Vehicle-mounted device upgrade method and related device

Patent metadata

Field	Value
Publication number	US-11985238-B2
Application number	US-202017085878-A
Country	US
Kind code	B2
Filing date	Oct 30, 2020
Priority date	Apr 30, 2018
Publication date	May 14, 2024
Grant date	May 14, 2024

Abstract

Embodiments disclose a vehicle-mounted device upgrade method and a related device. The method may be applied to an intelligent vehicle, the intelligent vehicle includes a vehicle-mounted control device, and the method may include: receiving, by the vehicle-mounted control device, a first partial key sent by the communications device; restoring, by the vehicle-mounted control device, a first key by using the first partial key and a second partial key that is stored on the vehicle-mounted control device; and performing, by the vehicle-mounted control device, secure processing on a first upgrade file by using the first key, to obtain the securely processed first upgrade file, where the secure processing includes generating first message authentication code (MAC), and the securely processed first upgrade file includes the first upgrade file and the first MAC. According to this application, the vehicle-mounted device can be securely and efficiently upgraded.

First claim

What is claimed is:

1. A vehicle-mounted device upgrade method, applied to a vehicle upgrade system that comprises an intelligent vehicle and a communications device, wherein the intelligent vehicle comprises a vehicle-mounted control device and a first to-be-upgraded vehicle-mounted device, and the method comprises:
receiving, by the vehicle-mounted control device, a first partial key sent by the communications device;
restoring, by the vehicle-mounted control device, a first key by using the first partial key and a second partial key that is stored on the vehicle-mounted control device;
performing, by the vehicle-mounted control device, secure processing on a first upgrade file by using the first key, to obtain a securely processed first upgrade file, wherein the secure processing comprises generating a first message authentication code (MAC), and the securely processed first upgrade file comprises the first upgrade file and the first MAC;
attempting to upgrade the first to-be-upgraded vehicle-mounted device; and
responsive to determining that the first to-be-upgraded vehicle-mounted device is successfully upgraded, indicating, by the vehicle-mounted control device, the communications device to update a rollback file of the first upgrade file; or
responsive to determining that the first to-be-upgraded vehicle-mounted device fails to be upgraded, obtaining, by the vehicle-mounted control device, a rollback file of the first upgrade file from the communications device, and sending the rollback file to the first to-be-upgraded vehicle-mounted device for a rollback operation.

2. The method according to claim 1 , wherein the method further comprises:
sending, by the vehicle-mounted control device, the securely processed first upgrade file to the first to-be-upgraded vehicle-mounted device;
performing, by the first to-be-upgraded vehicle-mounted device by using a second key that is stored on the vehicle-mounted control device, secure verification on the securely processed first upgrade file, wherein the second key is a key that pre-matches the first key, and the secure verification is an inverse operation of the secure processing; and
responsive to determining that the verification succeeds, performing, by the first to-be-upgraded vehicle-mounted device, upgrade based on the first upgrade file that is successfully verified.

3. The method according to claim 1 , wherein the secure processing further comprises encrypting the first upgrade file and the first MAC by using the first key, and the securely processed first upgrade file comprises the first upgrade file and the first MAC that are encrypted by using the first key.

4. The method according to claim 1 , wherein before the receiving, by the vehicle-mounted control device, the first partial key sent by the communications device, the method further comprises:
determining, by the vehicle-mounted control device, the first key and the second key, and sending the second key to the first to-be-upgraded vehicle-mounted device.

5. The method according to claim 4 , wherein before the receiving, by the vehicle-mounted control device, the first partial key sent by the communications device, the method further comprises:
splitting, by the vehicle-mounted control device, the first key into the first partial key and the second partial key, and sending the first partial key to the communications device.

6. The method according to claim 1 , wherein before the receiving, by the vehicle-mounted control device, the first partial key sent by the communications device, the method further comprises:
obtaining, by the vehicle-mounted control device, an upgrade package, wherein the upgrade package comprises the first upgrade file;
performing, by the vehicle-mounted control device, secure verification on the upgrade package; and
responsive to determining that the secure verification on the upgrade package succeeds, requesting, by the vehicle-mounted control device, the first partial key from the communications device.

7. The method according to claim 6 , wherein the communications device comprises a terminal device, and before the obtaining, by the vehicle-mounted control device, the upgrade package, the method further comprises:
sending, by the vehicle-mounted control device, a secure upgrade request to the communications device, wherein the secure upgrade request comprises an upgrade-related parameter of the intelligent vehicle; and
responsive to determining that the upgrade-related parameter meets a preset upgrade condition, receiving, by the vehicle-mounted control device, a first indication sent by the communications device, wherein the first indication is used to trigger the vehicle-mounted control device to obtain the upgrade package from the terminal device or an upgrade server.

8. The method according to claim 1 , wherein the method further comprises:
performing, by the vehicle-mounted control device, secure authentication of the communications device to establish a secure cooperation channel; and
wherein the receiving, by the vehicle-mounted control device, a first partial key sent by the communications device comprises:
receiving, by the vehicle-mounted control device through the secure channel, the first partial key sent by the communications device.

9. A vehicle-mounted device upgrade method, applied to a vehicle upgrade system, wherein the vehicle upgrade system comprises an intelligent vehicle and a communications device, the intelligent vehicle comprises a vehicle-mounted control device and a first to-be-upgraded vehicle-mounted device, and the method comprises:
sending, by the communications device, a first partial key to the vehicle-mounted control device, wherein the vehicle-mounted control device restores a first key by using the first partial key and a second partial key that is stored on the vehicle-mounted control device; the first key is used by the vehicle-mounted control device to perform secure processing on a first upgrade file, to obtain a securely processed first upgrade file; the secure processing comprises generating a first message authentication code (MAC); and the securely processed first upgrade file comprises the first upgrade file and the first MAC;
attempting to upgrade the first to-be-upgraded vehicle-mounted device; and
responsive to determining that the first to-be-upgraded vehicle-mounted device is successfully upgraded, receiving, by the communications device, an indication, sent by the vehicle-mounted control device, indicating to update a rollback file of the first upgrade file; or
responsive to determining that the first to-be-upgraded vehicle-mounted device fails to be upgraded, sending, by the communications device, a rollback file of the first upgrade file to the vehicle-mounted control device, so that the first to-be-upgraded vehicle-mounted device performs a rollback operation.

10. The method according to claim 9 , wherein the vehicle-mounted control device splits the first key into the first partial key and the second partial key, and before the sending, by the communications device, the first partial key to the vehicle-mounted control device, the method further comprises:
receiving, by the communications device, the first partial key sent by the vehicle-mounted control device.

11. The method according to claim 9 , wherein before the sending, by the communications device, the first partial key to the vehicle-mounted control device, the method further comprises:
receiving, by the communications device, a first partial key request sent by the vehicle-mounted control device, wherein the first partial key request is sent by the vehicle-mounted control device when secure verification performed by the veh

Assignees

• Huawei Int Pte Ltd

Inventors

• Yang Yanjiang
• Wei Zhuo
• Lin Hsiao-Ying
• Wei He
• Shen Junqiang

Classifications

• H04L9/088 Primary

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• H04L9/08

  Key distribution {or management, e.g. generation, sharing or updating, of cryptographic keys or passwords (network architectures or network communication protocols for supporting key management in a packet data network H04L63/06)} · CPC title

• G06F21/30

  Authentication, i.e. establishing the identity or authorisation of security principals · CPC title