基于数字证书和密钥管理系统的车联网远程升级方法及实践  

A Method and Practice of Internet of Vehicle OTA Based on CA and KMS

作　　者：张相雨 张文翠 李岩 苏位中 Zhang Xiangyu;Zhang Wencui;Li Yan;Su Weizhong(CATARC Intelligent and Connected Technology Co.,Ltd.,Tianjin 300112;China Automotive Technology&Research Center Co.,Ltd.,Tianjin 300380)

机构地区：[1]中汽智联技术有限公司,天津300112 [2]中国汽车技术研究中心有限公司,天津300380

出　　处：《信息安全研究》2023年第5期469-475,共7页Journal of Information Security Research

摘　　要：车联网OTA技术已经逐渐成为量产车型的标配,OTA安全是车辆信息安全的关键一环.分析了当前车联网OTA安全风险和应对措施,提出了基于CA和KMS的OTA方法,从升级包的生成、存储、下载和安全验证各环节进行安全保护,并在预量产车型上进行了验证,有效提升了车辆OTA升级包在各环节的真实性、完整性和保密性保护.OTA technology has gradually become a standard part of mass production vehicles,and OTA security is a key link of vehicle information security.Based on the analysis of OTA security risks and countermeasures,an OTA method based on CA and KMS is proposed,which provides security protection from the generation,storage,download and security verification of the upgrade package.This method is verified on some preproduction vehicles,effectively improving the authenticity,integrity and confidentiality protection of the vehicle OTA upgrade package in all aspects.

关 键 词：车联网OTA 数字证书 对称加密 数字签名 密钥管理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]