Software upgrading method based on OTA upgrading system and OTA upgrading system

Abstract

The embodiment of the invention provides a software upgrading method based on an OTA upgrading system and the OTA upgrading system, and the method comprises the steps that a package issuing unit encrypts a software package to obtain an encrypted software package, and generates metadata for the software package; a package issuing unit sends the encrypted software package to the downloading unit andsends the metadata to the upgrading service unit; an upgrading service unit acquires a vehicle certificate sent by a vehicle, encrypts the metadata by adopting the vehicle certificate to obtain encrypted metadata, and sends the encrypted metadata to the vehicle; enthe vehicle decrypts the encrypted metadata by adopting a preset vehicle private key, and verifies the legality of the metadata; if the metadata is legal, the vehicle acquires the encrypted software package from the downloading unit and decrypts the encrypted software package according to the metadata; the vehicle verifies the legality of the software package according to the metadata; and if the software package is legal, the vehicle is upgraded by adopting the software package. According to the embodiment of the invention, theproblems of tampering and replay attacks of the software package can be prevented.

Description

Technical field [0001] The present invention relates to the technical field of vehicles, in particular to a software upgrade method based on an OTA upgrade system and an OTA upgrade system. Background technique [0002] With the intelligentization and Internetization of new energy vehicles, a large number of MCUs (Microcontroller Units) and ECUs (Electronic Control Units) are widely used on the car side, and the software iteration speed is getting faster and faster. [0003] The traditional firmware upgrade method is to update the firmware in the offline after-sales service center, which is not only inefficient but also costly. Therefore, the remote upgrade method through OTA (Over-the-Air Technology) is widely used in the firmware of vehicle ECU equipment. Upgrade, but the security of firmware is usually easily overlooked. Current industry practices include: [0004] The first method is to download the bare package upgrade directly through the network without security protection me...

AI Technical Summary

Problems solved by technology

The cracking replay problem means that if a certain car firmware package is cracked, the cracked package can be copied and installed in different vehicle ECUs without restriction; at the same time, the security module responsible for key management in the cloud is usually placed in the same way as the upgrade service unit In the open domain or public cloud, the risk of key leakage is greatly increased. These security problems may affect the user's car at least, or cause the car to be destroyed.

[0007] To sum up, the existing firmware update method has the problem of lack of encryption or the encryption method is easy to be cracked

Images