Vehicle-mounted device upgrade method and related device

Patent metadata

Field	Value
Publication number	US-11662991-B2
Application number	US-202016856897-A
Country	US
Kind code	B2
Filing date	Apr 23, 2020
Priority date	Oct 24, 2017
Publication date	May 30, 2023
Grant date	May 30, 2023

Abstract

A vehicle-mounted device upgrade method and a related device. The method may be applied to a vehicle-mounted system, a vehicle-mounted control device and one or more to-be-upgraded vehicle-mounted devices, and the method may include: obtaining, by the vehicle-mounted control device, a vehicle-mounted upgrade package, where the vehicle-mounted upgrade package includes a plurality of upgrade files, and each upgrade file is used to upgrade at least one to-be-upgraded vehicle-mounted device; performing, by the vehicle-mounted control device, security verification on the plurality of upgrade files; and sending, by the vehicle-mounted control device, a target upgrade file to a target to-be-upgraded vehicle-mounted device that is to be upgraded by using the target upgrade file, where the target upgrade file is an upgrade file on which security verification succeeds in the plurality of upgrade files. According to this application, the vehicle-mounted device can be securely and efficiently upgraded.

First claim

What is claimed is:

1. A vehicle-mounted device upgrade method, applied to a vehicle, wherein the vehicle comprises a vehicle-mounted control device and one or more to-be-upgraded vehicle-mounted devices, and the method comprises:
obtaining, by the vehicle-mounted control device, a vehicle-mounted upgrade package, wherein the vehicle-mounted upgrade package comprises an upgrade file used to upgrade at least one of the one or more to-be-upgraded vehicle-mounted devices;
performing, by the vehicle-mounted control device, security verification on the upgrade file;
responsive to determining that the security verification on the upgrade file succeeds, generating, by the vehicle-mounted control device, a plurality of data blocks from a plurality of upgrade subfiles of the upgrade file;
generating, by the vehicle-mounted control device, a first message authentication code (MAC) of the plurality of data blocks using a second key, wherein the second key is a symmetric algorithm key; and
sending, by the vehicle-mounted control device, the plurality of data blocks and the first MAC to a target to-be-upgraded vehicle-mounted device that is to be upgraded wherein the first MAC is used by the target to-be-upgraded vehicle-mounted device to authenticate the plurality of data blocks.

2. The method according to claim 1 , wherein the vehicle-mounted upgrade package comprises a first digital signature; and the performing, by the vehicle-mounted control device, the security verification on the upgrade file comprises:
performing, by the vehicle-mounted control device, digital signature verification on the upgrade file using the first digital signature.

3. The method according to claim 2 , wherein the method further comprises:
sending, by the vehicle-mounted control device, identity authentication information to an upgrade server; and
responsive to determining that the identity authentication information is authenticated by the upgrade server, establishing a secure channel between the vehicle-mounted control device and the upgrade server; and
wherein the obtaining, by the vehicle-mounted control device, the vehicle-mounted upgrade package comprises:
obtaining, by the vehicle-mounted control device, the vehicle-mounted upgrade package from the upgrade server through the secure channel.

4. The method according to claim 2 , wherein the vehicle-mounted upgrade package is encrypted using a first key, and the first key is a symmetric key; and the method further comprises:
obtaining, by the vehicle-mounted control device, the first key from a key server; and
after the performing, by the vehicle-mounted control device, digital signature verification on the upgrade file by using the first digital signature, the method comprises:
decrypting, by the vehicle-mounted control device, the upgrade file using the first key responsive to determining that the digital signature verification succeeds.

5. The method according to claim 1 , wherein the method further comprises:
encrypting, by the vehicle-mounted control device, each of the plurality of upgrade subfiles using a third key; and
the generating, by the vehicle-mounted control device, the plurality of data blocks from the plurality of upgrade subfiles comprises:
generating, by the vehicle-mounted control device by using a preset algorithm, the plurality of data blocks from the plurality of upgrade subfiles that are encrypted using the third key.

6. The method according to claim 5 , wherein the preset algorithm comprises one of a hash chain algorithm, a hash tree algorithm, or a bloom filter algorithm.

7. The method according to claim 1 , wherein the method further comprises:
retransmitting, by the vehicle-mounted control device, a target data block to the target to-be-upgraded vehicle-mounted device, wherein the target data block is a data block on which verification fails on the target to-be-upgraded vehicle-mounted device in the plurality of data blocks.

8. An intelligent vehicle, wherein the intelligent vehicle comprises a vehicle-mounted control device and at least one to-be-upgraded vehicle-mounted device, wherein:
the vehicle-mounted control device is configured to obtain a vehicle-mounted upgrade package, perform security verification on an upgrade file in the vehicle-mounted upgrade package, responsive to determining that that the security verification on the upgrade file succeeds, generate a plurality of data blocks from a plurality of upgrade subfiles in the upgrade file, generate a first message authentication code (MAC) of the plurality of data blocks using a second key, wherein the second key is a symmetric algorithm key, and send the plurality of data blocks and the first MAC to a target to-be-upgraded vehicle-mounted device that is to be upgraded, wherein the upgrade file is used to upgrade the target to-be-upgraded vehicle-mounted device; and
the target to-be-upgraded vehicle-mounted device is configured to receive the plurality of data blocks and the first MAC sent by the vehicle-mounted control device, perform verification on the plurality of data blocks using the first MAC, in case that all the plurality of data blocks are verified, combine the plurality of data blocks for upgrade to generate a combined file and perform a secure upgrade using the combined file.

9. The intelligent vehicle according to claim 8 , wherein the vehicle-mounted control device is configured to:
perform digital signature verification on the upgrade file using a first digital signature.

10. The intelligent vehicle according to claim 9 , wherein the vehicle-mounted control device is configured to:
send identity authentication information to an upgrade server, and responsive to determining that the identity authentication information is authenticated by the upgrade server, establish a secure channel between the vehicle-mounted control device and the upgrade server, and obtain the vehicle-mounted upgrade package from the upgrade server through the secure channel; or
the vehicle-mounted upgrade package is encrypted using a first key, and the first key is a symmetric key; and the vehicle-mounted control device is configured to:
obtain the first key from a key server, and after digital signature verification performed on the upgrade file using the first digital signature succeeds, decrypt the upgrade file using the first key.

11. The intelligent vehicle according to claim 8 , wherein the vehicle-mounted control device is configured to:
encrypt each of the plurality of upgrade subfiles using a third key, and generate, using a preset algorithm, the plurality of data blocks from the plurality of upgrade subfiles that are encrypted using the third key; and
the target to-be-upgraded vehicle-mounted device is configured to:
responsive to determining that all the plurality of data blocks are verified, decrypt each of the plurality of data blocks using the third key, and combine the plurality of data blocks that are decrypted using the third key for upgrade.

12. A vehicle-mounted device upgrade apparatus, comprising:
a processor, configured to obtain a vehicle-mounted upgrade package from an upgrade server, wherein the vehicle-mounted upgrade package comprises an upgrade file, and the upgrade file is used to upgrade at least one to-be-upgraded vehicle-mounted device; and
the processor further configured to perform security verification on the upgrade file, responsive to determining that the security verification on the upgrade file succeeds, generate a plurality of data blocks from a plurality of upgrade subfiles in the upgrade file and generate a first message authentication code (MAC) of the plurality of data blocks using a second key, wherein the se

Assignees

• Huawei Int Pte Ltd

Inventors

• Yang Yanjiang
• Wei Zhuo
• Lin Hsiao-Ying
• Li Tieyan
• Shen Junqiang

Classifications

• H04L2209/80

  Wireless · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/083

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title