing terminal 240 .
  • the terminal device 210 may be an automatic driving device, for example, an unmanned vehicle or the like.
  • the terminal device 210 may include hardware, an operating system, an OEM OTA client, and an image vendor OTA client.
  • An OEM OTA client can include an OEM OTA master module as well as multiple OEM OTA slave modules. Since automatic driving equipment usually involves multiple components, the OEM OTA master module needs to coordinate and control multiple OEM OTA slave modules to upgrade multiple components and jointly complete the upgrade of the entire device.
  • the image merchant OTA client may include an image merchant OTA main module and multiple image merchant OTA slave modules, or may only include an image merchant OTA slave module.
  • the network device 220 is used to transmit data between the terminal device 210 and the remote computing terminal 230 through any communication mechanism/communication standard communication network.
  • the communication network may be a wide area network, a local area network, a point-to-point connection, etc., or any combination thereof.
  • the OEM remote computing terminal 230 includes a plurality of computing nodes, and each computing node includes hardware, virtualization service, and OEM OTA server from bottom to top.
  • hardware includes computing resources, storage resources, and network resources.
  • Computing resources can adopt heterogeneous computing architectures, for example, CPU+GPU architectures, CPU+AI chip architectures, CPU+GPU+AI chip architectures, etc., which are not specifically limited here.
  • Storage resources may include memory, among others.
  • Network resources may include network cards and the like.
  • Virtualization service is a service that builds the resources of multiple physical hosts into a unified resource pool through virtualization technology, and flexibly isolates mutually independent resources according to user needs to run user applications. Commonly, virtualization services may include VM services and container services.
  • OEM OTA server can be used to provide software upgrade package download.
  • the map provider remote computing terminal 240 includes multiple computing nodes, and each computing node includes hardware, virtualization services, and map provider OTA server from bottom to top.
  • hardware includes computing resources, storage resources, and network resources.
  • Computing resources can adopt heterogeneous computing architectures, for example, CPU+GPU architectures, CPU+AI chip architectures, CPU+GPU+AI chip architectures, etc., which are not specifically limited here.
  • Storage resources may include memory, among others.
  • Network resources may include network cards and the like.
  • Virtualization service is a service that builds the resources of multiple physical hosts into a unified resource pool through virtualization technology, and flexibly isolates mutually independent resources according to user needs to run user applications. Commonly, virtualization services may include VM services and container services. Map merchant OTA server can be used to provide high-definition map download.
  • the above-mentioned electronic map downloading system is only used as a specific example, and in other embodiments, the above-mentioned electronic map downloading system may further include more network elements, which are not specifically limited here.
  • FIG. 4 is a schematic flowchart of a method for downloading an electronic map provided by the present application.
  • the electronic map download method provided by the embodiment of the present application includes:
  • the OEM OTA server at the OEM remote computing terminal generates the subscription information of the user of the terminal device, the authority information of the user of the terminal device, and the binding relationship between the map user ID and the terminal certificate.
  • the subscription information may include one or more of map user identifiers, subscription content, and the like.
  • the map user identifier may be a unique identifier of the user of the terminal device when downloading the electronic map, and may be an identifier generated for the user by the OEM when the user signs a contract.
  • the content of the contract may include one or more of the range of data and usage time.
  • the range of the data is the range where the user can download the electronic map.
  • the electronic map includes the maps of countries A to D, and the range of the electronic map that the user can download is the range covered by country A; another example, the electronic map includes the maps of country A. Maps, users can download electronic maps covering the range covered by province P in country A and so on.
  • the use time is the period during which the user can use the electronic map after downloading the electronic map. For example, the user can only use and update the electronic map within one year after downloading the electronic map; the use time can also be the validity period of the electronic map. Valid until October 1, 2020.
  • the authority information may include one or more of an authorization certificate (license) or a token (token) and the like.
  • the binding relationship between the map user ID and the certificate of the terminal device is used to indicate that there is a corresponding relationship between the terminal and the map user ID, or in other words, the terminal device with the terminal certificate can download the electronic map.
  • the certificate of the terminal device is issued by the OEM cloud, so the OEM cloud knows the certificate of the terminal.
  • the certificate of the terminal device may be sent by the OTA client of the terminal device to the OEM OTA client of the terminal device, and the OEM OTA client of the terminal device is sent to the OEM OTA server of the OEM remote computing terminal in advance. .
  • the OEM OTA server of the OEM remote computing terminal sends the signing information to the graphic merchant OTA server of the graphic merchant remote computing terminal.
  • the Tushang OTA server of the Tushang remote computing terminal receives the signing information sent by the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal can also send the authorization information and the binding relationship between the map user ID and the terminal certificate to the map vendor OTA server of the remote computing terminal of the map vendor.
  • the map merchant OTA server of the map merchant remote computing terminal sends a data update notification to the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server at the OEM remote computing end receives the data update notification sent by the image vendor OTA server at the remote computing end of the map vendor.
  • the need to update the electronic map may be triggered in the following situations: (1) The electronic map is triggered to be updated regularly, for example, the electronic map may need to be updated every 5 minutes. (2) Comparing the new electronic map with the old electronic map, if the difference between the new electronic map and the old electronic map is greater than a preset threshold, it triggers that the electronic map needs to be updated.
  • the data update notification includes the version of the electronic map, the range of the electronic map, the data size of the electronic map, the download address of the electronic map, and the like.
  • the OEM OTA server of the OEM remote computing terminal sends update information, user authority information of the terminal device, and the binding relationship between the map user ID and the terminal certificate to the OEM OTA client of the terminal device.
  • the OEM OTA client of the terminal device receives the update information sent by the OEM OTA server of the OEM remote computing terminal, the authority information of the user of the terminal device, and the binding relationship between the map user ID and the terminal certificate.
  • the update information may include one or more of update tasks, permission information, and the like.
  • the update task includes an update policy of the electronic map, a data size of the electronic map, a download address of the electronic map, and the like.
  • the update policy of the electronic map may include one or more of the update conditions of the electronic map, the update order of the electronic map, the user notification policy of the electronic map, and the like.
  • the OEM OTA client of the terminal device sends the update information, the authority information of the user of the terminal device, and the binding relationship between the map user ID and the terminal certificate to the map merchant OTA client of the terminal device.
  • the map merchant OTA client of the terminal device receives the update information sent by the OEM OTA client of the terminal device, the authority information of the user of the terminal device, and the binding relationship between the map user ID and the terminal certificate.
  • two-way identity authentication is performed based on the certificate of the terminal device between the image provider OTA client of the terminal device and the image provider OTA server end of the image provider remote computing terminal.
  • the map provider's OTA server at the map provider's remote computing terminal queries whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and if the binding relationship is correct, the authentication passes.
  • the map provider OTA server of the map provider remote computing terminal authorizes the terminal device to use the electronic map based on the authorization certificate or token.
  • the map provider OTA service end of the map provider remote computing terminal queries the OEM OTA server terminal of the OEM remote computing terminal whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and if the binding relationship is correct Under the premise, the OEM OTA server at the OEM remote computing terminal notifies the graphic vendor that the OTA server at the remote computing terminal has passed the authentication. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the OEM OTA server of the OEM remote computing terminal actively sends the binding relationship between the map user ID and the certificate of the terminal device to the map of the remote computing terminal of the map merchant through the OEM OTA client and the map merchant OTA client.
  • the Tushang OTA server at the Tushang remote computing terminal queries whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and the authentication passes on the premise that the binding relationship is correct. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the map provider's OTA server at the map provider's remote computing terminal sends the electronic map to the map provider's OTA client terminal device.
  • the map provider OTA client of the terminal device receives the electronic map sent by the map provider OTA server at the map provider remote computing terminal.
  • the update strategy of the electronic map, the data size of the electronic map and the download address of the electronic map the OTA client of the map provider downloads the user from the OTA server of the map provider's remote computing terminal.
  • S108 The OTA client of the terminal device sends an update result notification to the OTA server of the remote computing terminal of the IMG.
  • the image provider OTA server at the image provider remote computing terminal receives the update result notification sent by the image provider OTA client of the terminal device.
  • the map merchant OTA client of the terminal device sends an update result notification to the OEM OTA client of the terminal device.
  • the OEM OTA client of the terminal device receives the update result notification sent by the map provider OTA client of the terminal device.
  • the OEM OTA client of the terminal device sends an update result notification to the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal receives the update result notification sent by the OEM OTA client of the terminal device.
  • FIG. 5 is a schematic flowchart of another method for downloading an electronic map provided by the present application.
  • the electronic map downloading method provided by this application includes:
  • the OEM OTA server at the OEM remote computing terminal generates the subscription information of the user of the terminal device and the binding relationship between the map user ID and the terminal certificate.
  • the subscription information may include one or more of map user identifiers, subscription content, and the like.
  • the map user identifier may be a unique identifier of the user of the terminal device when downloading the electronic map, and may be an identifier generated for the user by the OEM when the user signs a contract.
  • the content of the contract may include one or more of the range of data and usage time.
  • the range of the data is the range where the user can download the electronic map.
  • the electronic map includes the maps of countries A to D, and the range of the electronic map that the user can download is the range covered by country A; another example, the electronic map includes the maps of country A. Maps, users can download electronic maps covering the range covered by province P in country A and so on.
  • the use time is the period during which the user can use the electronic map after downloading the electronic map. For example, the user can only use and update the electronic map within one year after downloading the electronic map; the use time can also be the validity period of the electronic map. Valid until October 1, 2020.
  • the binding relationship between the map user ID and the terminal certificate is used to indicate that there is a corresponding relationship between the terminal and the map user ID, or in other words, the terminal device with the terminal certificate can download the electronic map through the map user ID.
  • the certificate of the terminal device is issued by the OEM cloud, so the OEM cloud knows the certificate of the terminal.
  • the certificate of the terminal device may be sent by the OTA client of the terminal device to the OEM OTA client of the terminal device, and the OEM OTA client of the terminal device is sent to the OEM OTA server of the OEM remote computing terminal in advance. .
  • the OEM OTA server at the OEM remote computing terminal sends the signing information of the user of the terminal device to the map vendor OTA server at the map vendor remote computing end.
  • the Tushang OTA server of the Tushang remote computing terminal receives the subscription information of the user of the terminal device sent by the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal can also send the authorization information and the binding relationship between the map user ID and the terminal certificate to the map vendor OTA server of the remote computing terminal of the map vendor.
  • S203 The map merchant OTA server of the map merchant remote computing terminal generates permission information according to the contract information.
  • the authority information may include one or more of an authorization certificate (license) or a token (token) and the like.
  • the map merchant OTA server at the map merchant remote computing terminal sends the authorization information and the binding relationship between the map user ID and the terminal certificate to the map merchant OTA client of the terminal device.
  • the map provider OTA client of the terminal device receives the authority information sent by the map provider OTA server of the map provider remote computing terminal and the binding relationship between the map user ID and the terminal certificate.
  • two-way identity authentication is performed based on the certificate of the terminal device between the image provider OTA client of the terminal device and the image provider OTA server end of the image provider remote computing terminal.
  • the map provider's OTA server at the map provider's remote computing terminal queries whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and if the binding relationship is correct, the authentication passes.
  • the map provider OTA server of the map provider remote computing terminal authorizes the terminal device to use the electronic map based on the authorization certificate or token.
  • the map provider OTA service end of the map provider remote computing terminal queries the OEM OTA server terminal of the OEM remote computing terminal whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and if the binding relationship is correct Under the premise, the OEM OTA server at the OEM remote computing terminal notifies the graphic vendor that the OTA server at the remote computing terminal has passed the authentication. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the OEM OTA server of the OEM remote computing terminal actively sends the binding relationship between the map user ID and the certificate of the terminal device to the map of the remote computing terminal of the map merchant through the OEM OTA client and the map merchant OTA client.
  • the Tushang OTA server at the Tushang remote computing terminal queries whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and the authentication passes on the premise that the binding relationship is correct. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the map vendor OTA server at the map vendor remote computing terminal sends an update task to the map vendor OTA client of the terminal device.
  • the image provider OTA client of the terminal device receives the update task sent by the image provider OTA server of the image provider remote computing terminal.
  • the need to update the electronic map may be triggered in the following situations: (1) The electronic map is triggered to be updated regularly, for example, the electronic map may need to be updated every 5 minutes. (2) Comparing the new electronic map with the old electronic map, if the difference between the new electronic map and the old electronic map is greater than a preset threshold, it triggers that the electronic map needs to be updated.
  • the update task includes the version of the electronic map, the range of the electronic map, the data size of the electronic map, the download address of the electronic map, and the like.
  • the update policy of the electronic map may include one or more of the update conditions of the electronic map, the update order of the electronic map, the user notification policy of the electronic map, and the like.
  • the Tushang OTA server of the Tushang remote computing terminal sends an update task notification to the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server at the OEM remote computing end receives the update task notification sent by the image vendor OTA server at the remote computing end of the map vendor.
  • the map provider's OTA server at the map provider's remote computing terminal sends the electronic map to the map provider's OTA client terminal device.
  • the map provider OTA client of the terminal device receives the electronic map sent by the map provider OTA server at the map provider remote computing terminal.
  • the update strategy of the electronic map, the data size of the electronic map and the download address of the electronic map the OTA client of the map provider downloads the user from the OTA server of the map provider's remote computing terminal.
  • S209 The OTA client of the terminal device sends an update result notification to the OTA server of the remote computing terminal of the IMG.
  • the image provider OTA server at the image provider remote computing terminal receives the update result notification sent by the image provider OTA client of the terminal device.
  • S210 The map merchant OTA client of the terminal device sends an update result notification to the OEM OTA client of the terminal device.
  • the OEM OTA client of the terminal device receives the update result notification sent by the map provider OTA client of the terminal device.
  • the OEM OTA client of the terminal device sends an update result notification to the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal receives the update result notification sent by the OEM OTA client of the terminal device.
  • FIG. 6 is a schematic flowchart of another method for downloading an electronic map provided by the present application.
  • the electronic map downloading method provided by this application includes:
  • the map merchant OTA server at the map merchant remote computing terminal generates the subscription information of the user of the terminal device, the authority information of the user of the terminal device, and the map certificate.
  • the subscription information may include one or more of map user identifiers, subscription content, and the like.
  • the map user identifier may be a unique identifier of the user of the terminal device when downloading the electronic map, and may be an identifier generated for the user by the OEM when the user signs a contract.
  • the content of the contract may include one or more of the range of data and usage time.
  • the range of the data is the range where the user can download the electronic map.
  • the electronic map includes the maps of countries A to D, and the range of the electronic map that the user can download is the range covered by country A; another example, the electronic map includes the maps of country A. Maps, the range of electronic maps downloaded by users is the range covered by province P in country A and so on.
  • the use time is the period during which the user can use the electronic map after downloading the electronic map. For example, the user can only use and update the electronic map within one year after downloading the electronic map; the use time can also be the validity period of the electronic map. Valid until October 1, 2020.
  • the authority information may include one or more of an authorization certificate (license) or a token (token) and the like.
  • the map certificate may be a certificate issued by the map vendor OTA server at the remote computing terminal of the map vendor for the map user identification.
  • the map merchant OTA server of the map merchant remote computing terminal sends the map user identifier to the map merchant OTA client of the terminal device.
  • the map provider OTA client of the terminal device receives the map user identifier sent by the map provider OTA server at the map provider remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal can also send the authorization information and the binding relationship between the map user ID and the terminal certificate to the map vendor OTA server of the remote computing terminal of the map vendor.
  • authentication is performed between the map provider OTA client of the terminal device and the map provider OTA server of the map provider remote computing terminal based on a map certificate.
  • the map provider's OTA server at the map provider's remote computing terminal verifies whether the map user ID has a certificate, and if there is a certificate, the authentication is passed. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the map vendor OTA server at the map vendor remote computing terminal sends an update task to the map vendor OTA client of the terminal device.
  • the image provider OTA client of the terminal device receives the update task sent by the image provider OTA server of the image provider remote computing terminal.
  • the need to update the electronic map may be triggered in the following situations: (1) The electronic map is triggered to be updated regularly, for example, the electronic map may need to be updated every 5 minutes. (2) Comparing the new electronic map with the old electronic map, if the difference between the new electronic map and the old electronic map is greater than a preset threshold, it triggers that the electronic map needs to be updated.
  • the update task includes an update policy of the electronic map, a data size of the electronic map, a download address of the electronic map, and the like.
  • the update policy of the electronic map may include one or more of the update conditions of the electronic map, the update order of the electronic map, the user notification policy of the electronic map, and the like.
  • the map provider OTA server of the map provider remote computing terminal sends the electronic map to the map provider OTA client of the terminal device.
  • the map merchant OTA client of the terminal device receives the electronic map sent by the map merchant OTA server of the map merchant remote computing terminal.
  • two-way identity authentication is performed based on the certificate of the terminal device between the image provider OTA client of the terminal device and the image provider OTA server end of the image provider remote computing terminal.
  • the map provider's OTA server at the map provider's remote computing terminal queries whether the binding relationship between the map user ID and the certificate of the terminal device is correct, and if the binding relationship is correct, the authentication passes.
  • the map provider OTA server of the map provider remote computing terminal authorizes the terminal device to use the electronic map based on the authorization certificate or token.
  • the map provider OTA server at the remote computing terminal inquires whether the binding relationship between the map user ID and the certificate of the terminal device is correct to the OEM OTA server at the OEM remote computing terminal, and if the binding relationship is correct , the OEM OTA server at the OEM remote computing terminal notifies the graphic vendor that the OTA server at the remote computing terminal has passed the authentication. If the authentication is passed, the Mapseller OTA server at the Mapseller remote computing terminal authorizes the terminal device to use the electronic map based on the authority information.
  • the image merchant OTA client of the terminal device sends an update result notification to the image merchant OTA server of the image merchant remote computing terminal.
  • the image provider OTA server at the image provider remote computing terminal receives the update result notification sent by the image provider OTA client of the terminal device.
  • the map merchant OTA client of the terminal device sends an update result notification to the OEM OTA client of the terminal device.
  • the OEM OTA client of the terminal device receives the update result notification sent by the map provider OTA client of the terminal device.
  • S308 The OEM OTA client of the terminal device sends an update result notification to the OEM OTA server of the OEM remote computing terminal.
  • the OEM OTA server of the OEM remote computing terminal receives the update result notification sent by the OEM OTA client of the terminal device.
  • FIG. 7 is a flow chart of a data updating method provided by the present application. As shown in Figure 7, the data update method in this embodiment includes:
  • the first OTA server acquires subscription information, where the subscription information indicates that the first OTA client has a right to use data in the one OTA server.
  • the first OTA server and the first OTA client belong to the same application.
  • the first OTA server is set at the first remote computing terminal.
  • the first OTA client is set in the terminal device.
  • the first remote computing terminal may be the remote computing terminal of the image provider in the examples shown in FIGS. 3 to 6 .
  • the first OTA server may be the image provider OTA server in the image provider remote computing terminal in the examples shown in FIG. 3 to FIG. 6 .
  • the first OTA client may be an image provider OTA client in the terminal device in the examples shown in FIG. 3 to FIG. 6 .
  • the second OTA server and the second OTA client belong to the same application.
  • the second OTA server is set at the second remote computing terminal.
  • the second OTA client is set in the terminal device.
  • the second remote computing terminal may be an OEM remote computing terminal in the examples shown in FIGS. 3-6 .
  • the second OTA server may be the image provider OTA server in the OEM remote computing terminal in the examples shown in FIGS. 3 to 6 .
  • the second OTA client may be an OEM OTA client in the terminal device in the examples shown in FIGS. 3 to 6 .
  • the subscription information includes a user identifier, and the subscription information also includes one or more of data scope and usage time.
  • the content of the signing information can also be referred to above, and will not be repeated here.
  • the acquisition of subscription information by the first OTA server may include the following:
  • the subscription information is pre-stored in the second OTA server, and the first OTA server receives the subscription information sent by the second OTA server, To obtain contract information.
  • the subscription information is pre-stored in the first OTA server, and the first OTA server obtains the subscription information from the memory.
  • the first OTA server sends the data to the first OTA client based on the subscription information.
  • the first OTA client receives the data sent by the first OTA server based on the subscription information.
  • the data may be an electronic map.
  • the electronic map may include a high-precision map. It can be understood that the data may also be other data that needs to be kept confidential, which is not specifically limited here.
  • the first OTA server sends the data to the first OTA client based on the subscription information, which can be triggered in the following ways:
  • the first OTA server sends an update notification to the second OTA server
  • the second OTA server sends an update notification to the second OTA client
  • the second OTA The client then sends an update notification to the first OTA client, thereby triggering identity authentication and authorization between the first OTA server and the second OTA client, and when the identity authentication is passed and authorized, the first OTA The client sends the data.
  • FIG. 4 and related content please refer to FIG. 4 and related content, and no further description is given here.
  • the first OTA server sends an update task to the second OTA server, thereby triggering the first OTA server to send the data to the first OTA client.
  • the first OTA server sends an update task to the second OTA server, thereby triggering the first OTA server to send the data to the first OTA client.
  • the subscription information includes a user identifier
  • sending the data to the first OTA client includes: authenticating the first OTA client based on the user identifier Authorization: in the case of passing the authentication and authorization, sending the data to the first OTA client according to the authority information.
  • the authority information includes one or more of an authorization certificate or a token.
  • the permission information is generated by the first OTA server according to the subscription information; or, the permission information is generated by the second OTA server according to the subscription information, and sent to the first OTA server through the second OTA client and the first OTA client.
  • S403 The first OTA client sends an update result notification to the second OTA client.
  • the second OTA client receives the update result notification sent by the first OTA client.
  • the update result notification is used to indicate that the first OTA client has received the data sent by the first OTA server.
  • FIG. 8 is a schematic structural diagram of a data updating device provided in the present application.
  • the data updating device of the present application includes: a receiving module 310 , a processing module 320 and a sending module 330 .
  • the receiving module 310 is configured to receive the subscription information sent by the second OTA server, wherein the subscription information indicates that the first OTA client has the authority to use the data in the OTA server;
  • the processing module 320 is configured to authenticate and authorize the first OTA client based on the user identifier
  • the sending module 330 is configured to send the data to the first OTA client according to the authority information when the authentication and authorization pass;
  • the first OTA client and the second OTA client are configured on the same terminal device.
  • this embodiment does not introduce the signing information, the process of obtaining the signing information, the process of authentication and authorization, the process of triggering the first OTA server to send data to the first OTA client, etc., for details, please refer to Fig. 3 to FIG. 7 and related content, no further description here.
  • the data updating device in this embodiment may execute the method on the image merchant OTA server side in the embodiment corresponding to FIG. 4 to FIG. 6 or the first OTA server side in the embodiment corresponding to FIG. 7 .
  • FIG. 9 is a schematic structural diagram of a data updating device provided in the present application.
  • the data updating device of the present application includes: a receiving module 410 , a processing module 420 and a sending module 430 .
  • the receiving module 410 is used to receive data sent by the first OTA server based on the subscription information, wherein the subscription information indicates that the first OTA client has the authority to use the data in the OTA server; the Signing information includes user identification;
  • the processing module 420 is configured to perform authentication based on the user identifier
  • the sending module 430 is configured to receive the data sent by the first OTA server according to the authority information when the authentication is passed; wherein,
  • the first OTA client and the second OTA client are configured on the same terminal device.
  • this embodiment does not introduce the signing information, the process of obtaining the signing information, the process of authentication and authorization, the process of triggering the first OTA server to send data to the first OTA client, etc., for details, please refer to Fig. 3 to FIG. 7 and related content, no further description here.
  • the data updating apparatus in this embodiment may execute the method on the terminal device side in the embodiment corresponding to FIG. 4 to FIG. 7 .
  • FIG. 10 is a schematic structural diagram of a remote computing terminal provided by the present application.
  • the remote computing terminal in this embodiment includes: a first processor 510 , a first memory 520 , an intelligent network card 530 and a bus 540 .
  • the first processor 510 may be composed of one or more general-purpose processors, such as a CPU, or a combination of a CPU and a hardware chip.
  • the aforementioned hardware chip may be an application-specific integrated circuit (Application-Specific Integrated Circuit, ASIC), a programmable logic device (Programmable Logic Device, PLD) or a combination thereof.
  • ASIC Application-Specific Integrated Circuit
  • PLD programmable logic device
  • the above-mentioned PLD can be a complex programmable logic device (Complex Programmable Logic Device, CPLD), a field programmable logic gate array (Field-Programmable Gate Array, FPGA), a general array logic (Generic Array Logic, GAL) or any combination thereof.
  • the first memory 520 can include random access memory (Random Access Memory, RAM), flash memory (Flash Memory) etc., also can be RAM, read-only memory (Read-Only Memory, ROM) or hard disk (Hard Disk Drive , HDD) or Solid-State Drive (SSD).
  • the first memory 520 can store programs and data, wherein the stored programs include: OTA application programs, etc., and the stored data include: electronic maps, authority information, subscription information, electronic map update strategies, electronic map data sizes, and electronic map download address, etc.
  • the smart network card 530 is also called a network interface controller, a network interface card, or a local area network (Local Area Network, LAN) adapter. Each smart network card 530 has a unique MAC address, which is burnt into the read-only memory chip by the manufacturer of the smart network card 530 during production.
  • the iNIC 530 includes a second processor 531 , a second memory 532 and a transceiver 533 .
  • the second processor 531 is similar to a general-purpose processor, however, the performance requirement of the second processor 531 may be lower than that of the first processor 510. In a specific embodiment, the second processor 531 may be an ARM processor or the like.
  • the second storage 532 may also be a flash memory, HDD or SDD, and the storage capacity of the second storage 532 may be smaller than that of the first storage 520 .
  • the transceiver 533 can be used to receive and send packets, and upload the received packets to the processor 531 for processing.
  • the smart network card 530 may also include multiple ports, and the ports may be any one or more of three interface types: thick cable interface, thin cable interface and twisted pair interface.
  • this embodiment does not introduce the signing information, the process of obtaining the signing information, the process of authentication and authorization, the process of triggering the first OTA server to send data to the first OTA client, etc., for details, please refer to Fig. 3 to FIG. 7 and related content, no further description here.
  • the data updating device in this embodiment may execute the method on the image merchant OTA server side in the embodiment corresponding to FIG. 4 to FIG. 6 or the first OTA server side in the embodiment corresponding to FIG. 7 .
  • the remote computing terminal shown in FIG. 10 may be the data update device shown in FIG. 8 .
  • FIG. 11 is a schematic structural diagram of a terminal device provided by the present application.
  • the terminal device of this embodiment includes: a processor 610, a memory 611, a receiver 612, and a transmitter 613.
  • the receiver 612 and the transmitter 613 can also be replaced with a communication interface, which is used for the processor 610 Provide information input and/or output.
  • the memory 611, the receiver 612, the transmitter 613, and the processor 610 are connected or coupled through a bus.
  • a display screen 614 is further included, and the display screen 614 is connected to the processor 610 through a bus.
  • the terminal device may be a cockpit domain controller (Control Domain Cockpit, CDC) of the vehicle or other devices capable of wireless resource management and coordination, or a CDC or components in the device, such as a chip or an integrated circuit.
  • the CDC can also be referred to as a car-machine.
  • the car-machine may be used as an example to describe the hardware of the terminal device.
  • the receiver 612 is used to receive data from the OEM remote computing terminal or the map dealer's remote computing terminal, such as voice signals, image signals, etc., and the receiver 612 is also used to receive data sent by at least one vehicle-mounted device.
  • the transmitter 613 is used to send data to the OEM remote computing terminal or the graphic dealer remote computing terminal.
  • the receiver 612 and the transmitter 613 may include antennas and chipsets for communicating with on-board equipment (or on-board audio and video equipment), sensors or other physical devices in the vehicle directly or through an air interface.
  • Transmitter 613 and transceiver 612 constitute a communication module that may be configured to receive and transmit information according to one or more other types of wireless communications (e.g., protocols), such as Bluetooth, Institute of Electrical and Electronics Engineers (Institute of electrical and electronics engineers, IEEE) 802.11 communication protocol, cellular technology, global microwave interconnection access (worldwide Interoperability for microwave access, WiMAX) or long term evolution (long term evolution, LTE), ZigBee protocol, dedicated short-range communication (dedicated short range communications, DSRC) and radio frequency identification (radio frequency identification, RFID) communications, and so on.
  • protocols such as Bluetooth, Institute of Electrical and Electronics Engineers (Institute of electrical and electronics engineers, IEEE) 802.11 communication protocol, cellular technology, global microwave interconnection access (worldwide Interoperability for microwave access, WiMAX) or long term evolution (long term evolution, LTE), ZigBee protocol, dedicated short-range communication (dedicated short range communications, DSRC) and radio frequency identification (radio frequency identification, RFID) communications
  • the display screen 614 is used for receiving user input and displaying information input by the user and information provided by the vehicle to the user. For example, electronic map and so on.
  • the display screen 614 may be a liquid crystal display (liquid crystal display, LCD), an organic or inorganic light emitting diode (organic light-emitting diode, OLED), an active matrix organic light emitting diode panel (active matrix/organic light emitting diode, AMOLED) Wait.
  • the processor 610 may be composed of one or more general-purpose processors, for example, a CPU, or a combination of a CPU and a hardware chip.
  • the aforementioned hardware chip may be an ASIC, a PLD or a combination thereof.
  • the aforementioned PLD may be CPLD, FPGA, GAL or any combination thereof.
  • Memory 611 can comprise volatile memory (Volatile Memory), for example, RAM; Memory 611 can also comprise non-volatile memory (Non-Volatile Memory), such as ROM, flash memory (Flash Memory), HDD or SSD; 611 may also include combinations of the above categories.
  • the memory 611 can store programs and data, wherein the stored programs include: OTA application programs, etc., and the stored data include: electronic maps, authority information, update policies of electronic maps, data sizes of electronic maps, and download addresses of electronic maps, etc.
  • the memory 611 may exist independently, or may be integrated inside the processor 610 .
  • this embodiment does not introduce the signing information, the process of obtaining the signing information, the process of authentication and authorization, the process of triggering the first OTA server to send data to the first OTA client, etc., for details, please refer to Fig. 3 to FIG. 7 and related content, no further description here.
  • the data updating apparatus in this embodiment may execute the method on the terminal device side in the embodiment corresponding to FIG. 4 to FIG. 7 .
  • the terminal device shown in FIG. 11 may be the data update device shown in FIG. 9 .
  • the embodiment of the present application also provides a readable storage medium, the readable storage medium stores a program or an instruction, and when the readable storage medium is run on a computer, any data updating method in the foregoing embodiments is executed.
  • the embodiment of the present application also provides a computer program product including instructions, which, when run on a computer, causes the computer to execute any of the data update methods in the foregoing embodiments.
  • all or part of them may be implemented by software, hardware, firmware or any combination thereof.
  • software When implemented using software, it may be implemented in whole or in part in the form of a computer program product.
  • the computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present application will be generated in whole or in part.
  • the computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, DSL) or wireless (eg, infrared, wireless, microwave, etc.) means.
  • the computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media.
  • the available medium may be a magnetic medium (for example, a floppy disk, a storage disk, a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk (SSD)).
  • SSD Solid State Disk

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Information Transfer Between Computers (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

本申请提供了一种数据更新方法、装置以及***。上述方法包括应用于第一空中下载技术OTA客户端，包括如下步骤：接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；向第二OTA客户端发送更新结果通知，其中，所述更新结果通知用于指示所述第一OTA客户端更新完成所述第一OTA服务端发送的数据，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。上述方法能够避免第一OTA服务端的数据被第二OTA服务端获取。

Description

数据更新方法、装置以及*** 技术领域
本申请涉及数据安全领域，尤其涉及一种数据更新方法、装置以及***。
背景技术
高精地图作为自动驾驶领域的稀缺资源以及刚需，在整个领域扮演着核心角色，可以帮助自动驾驶设备预先感知路面复杂信息，如坡度、曲率、航向等，结合智能路径规划，让自动驾驶设备做出正确决策。高精地图是指高精度、精细化定义的地图，其精度需要达到分米级才能够区分各个车道，如今随着定位技术的发展，高精度的定位已经成为可能。而精细化定义，则是需要格式化存储交通场景中的各种交通要素，包括传统地图的道路网数据、车道网络数据、车道线以和交通标志等数据。与传统电子地图不同，高精度地图的主要服务对象是自动驾驶设备，因此，高精地图具有更加丰富细致的道路信息，可以更加精准地反映道路的真实情况。
但是，高精地图具有高度敏感性，因此，如何确保高精地图不被泄漏是一个重要的技术方向。
发明内容
为了解决上述问题，本申请提供了一种数据更新方法、装置以及***，能够避免第一OTA服务端数据被第二OTA服务端获取。
第一方面，提供了一种数据更新方法，应用于第一空中下载技术OTA客户端，包括如下步骤：
接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；
向第二OTA客户端发送更新结果通知，其中，所述更新结果通知用于指示所述第一OTA客户端更新完成所述第一OTA服务端发送的数据，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
上述方案中，第一OTA服务端中的数据可以直接发送给第一OTA客户端，而不需要第一OTA服务端将数据发送给第二OTA服务端，第二OTA服务端再将数据发送给第二OTA客户端，从而避免了第一OTA服务端数据被第二OTA服务端获取。
在一些可能的设计中，接收第一OTA服务端基于签约信息发送的数据，包括：根据权限信息接收所述第一OTA服务端基于所述签约信息发送的所述数据。
在一些可能的设计中，所述权限信息是所述第一OTA服务端根据所述签约信息生成的，并发送给所述第一OTA客户端的；或者，所述权限信息是所述第二OTA服务端根据所述签约信息生成的，并通过所述第二OTA客户端发送给所述第一OTA客户端的。
在一些可能的设计中，所述权限信息包括授权证书或者令牌中的一种或者多种。
在一些可能的设计中，所述签约信息包括用户标识，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
第二方面，提供了一种数据更新方法，应用于第一OTA服务端，包括如下步骤：
接收第二OTA服务端发送的签约信息，其中，所述签约信息指示第一OTA客户端具备使用所述第一OTA服务端中的数据的权限；
基于所述签约信息，向第一OTA客户端发送所述数据，其中，所述第一OTA客户端和第二OTA客户端被配置在同一个终端设备上。
在一些可能的设计中，基于所述签约信息，向第一OTA客户端发送所述数据，包括：所述签约信息包括用户标识，基于所述用户标识对所述第一OTA客户端进行认证授权；在认证授权通过的情况下，根据权限信息向所述第一OTA客户端发送所述数据。
在一些可能的设计中，所述权限信息是所述第一OTA服务端根据所述签约信息生成的；或者，所述权限信息是所述第一OTA客户端发送给所述第一OTA服务端的。
在一些可能的设计中，所述权限信息包括授权证书或者令牌中的一种或者多种。
在一些可能的设计中，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
第三方面，提供了一种第一OTA客户端，其特征在于，包括接收模块以及发送模块，
所述接收模块用于接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；
所述发送模块用于向第二OTA客户端发送更新结果通知，其中，所述更新结果通知用于指示所述第一OTA客户端更新完成所述第一OTA服务端发送的数据，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
在一些可能的设计中，所述接收模块具体用于根据权限信息接收所述第一OTA服务端基于所述签约信息发送的所述数据。
在一些可能的设计中，所述权限信息是所述第一OTA服务端根据所述签约信息生成，并发送给所述第一OTA客户端的；或者，
所述权限信息是所述第二OTA服务端根据所述签约信息生成，并通过所述第二OTA客户端发送给所述第一OTA客户端的。
在一些可能的设计中，所述权限信息包括授权证书或者令牌中的一种或者多种。
在一些可能的设计中，所述签约信息包括用户标识，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
第四方面，提供了一种第一OTA服务端，包括接收模块以及发送模块；
所述接收模块用于接收第二OTA服务端发送的签约信息，其中，所述签约信息指示第一OTA客户端具备使用所述第一OTA服务端中的数据的权限；
所述发送模块用于基于所述签约信息，向第一OTA客户端发送所述数据，其中，所述第一OTA客户端和第二OTA客户端被配置在同一个终端设备上。
在一些可能的设计中，所述签约信息包括用户标识，所述服务端还包括处理模块，
所述处理模块用于基于所述用户标识对所述第一OTA客户端进行认证授权；
所述发送模块用于在认证授权通过的情况下，根据权限信息向所述第一OTA客户端发送所述数据。
在一些可能的设计中，所述权限信息是所述第一OTA服务端根据所述签约信息生成 的；或者，
所述权限信息是所述第一OTA客户端发送给所述第一OTA服务端的。
在一些可能的设计中，所述权限信息包括授权证书或者令牌中的一种或者多种。
在一些可能的设计中，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
第五方面，提供了一种芯片，包括处理器以及存储器，所述存储器中存储了指令，所述处理器用于执行所述存储器中指令，从而实现如第一方面或者第二方面任一项所述的方法。
第六方面，提供了一种终端设备，包括处理器以及存储器，所述存储器中存储了指令，所述处理器用于执行所述存储器中指令，从而实现如第一方面任一项所述的方法。
第七方面，提供了一种服务器，包括处理器以及存储器，所述存储器中存储了指令，所述处理器用于执行所述存储器中指令，从而实现如第二方面任一项所述的方法。
第八方面，本申请实施例还提供一种可读存储介质，所述可读存储介质中存储有程序或指令，当其在计算机上运行时，使得上述各方面的任意的数据更新方法被执行。
第九方面，本申请实施例还提供一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行上述各方面中的任意的数据更新方法。
附图说明
为了更清楚地说明本申请实施例或背景技术中的技术方案，下面将对本申请实施例或背景技术中所需要使用的附图进行说明。
图1是本申请涉及的一实施方式的采集车的结构示意图；
图2是本申请涉及的一实施方式的OTA***的结构示意图；
图3是本申请提供的一种电子地图下载***的结构示意图；
图4是本申请提供的一种电子地图下载方法的流程示意图；
图5是本申请提供的另一种电子地图下载方法的流程示意图；
图6是本申请提供的又一种电子地图下载方法的流程示意图；
图7是本申请提供的一种数据更新方法的流程图；
图8是本申请提供的一种数据更新装置的结构示意图；
图9是本申请提供的一种数据更新装置的结构示意图；
图10是本申请提供的一种远程计算端的结构示意图；
图11是本申请提供的一种终端设备的结构示意图。
具体实施方式
图商，是指提供电子地图的供应商。其中，电子地图可以包括高精地图。由于电子地图中的地理信息往往涉及重要信息，因此，只有获得国家认可的资质的图商才能生产高精地图。图商通常采用精度较高的采集车来完成高精地图的初始绘制，在后续的过程中采用精度较低的采集车来进行高精地图的更新。如图1所示，采集车上通常设置了多种传感器，例如，激光雷达、摄像头、全球导航卫星***(global navigation satellite system，GNSS) 以及惯性测量单元(Inertial measurement unit，IMU)。其中，激光雷达主要用于采集点云数据，从而获得路面的宽度、红绿灯的高度等信息，摄像头主要用于采集二维图像，从而获得路面的标志，车道线等信息。GNSS用于获得采集车的位置信息，记录了当前采集点的坐标。IMU通常包括三轴陀螺仪及三轴加速度计,部分IMU还包括三轴磁力计，用于捕获采集车的角度和加速度，用来校正采集车的位置和角度。
原始设备生产商(original equipment manufacturer，OEM)厂商是自动驾驶设备的供应商。以OEM厂商为自动驾驶车辆制造商为例，OEM厂商通常为掌握了发动机以及变速箱等主要技术的厂商。OEM厂商拥有如图2所示的空中下载技术(over the air，OTA)***，所述OTA***包括终端设备110、网络设备120以及远程计算端130，其中，终端设备110和远程计算端130之间可以通过网络设备120进行通信。远程计算端130具体可以部署在云上，也可以部署在边缘上。
终端设备110可以是自动驾驶设备，例如，无人驾驶车辆等等。在一具体的实施例中，终端设备110可以包括硬件、操作***以及OTA客户端。OTA客户端可以包括OTA主模块以及多个OTA从模块。由于自动驾驶设备通常涉及多个部件，因此，需要OTA主模块协调控制多个OTA从模块对多个部件进行升级，共同完成整个设备的升级。
网络设备120用于在终端设备110通过任何通信机制/通信标准的通信网络与远程计算端130之间传输数据。其中，通信网络可以是广域网、局域网、点对点连接等方式，或它们的任意组合。
远程计算端130包括多个计算节点，每个计算节点自下而上包括硬件、虚拟化服务以及OTA服务端。其中，硬件包括计算资源、存储资源以及网络资源。计算资源可以采用异构计算架构，例如，可以采用中央处理器(central processing unit，CPU)+图形处理器(graphics processing unit，GPU)架构，CPU+AI芯片，CPU+GPU+AI芯片架构等等，此处不作具体限定。存储资源可以包括内存等等。网络资源可以包括网卡等等。虚拟化服务是通过虚拟化技术将多个物理主机的资源构建为统一的资源池，并按照用户的需要灵活地隔离出相互独立的资源以运行用户的应用程序的服务。常见地，虚拟化服务可以包括虚拟机(virtual machine，VM)服务以及容器(container)服务。OTA服务端可以用于下提供软件升级包下载。
图商将自己生产的高精地图从图商的OTA服务端发送给OEM厂商的OTA服务端，OEM厂商的OTA服务端再通过OTA将高精地图下载到OEM厂商生产的自动驾驶设备中。具体地，远程计算端中的OTA服务端接收到图商发送的高精地图之后，将高精地图打包入软件升级包。然后，远程计算端中的OTA服务端将包含高精地图的软件升级包通过网络设备发送给车端中的OTA服务端中的主模块。车端中的OTA服务端中的主模块接收到软件升级包后将其软件升级包拆解并分发给对应的OTA服务端中的从模块进行升级。
但是，在上述方法中，图商需要将高精地图从图商的OTA服务端发送给OEM厂商的OTA服务端，存在泄密的风险。
为了解决上述问题，本申请实施例提供了一种电子地图下载方法、设备以及***，能够确保电子地图的数据不会被泄密。
如图3所示，图3是本申请实施例提供的一种电子地图下载***的结构示意图。如图3所示，本申请实施例提供的电子地图下载***，包括：终端设备210、网络设备220、OEM远程计算端230以及图商远程计算端240。
终端设备210可以是自动驾驶设备，例如，无人驾驶车辆等等。在一具体的实施例中，终端设备210可以包括硬件、操作***、OEM OTA客户端以及图商OTA客户端。OEM OTA客户端可以包括OEM OTA主模块以及多个OEM OTA从模块。由于自动驾驶设备通常涉及多个部件，因此，需要OEM OTA主模块协调控制多个OEM OTA从模块对多个部件进行升级，共同完成整个设备的升级。图商OTA客户端可以包括图商OTA主模块以及多个图商OTA从模块，也可以只包括图商OTA从模块。
网络设备220用于在终端设备210通过任何通信机制/通信标准的通信网络与远程计算端230之间传输数据。其中，通信网络可以是广域网、局域网、点对点连接等方式，或它们的任意组合。
OEM远程计算端230包括多个计算节点，每个计算节点自下而上包括硬件、虚拟化服务以及OEM OTA服务端。其中，硬件包括计算资源、存储资源以及网络资源。计算资源可以采用异构计算架构，例如，可以采用CPU+GPU架构，CPU+AI芯片，CPU+GPU+AI芯片架构等等，此处不作具体限定。存储资源可以包括内存等等。网络资源可以包括网卡等等。虚拟化服务是通过虚拟化技术将多个物理主机的资源构建为统一的资源池，并按照用户的需要灵活地隔离出相互独立的资源以运行用户的应用程序的服务。常见地，虚拟化服务可以包括VM服务以及容器服务。OEM OTA服务端可以用于提供软件升级包下载。
图商远程计算端240包括多个计算节点，每个计算节点自下而上包括硬件、虚拟化服务以及图商OTA服务端。其中，硬件包括计算资源、存储资源以及网络资源。计算资源可以采用异构计算架构，例如，可以采用CPU+GPU架构，CPU+AI芯片，CPU+GPU+AI芯片架构等等，此处不作具体限定。存储资源可以包括内存等等。网络资源可以包括网卡等等。虚拟化服务是通过虚拟化技术将多个物理主机的资源构建为统一的资源池，并按照用户的需要灵活地隔离出相互独立的资源以运行用户的应用程序的服务。常见地，虚拟化服务可以包括VM服务以及容器服务。图商OTA服务端可以用于提供高精地图下载。
应理解，上述电子地图下载***仅仅是作为具体的示例，在其他的实施例中，上述电子地图下载***还可以包括更多的网元，此处不作具体限定。
参见图4，图4是本申请提供的一种电子地图下载方法的流程示意图。如图4所示，本申请实施例提供的电子地图下载方法，包括：
S101：OEM远程计算端的OEM OTA服务端生成终端设备的用户的签约信息、终端设备的用户的权限信息以及地图用户标识和终端证书的绑定关系。
在一具体的实施例中，签约信息可以包括地图用户标识以及签约内容等等中的一种或者多种。
地图用户标识可以是终端设备的用户在下载电子地图时的唯一标识，可以是用户签约时，OEM为用户生成的标识。
签约内容可以包括数据的范围以及使用时间等等中的一种或者多种。其中，数据的范围为用户可以下载电子地图的范围，例如，电子地图包括A～D国的地图，用户可以下载的电子地图的范围为A国覆盖的范围；又例如，电子地图包括A国的地图，用户可以下载电子地图的范围为A国中的P省覆盖的范围等等。使用时间为用户在下载电子地图之后，可以使用电子地图的期限，例如，用户只可以电子地图下载后的一年内使用和更新电子地图；使用时间还可以是电子地图的有效期，例如，电子地图的有效期为2020年10月1日。
在一具体的实施例中，权限信息可以包括授权证书(license)或者令牌(token)等等中的一种或者多种。
在一具体的实施例中，地图用户标识和终端设备的证书的绑定关系用于表征终端和地图用户标识存在对应关系，或者说，具有所述终端证书的终端设备可以通过地图用户标识下载电子地图。终端设备的证书是OEM云颁发的，所以OEM云知道终端的证书。在其他的实施方式中，终端设备的证书可以是终端设备的图商OTA客户端发送给终端设备的OEM OTA客户端，终端设备的OEM OTA客户端再预先发送给OEM远程计算端的OEM OTA服务端的。
S102：OEM远程计算端的OEM OTA服务端将签约信息发送给图商远程计算端的图商OTA服务端。相应地，图商远程计算端的图商OTA服务端接收OEM远程计算端的OEM OTA服务端发送的签约信息。
在一具体的实施例中，OEM远程计算端的OEM OTA服务端还可以将权限信息以及地图用户标识和终端证书的绑定关系发送给图商远程计算端的图商OTA服务端。
S103：在电子地图需要被更新的情况下，图商远程计算端的图商OTA服务端向OEM远程计算端的OEM OTA服务端发送数据更新通知。相应地，OEM远程计算端的OEM OTA服务端接收图商远程计算端的图商OTA服务端发送的数据更新通知。
在一具体的实施例中，电子地图需要被更新可能是这些情况下被触发的：(1)电子地图定时触发被更新，例如，电子地图可以每5分钟定时需要被更新。(2)将新的电子地图和旧的电子地图进行对比，如果新的电子地图和旧的电子地图的差异大于预设阈值，触发电子地图需要被更新。
在一具体的实施例中，数据更新通知包括电子地图的版本、电子地图的范围、电子地图的数据大小以及电子地图的下载地址等等。
S104：OEM远程计算端的OEM OTA服务端向终端设备的OEM OTA客户端发送更新信息、终端设备的用户的权限信息以及地图用户标识和终端证书的绑定关系。相应地，终端设备的OEM OTA客户端接收OEM远程计算端的OEM OTA服务端发送的更新信息、终端设备的用户的权限信息以及地图用户标识和终端证书的绑定关系。
在一具体的实施例中，更新信息可以包括更新任务以及权限信息等等中的一种或者多种。其中，更新任务包括电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址等等。电子地图的更新策略可以包括电子地图的升级条件、电子地图的升级顺序，电子地图的用户通知策略等等中的一种或者多种。
S105：终端设备的OEM OTA客户端向终端设备的图商OTA客户端发送更新信息、终端设备的用户的权限信息以及地图用户标识和终端证书的绑定关系。相应地，终端设备的 图商OTA客户端接收终端设备的OEM OTA客户端发送的更新信息、终端设备的用户的权限信息以及地图用户标识和终端证书的绑定关系。
S106：终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间进行身份认证和授权。
在一具体的实施例中，终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间基于终端设备的证书进行双向身份认证。具体地，图商远程计算端的图商OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于授权证书或者令牌授权终端设备使用电子地图。在一更具体的实施例中，图商远程计算端的图商OTA服务端向OEM远程计算端的OEM OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，OEM远程计算端的OEM OTA服务端通知图商远程计算端的图商OTA服务端认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于权限信息授权终端设备使用电子地图。在一更具体的实施例中，OEM远程计算端的OEM OTA服务端主动将地图用户标识和终端设备的证书的绑定关系通过OEM OTA客户端以及图商OTA客户端发送给图商远程计算端的图商OTA服务端。图商远程计算端的图商OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于权限信息授权终端设备使用电子地图。
S107：图商远程计算端的图商OTA服务端向终端设备的图商OTA客户端发送电子地图。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的电子地图。
在一具体的实施例中，图商OTA客户端根据电子地图的版本、电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址从图商远程计算端的图商OTA服务端下载用户可以下载的电子地图的范围内的电子地图。
S108：终端设备的图商OTA客户端向图商远程计算端的图商OTA服务端发送更新结果通知。相应地，图商远程计算端的图商OTA服务端接收终端设备的图商OTA客户端发送的更新结果通知。
S109：终端设备的图商OTA客户端向终端设备的OEM OTA客户端发送更新结果通知。相应地，终端设备的OEM OTA客户端接收终端设备的图商OTA客户端发送的更新结果通知。
S110：终端设备的OEM OTA客户端向OEM远程计算端的OEM OTA服务端发送更新结果通知。相应地，OEM远程计算端的OEM OTA服务端接收终端设备的OEM OTA客户端发送的更新结果通知。
参见图5，图5是本申请提供的另一种电子地图下载方法的流程示意图。如图5所示，本申请提供的电子地图下载方法，包括：
S201：OEM远程计算端的OEM OTA服务端生成终端设备的用户的签约信息以及地图用户标识和终端证书的绑定关系。
在一具体的实施例中，签约信息可以包括地图用户标识、签约内容等等中的一种或者多种。
地图用户标识可以是终端设备的用户在下载电子地图时的唯一标识，可以是用户签约时，OEM为用户生成的标识。
签约内容可以包括数据的范围以及使用时间等等中的一种或者多种。其中，数据的范围为用户可以下载电子地图的范围，例如，电子地图包括A～D国的地图，用户可以下载的电子地图的范围为A国覆盖的范围；又例如，电子地图包括A国的地图，用户可以下载电子地图的范围为A国中的P省覆盖的范围等等。使用时间为用户在下载电子地图之后，可以使用电子地图的期限，例如，用户只可以电子地图下载后的一年内使用和更新电子地图；使用时间还可以是电子地图的有效期，例如，电子地图的有效期为2020年10月1日。
在一具体的实施例中，地图用户标识和终端证书的绑定关系用于表征终端和地图用户标识存在对应关系，或者说，具有所述终端证书的终端设备可以通过地图用户标识下载电子地图。终端设备的证书是OEM云颁发的，所以OEM云知道终端的证书。在其他的实施方式中，终端设备的证书可以是终端设备的图商OTA客户端发送给终端设备的OEM OTA客户端，终端设备的OEM OTA客户端再预先发送给OEM远程计算端的OEM OTA服务端的。
S202：OEM远程计算端的OEM OTA服务端将终端设备的用户的签约信息发送给图商远程计算端的图商OTA服务端。相应地，图商远程计算端的图商OTA服务端接收OEM远程计算端的OEM OTA服务端发送的终端设备的用户的签约信息。
在一具体的实施例中，OEM远程计算端的OEM OTA服务端还可以将权限信息以及地图用户标识和终端证书的绑定关系发送给图商远程计算端的图商OTA服务端。
S203：图商远程计算端的图商OTA服务端根据签约信息生成权限信息。
在一具体的实施例中，权限信息可以包括授权证书(license)或者令牌(token)等等中的一种或者多种。
S204：图商远程计算端的图商OTA服务端将权限信息以及地图用户标识和终端证书的绑定关系发送给终端设备的图商OTA客户端。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的权限信息以及地图用户标识和终端证书的绑定关系。
S205：终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间进行身份认证和授权。
在一具体的实施例中，终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间基于终端设备的证书进行双向身份认证。具体地，图商远程计算端的图商OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于授权证书或者令牌授权终端设备使用电子地图。在一更具体的实施例中，图商远程计算端的图商OTA服务端向OEM远程计算端的OEM OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，OEM远程计算端的OEM OTA服务端通知图商远程计算端的图商OTA服务端认证通过。在认证通过的情况下，图商远程计算端的图商OTA 服务端基于权限信息授权终端设备使用电子地图。在一更具体的实施例中，OEM远程计算端的OEM OTA服务端主动将地图用户标识和终端设备的证书的绑定关系通过OEM OTA客户端以及图商OTA客户端发送给图商远程计算端的图商OTA服务端。图商远程计算端的图商OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于权限信息授权终端设备使用电子地图。
S206：在电子地图需要被更新的情况下，图商远程计算端的图商OTA服务端向终端设备的图商OTA客户端发送更新任务。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的更新任务。
在一具体的实施例中，电子地图需要被更新可能是这些情况下被触发的：(1)电子地图定时触发被更新，例如，电子地图可以每5分钟定时需要被更新。(2)将新的电子地图和旧的电子地图进行对比，如果新的电子地图和旧的电子地图的差异大于预设阈值，触发电子地图需要被更新。
在一具体的实施例中，更新任务包括电子地图的版本、电子地图的范围、电子地图的数据大小以及电子地图的下载地址等等。电子地图的更新策略可以包括电子地图的升级条件、电子地图的升级顺序，电子地图的用户通知策略等等中的一种或者多种。
S207：图商远程计算端的图商OTA服务端向OEM远程计算端的OEM OTA服务端发送更新任务通知。相应地，OEM远程计算端的OEM OTA服务端接收图商远程计算端的图商OTA服务端发送的更新任务通知。
S208：图商远程计算端的图商OTA服务端向终端设备的图商OTA客户端发送电子地图。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的电子地图。
在一具体的实施例中，图商OTA客户端根据电子地图的版本、电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址从图商远程计算端的图商OTA服务端下载用户可以下载的电子地图的范围内的电子地图。
S209：终端设备的图商OTA客户端向图商远程计算端的图商OTA服务端发送更新结果通知。相应地，图商远程计算端的图商OTA服务端接收终端设备的图商OTA客户端发送的更新结果通知。
S210：终端设备的图商OTA客户端向终端设备的OEM OTA客户端发送更新结果通知。相应地，终端设备的OEM OTA客户端接收终端设备的图商OTA客户端发送的更新结果通知。
S211：终端设备的OEM OTA客户端向OEM远程计算端的OEM OTA服务端发送更新结果通知。相应地，OEM远程计算端的OEM OTA服务端接收终端设备的OEM OTA客户端发送的更新结果通知。
参见图6，图6是本申请提供的又一种电子地图下载方法的流程示意图。如图6所示，本申请提供的电子地图下载方法，包括：
S301：图商远程计算端的图商OTA服务端生成终端设备的用户的签约信息、终端设备 的用户的权限信息以及地图证书。
在一具体的实施例中，签约信息可以包括地图用户标识以及签约内容等等中的一种或者多种。
地图用户标识可以是终端设备的用户在下载电子地图时的唯一标识，可以是用户签约时，OEM为用户生成的标识。
签约内容可以包括数据的范围以及使用时间等等中的一种或者多种。其中，数据的范围为用户可以下载电子地图的范围，例如，电子地图包括A～D国的地图，用户可以下载的电子地图的范围为A国覆盖的范围；又例如，电子地图包括A国的地图，用户下载电子地图的范围为A国中的P省覆盖的范围等等。使用时间为用户在下载电子地图之后，可以使用电子地图的期限，例如，用户只可以电子地图下载后的一年内使用和更新电子地图；使用时间还可以是电子地图的有效期，例如，电子地图的有效期为2020年10月1日。
在一具体的实施例中，权限信息可以包括授权证书(license)或者令牌(token)等等中的一种或者多种。
在一具体的实施例中，地图证书可以为图商远程计算端的图商OTA服务端为地图用户标识签发的证书。
S302：图商远程计算端的图商OTA服务端将地图用户标识发送给终端设备的图商OTA客户端。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的地图用户标识。
在一具体的实施例中，OEM远程计算端的OEM OTA服务端还可以将权限信息以及地图用户标识和终端证书的绑定关系发送给图商远程计算端的图商OTA服务端。
S303：终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间进行身份认证和授权。
在一具体的实施例中，终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间基于地图证书进行认证。具体地，图商远程计算端的图商OTA服务端认证地图用户标识是否有证书，如果有证书的情况下，认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于权限信息授权终端设备使用电子地图。
S304：在电子地图需要被更新的情况下，图商远程计算端的图商OTA服务端向终端设备的图商OTA客户端发送更新任务。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的更新任务。
在一具体的实施例中，电子地图需要被更新可能是这些情况下被触发的：(1)电子地图定时触发被更新，例如，电子地图可以每5分钟定时需要被更新。(2)将新的电子地图和旧的电子地图进行对比，如果新的电子地图和旧的电子地图的差异大于预设阈值，触发电子地图需要被更新。
在一具体的实施例中，更新任务包括电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址等等。电子地图的更新策略可以包括电子地图的升级条件、电子地图的升级顺序，电子地图的用户通知策略等等中的一种或者多种。
S305：图商远程计算端的图商OTA服务端向终端设备的图商OTA客户端发送电子地图。相应地，终端设备的图商OTA客户端接收图商远程计算端的图商OTA服务端发送的 电子地图。
在一具体的实施例中，终端设备的图商OTA客户端和图商远程计算端的图商OTA服务端之间基于终端设备的证书进行双向身份认证。具体地，图商远程计算端的图商OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于授权证书或者令牌授权终端设备使用电子地图。在其他的实施方式中，图商远程计算端的图商OTA服务端向OEM远程计算端的OEM OTA服务端查询地图用户标识和终端设备的证书的绑定关系是否正确，在绑定关系正确的前提下，OEM远程计算端的OEM OTA服务端通知图商远程计算端的图商OTA服务端认证通过。在认证通过的情况下，图商远程计算端的图商OTA服务端基于权限信息授权终端设备使用电子地图。
S306：终端设备的图商OTA客户端向图商远程计算端的图商OTA服务端发送更新结果通知。相应地，图商远程计算端的图商OTA服务端接收终端设备的图商OTA客户端发送的更新结果通知。
S307：终端设备的图商OTA客户端向终端设备的OEM OTA客户端发送更新结果通知。相应地，终端设备的OEM OTA客户端接收终端设备的图商OTA客户端发送的更新结果通知。
S308：终端设备的OEM OTA客户端向OEM远程计算端的OEM OTA服务端发送更新结果通知。相应地，OEM远程计算端的OEM OTA服务端接收终端设备的OEM OTA客户端发送的更新结果通知。
参见图7，图7是本申请提供的一种数据更新方法的流程图。如图7所示，本实施方式的数据更新方法，包括：
S401：第一OTA服务端获取签约信息，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限。
在一具体的实施例中，第一OTA服务端和第一OTA客户端属于同一个应用。第一OTA服务端设置在第一远程计算端。第一OTA客户端设置在终端设备中。第一远程计算端可以是图3至图6所示的例子中的图商远程计算端。第一OTA服务端可以是图3至图6所示的例子中的图商远程计算端中的图商OTA服务端。第一OTA客户端可以是图3至图6所示的例子中的终端设备中的图商OTA客户端。
在一具体的实施例中，第二OTA服务端和第二OTA客户端属于同一个应用。第二OTA服务端设置在第二远程计算端。第二OTA客户端设置在终端设备中。第二远程计算端可以是图3至图6所示的例子中的OEM远程计算端。第二OTA服务端可以是图3至图6所示的例子中的OEM远程计算端中的图商OTA服务端。第二OTA客户端可以是图3至图6所示的例子中的终端设备中的OEM OTA客户端。
在一具体的实施例中，所述签约信息包括用户标识，所述签约信息还包括数据的范围以及使用时间中的一种或者多种。签约信息的内容还可以参见上文，此处不再重复赘述。
在一具体的实施例中，第一OTA服务端获取签约信息可以包括以下几种：
第一种方式，如图4以及图5所示的实施例所示，签约信息是预先存储在第二OTA服 务端中的，第一OTA服务端通过接收第二OTA服务端发送的签约信息，从而获取签约信息。
第二种方式，如图6所示的实施例所示，签约信息是预先存储在第一OTA服务端中的，第一OTA服务端从存储器中获取签约信息。
S402：第一OTA服务端向基于签约信息向第一OTA客户端发送所述数据。相应地，第一OTA客户端接收第一OTA服务端基于签约信息发送的数据。
在一具体的实施例中，数据可以是电子地图。其中，电子地图可以包括高精地图。可以理解，数据还可以是其他需要进行保密的数据，此处不作具体限定。
在一具体的实施例中，第一OTA服务端向基于签约信息向第一OTA客户端发送所述数据，可以通过以下几种方式触发的：
第一种方式中，如图4所示的实施例所示，第一OTA服务端向第二OTA服务端发送更新通知，第二OTA服务端向第二OTA客户端发送更新通知，第二OTA客户端再向第一OTA客户端发送更新通知，从而触发第一OTA服务端和第二OTA客户端之间进行身份认证和授权，并在身份认证通过和获得授权的情况下，向第一OTA客户端发送所述数据。具体请参见图4以及相关内容，此处不再展开描述。
第二种方式中，第一OTA服务端向第二OTA服务端发送更新任务，从而触发第一OTA服务端向第一OTA客户端发送所述数据。具体请参见图5、图6以及相关内容，此处不再展开描述。
在一具体的实施例中，所述签约信息包括用户标识，基于所述签约信息，向第一OTA客户端发送所述数据，包括：基于所述用户标识对所述第一OTA客户端进行认证授权；在认证授权通过的情况下，根据权限信息向第一OTA客户端发送所述数据。其中，所述权限信息包括授权证书或者令牌中的一种或者多种。
在一更具体的实施例中，所述权限信息是所述第一OTA服务端根据所述签约信息生成的；或者，所述权限信息是所述第二OTA服务端根据所述签约信息生成，并通第二OTA客户端以及第一OTA客户端发送给所述第一OTA服务端的。
S403：第一OTA客户端向第二OTA客户端发送更新结果通知。相应地，第二OTA客户端接收第一OTA客户端发送的更新结果通知。
在一具体的实施例中，所述更新结果通知用于指示所述第一OTA客户端接收到所述第一OTA服务端发送的数据。
参见图8，图8是本申请提供的一种数据更新装置的结构示意图。如图8所示，本申请的数据更新装置，包括：接收模块310、处理模块320以及发送模块330。
所述接收模块310用于接收第二OTA服务端发送的签约信息，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；
所述处理模块320用于基于所述用户标识对所述第一OTA客户端进行认证授权；
所述发送模块330用于在认证授权通过的情况下，根据权限信息向第一OTA客户端发送所述数据；
其中，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
为了简便起见，本实施例没有对签约信息，获取签约信息的过程，认证授权的过程、触发第一OTA服务端向第一OTA客户端发送数据的过程等等进行详细的介绍，具体请参见图3至图7以及相关内容，此处不再展开描述。本实施例的数据更新装置可以执行如图4至图6对应的实施例中的图商OTA服务端或者图7对应的实施例中的第一OTA服务端侧的方法。
参见图9，图9是本申请提供的一种数据更新装置的结构示意图。如图8所示，本申请的数据更新装置，包括：接收模块410、处理模块420以及发送模块430。
所述接收模块410用于接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；所述签约信息包括用户标识；
所述处理模块420用于基于所述用户标识进行认证；
所述发送模块430用于在认证通过的情况下，根据权限信息接收第一OTA服务端发送的所述数据；其中，
所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
为了简便起见，本实施例没有对签约信息，获取签约信息的过程，认证授权的过程、触发第一OTA服务端向第一OTA客户端发送数据的过程等等进行详细的介绍，具体请参见图3至图7以及相关内容，此处不再展开描述。本实施例的数据更新装置可以执行如图4至图7对应的实施例中的终端设备侧的方法。
参见图10，图10是本申请提供的一种远程计算端的结构示意图。本实施方式的远程计算端，包括：包括：第一处理器510、第一存储器520、智能网卡530以及总线540。
第一处理器510可以由一个或者多个通用处理器构成，例如CPU，或者CPU和硬件芯片的组合。上述硬件芯片可以是专用集成电路(Application-Specific Integrated Circuit，ASIC)、可编程逻辑器件(Programmable Logic Device，PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(Complex Programmable Logic Device，CPLD)、现场可编程逻辑门阵列(Field-Programmable Gate Array，FPGA)、通用阵列逻辑(Generic Array Logic，GAL)或其任意组合。
第一存储器520可以包括是随机存取存储器(Random Access Memory，RAM)、快闪存储器(Flash Memory)等，也可以是RAM，只读存储器(Read-Only Memory，ROM)或者硬盘(Hard Disk Drive，HDD)或固态硬盘(Solid-State Drive，SSD)。第一存储器520可以存储程序以及数据，其中，存储的程序包括：OTA应用程序等，存储的数据包括：电子地图、权限信息、签约信息、电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址等。
智能网卡530，还被称为网络接口控制器、网络接口卡或者局域网(Local Area Network，LAN)适配器。每块智能网卡530都有一个唯一的MAC地址，是智能网卡530厂家在生产时烧入只读存储芯片中的。智能网卡530包括第二处理器531、第二存储器532以及收发器533。第二处理器531与通用处理器相类似，但是，第二处理器531的性能要求可以 低于第一处理器510的性能要求。在一具体的实施例中，第二处理器531可以是ARM处理器等等。第二存储器532也可以是快闪存储器、HDD或者SDD，第二存储器532的存储容量可以小于第一存储器520的存储容量。收发器533可以用于接收和发送报文，并将接收到的报文上传给处理器531进行处理。智能网卡530还可以包括多个端口，端口可以是粗缆接口、细缆接口和双绞线接口三种接口类型中的任意一种或者多种。
为了简便起见，本实施例没有对签约信息，获取签约信息的过程，认证授权的过程、触发第一OTA服务端向第一OTA客户端发送数据的过程等等进行详细的介绍，具体请参见图3至图7以及相关内容，此处不再展开描述。本实施例的数据更新装置可以执行如图4至图6对应的实施例中的图商OTA服务端或者图7对应的实施例中的第一OTA服务端侧的方法。并且，图10所示的远程计算端可以是图8所示的数据更新装置。
参见图11，图11是本申请提供的一种终端设备的结构示意图。如图11所示，本实施例的终端设备包括：处理器610、存储器611、接收器612和发送器613，该接收器612和发送器613也可以替换为通信接口，用于为处理器610提供信息输入和/或输出。可选的，存储器611、接收器612、发送器613和处理器610通过总线连接或耦合。可选地，在一些可能的实施例中，还包括显示屏614，显示屏614通过总线与处理器610相连。终端设备可以是车辆的座舱域控制器(Control Domain Cockpit，CDC)或者其他可以进行无线资源管理和协调的设备，又或者是CDC或者所述设备中的元件，例如芯片或者集成电路等。CDC也可以称为车机，此处不妨以车机为例对终端设备的各硬件进行说明。
接收器612用于接收来自OEM远程计算端或者图商远程计算端的数据，例如，语音信号、图像信号等，接收器612还用于接收至少一个车载设备发送的数据。
发送器613用于向OEM远程计算端或者图商远程计算端发送数据。接收器612和发送器613可包括用于直接或通过空中接口与车内的车载设备(或车载音视频设备)、传感器或其它实体设备通信的天线和芯片集。发送器613和收发器612组成通信模块，通信模块可被配置为根据一个或多个其它类型的无线通信(例如，协议)来接收和发送信息，所述无线通信诸如蓝牙、电气和电子工程师协会(institute of electrical and electronics engineers，IEEE)802.11通信协议、蜂窝技术、全球微波互联接入(worldwide Interoperability for microwave access，WiMAX)或长期演进(long term evolution，LTE)、ZigBee协议、专用短程通信(dedicated short range communications，DSRC)以及射频识别(radio frequency identification，RFID)通信，等等。
显示屏614用于接收用户输入以及显示由用户输入的信息以及车机提供给用户的信息。例如，电子地图等等。显示屏614可以是液晶显示器(liquid crystal display，LCD)、有机或无机发光二极管(organic light-emitting diode，OLED)、有源矩阵有机发光二极体面板(active matrix/organic light emitting diode，AMOLED)等。
处理器610可以由一个或者多个通用处理器构成，例如，CPU，或者CPU和硬件芯片的组合。上述硬件芯片可以是ASIC、PLD或其组合。上述PLD可以是CPLD、FPGA、GAL或其任意组合。
存储器611可以包括易失性存储器(Volatile Memory)，例如，RAM；存储器611也 可以包括非易失性存储器(Non-Volatile Memory)，例如ROM、快闪存储器(Flash Memory)、HDD或SSD；存储器611还可以包括上述种类的组合。存储器611可以存储程序以及数据，其中，存储的程序包括：OTA应用程序等，存储的数据包括：电子地图、权限信息、电子地图的更新策略，电子地图的数据大小以及电子地图的下载地址等。存储器611可以单独存在，也可以集成于处理器610内部。
为了简便起见，本实施例没有对签约信息，获取签约信息的过程，认证授权的过程、触发第一OTA服务端向第一OTA客户端发送数据的过程等等进行详细的介绍，具体请参见图3至图7以及相关内容，此处不再展开描述。本实施例的数据更新装置可以执行如图4至图7对应的实施例中的终端设备侧的方法。并且，图11所示的终端设备可以是图9所示的数据更新装置。
本申请实施例还提供一种可读存储介质，所述可读存储介质中存储有程序或指令，当其在计算机上运行时，使得上述各实施例的任意的数据更新方法被执行。
本申请实施例还提供一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行上述各实施例中的任意的数据更新方法。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线)或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质，(例如，软盘、存储盘、磁带)、光介质(例如，DVD)、或者半导体介质(例如固态存储盘Solid State Disk(SSD))等。

Claims (22)

  1. 一种数据更新方法，其特征在于，应用于第一空中下载技术OTA客户端，包括如下步骤：
    接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；
    向第二OTA客户端发送更新结果通知，其中，所述更新结果通知用于指示所述第一OTA客户端更新完成所述第一OTA服务端发送的数据，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
  2. 根据权利要求1所述的方法，其特征在于，所述接收第一OTA服务端基于签约信息发送的数据，包括：
    根据权限信息接收所述第一OTA服务端基于所述签约信息发送的所述数据。
  3. 根据权利要求2所述的方法，其特征在于，
    所述权限信息是所述第一OTA服务端根据所述签约信息生成的，并发送给所述第一OTA客户端的；或者，
    所述权限信息是所述第二OTA服务端根据所述签约信息生成的，并通过所述第二OTA客户端发送给所述第一OTA客户端的。
  4. 根据权利要求2或3所述的方法，其特征在于，所述权限信息包括授权证书或者令牌中的一种或者多种。
  5. 根据权利要求1-4任一权利要求所述的方法，其特征在于，所述签约信息包括用户标识，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
  6. 一种数据更新方法，其特征在于，应用于第一OTA服务端，包括如下步骤：
    接收第二OTA服务端发送的签约信息，其中，所述签约信息指示第一OTA客户端具备使用所述第一OTA服务端中的数据的权限；
    基于所述签约信息，向第一OTA客户端发送所述数据，其中，所述第一OTA客户端和第二OTA客户端被配置在同一个终端设备上。
  7. 根据权利要求6所述的方法，其特征在于，所述基于所述签约信息，向第一OTA客户端发送所述数据，包括：
    所述签约信息包括用户标识，
    基于所述用户标识对所述第一OTA客户端进行认证授权；
    在认证授权通过的情况下，根据权限信息向所述第一OTA客户端发送所述数据。
  8. 根据权利要求7所述的方法，其特征在于，
    所述权限信息是所述第一OTA服务端根据所述签约信息生成的；或者，
    所述权限信息是所述第一OTA客户端发送给所述第一OTA服务端的。
  9. 根据权利要求7或8所述的方法，其特征在于，所述权限信息包括授权证书或者令牌中的一种或者多种。
  10. 根据权利要求7-9任一权利要求所述的方法，其特征在于，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
  11. 一种第一OTA客户端，其特征在于，包括接收模块以及发送模块，
    所述接收模块用于接收第一OTA服务端基于签约信息发送的数据，其中，所述签约信息指示所述第一OTA客户端具备使用所述一OTA服务端中的数据的权限；
    所述发送模块用于向第二OTA客户端发送更新结果通知，其中，所述更新结果通知用于指示所述第一OTA客户端更新完成所述第一OTA服务端发送的数据，所述第一OTA客户端和所述第二OTA客户端被配置在同一个终端设备上。
  12. 根据权利要求11所述的客户端，其特征在于，
    所述接收模块具体用于根据权限信息接收所述第一OTA服务端基于所述签约信息发送的所述数据。
  13. 根据权利要求12所述的客户端，其特征在于，
    所述权限信息是所述第一OTA服务端根据所述签约信息生成，并发送给所述第一OTA客户端的；或者，
    所述权限信息是所述第二OTA服务端根据所述签约信息生成，并通过所述第二OTA客户端发送给所述第一OTA客户端的。
  14. 根据权利要求12或13所述的客户端，其特征在于，所述权限信息包括授权证书或者令牌中的一种或者多种。
  15. 根据权利要求11-14任一权利要求所述的客户端，其特征在于，所述签约信息包括用户标识，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
  16. 一种第一OTA服务端，其特征在于，包括接收模块以及发送模块；
    所述接收模块用于接收第二OTA服务端发送的签约信息，其中，所述签约信息指示第一OTA客户端具备使用所述第一OTA服务端中的数据的权限；
    所述发送模块用于基于所述签约信息，向第一OTA客户端发送所述数据，其中，所述第一OTA客户端和第二OTA客户端被配置在同一个终端设备上。
  17. 根据权利要求16所述的服务端，其特征在于，所述签约信息包括用户标识，所述服务端还包括处理模块，
    所述处理模块用于基于所述用户标识对所述第一OTA客户端进行认证授权；
    所述发送模块用于在认证授权通过的情况下，根据权限信息向所述第一OTA客户端发送所述数据。
  18. 根据权利要求17所述的服务端，其特征在于，
    所述权限信息是所述第一OTA服务端根据所述签约信息生成的；或者，
    所述权限信息是所述第一OTA客户端发送给所述第一OTA服务端的。
  19. 根据权利要求17或18所述的服务端，其特征在于，所述权限信息包括授权证书或者令牌中的一种或者多种。
  20. 根据权利要求16-19任一权利要求所述的服务端，其特征在于，所述签约信息还包括所述数据的范围以及使用时间中的一种或者多种。
  21. 一种芯片，其特征在于，包括处理器以及存储器，所述存储器中存储了指令，所述处理器用于执行所述存储器中指令，实现如权利要求1-5任一权利要求所述的方法，或实现如实现如权利要求6-10任一权利要求所述的方法。
  22. 一种终端设备，其特征在于，包括处理器以及存储器，所述存储器中存储了指令，所述处理器用于执行所述存储器中指令，
    实现如权利要求1-5任一权利要求所述的方法，或实现如实现如权利要求6-10任一权利要求所述的方法。
PCT/CN2021/105286 2021-07-08 2021-07-08 数据更新方法、装置以及*** WO2023279336A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN202180100093.3A CN117597907A (zh) 2021-07-08 2021-07-08 数据更新方法、装置以及***
PCT/CN2021/105286 WO2023279336A1 (zh) 2021-07-08 2021-07-08 数据更新方法、装置以及***

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2021/105286 WO2023279336A1 (zh) 2021-07-08 2021-07-08 数据更新方法、装置以及***

Publications (1)

Publication Number Publication Date
WO2023279336A1 true WO2023279336A1 (zh) 2023-01-12

Family

ID=84800169

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/105286 WO2023279336A1 (zh) 2021-07-08 2021-07-08 数据更新方法、装置以及***

Country Status (2)

Country Link
CN (1) CN117597907A (zh)
WO (1) WO2023279336A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120143404A1 (en) * 2009-08-19 2012-06-07 Bayerische Motoren Werke Aktiengesellschaft Method for Configuring Infotainment Applications in a Motor Vehicle
CN110324335A (zh) * 2019-07-02 2019-10-11 成都信息工程大学 一种基于电子移动证书的汽车软件升级方法及***
CN112115217A (zh) * 2020-08-11 2020-12-22 北京四维图新科技股份有限公司 高精地图的数据处理方法、装置、电子设备及存储介质
CN112913209A (zh) * 2021-01-27 2021-06-04 华为技术有限公司 一种服务授权管理方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120143404A1 (en) * 2009-08-19 2012-06-07 Bayerische Motoren Werke Aktiengesellschaft Method for Configuring Infotainment Applications in a Motor Vehicle
CN110324335A (zh) * 2019-07-02 2019-10-11 成都信息工程大学 一种基于电子移动证书的汽车软件升级方法及***
CN112115217A (zh) * 2020-08-11 2020-12-22 北京四维图新科技股份有限公司 高精地图的数据处理方法、装置、电子设备及存储介质
CN112913209A (zh) * 2021-01-27 2021-06-04 华为技术有限公司 一种服务授权管理方法及装置

Also Published As

Publication number Publication date
CN117597907A (zh) 2024-02-23

Similar Documents

Publication Publication Date Title
WO2020224621A1 (zh) 一种申请数字证书的方法
US11204753B2 (en) Information distribution system and in-vehicle device
EP4068083A1 (en) Upgrading method and apparatus
US20160127529A1 (en) Mobile Communication Terminal, Control Method Thereof, Auxiliary Terminal And Vehicle
US11184474B2 (en) System and method for supporting movable object application development
US11144303B2 (en) Vehicle software deployment system
CA3198428A1 (en) Method and system for synchronizing events within a secure wireless network
US20220104288A1 (en) Method And System For Synchronizing Events Within A Secure Wireless Network
US10904755B2 (en) Data distribution from a movable object
US20220286305A1 (en) Secured hd map services using blockchain
US11134526B2 (en) Automatic update of connection to a movable object
WO2023279336A1 (zh) 数据更新方法、装置以及***
US10733272B2 (en) Control apparatus, authentication apparatus, control system, and control method
WO2021163833A1 (zh) 数据处理方法和装置、车端设备、云端服务器和电子设备
US20190228170A1 (en) Supporting protocol independent movable object application development
US20230015693A1 (en) Restoration of corrupted keys in a secure storage system
US9594819B2 (en) Wireless system with database transfer mechanism and method of operation thereof
US12016061B2 (en) Remote mobile device management
US20220400523A1 (en) Dynamic Connection Management
US20240106824A1 (en) Hardware identity impersonation for target access control
KR20220072057A (ko) 통신 기능을 갖는 차량용 블랙박스 장치 및 그 제어 방법
Cui et al. Tools and practices
CN115701079A (zh) 访问控制关系更新的方法、装置和车载网关

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21948832

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 202180100093.3

Country of ref document: CN

NENP Non-entry into the national phase

Ref country code: DE