KR102491866B1 - Technique for automotive software update by using white-box cryptography - Google Patents

Abstract

According to some embodiments of the present disclosure, a vehicle software update method performed by a processor of a computing device associated with a vehicle is disclosed. The method includes: receiving encrypted software from a server; obtaining decrypted software by inputting vehicle-specific information and the encrypted software to a white box decryption algorithm stored in a memory; and updating the vehicle software using the decrypted software, wherein the whitebox decoding algorithm includes a whitebox table locked based on the vehicle-specific information, and the whitebox table comprises: It may be a table in which encryption keys of encrypted software are distributed and stored.

Description

Vehicle software update method using white box password {TECHNIQUE FOR AUTOMOTIVE SOFTWARE UPDATE BY USING WHITE-BOX CRYPTOGRAPHY}

The present disclosure relates to a vehicle software update technique using a white box password, and more particularly, to a technique for providing secure over-the-air (OTA) software updates in a vehicle using a white box password.

Referring to FIG. 1 , recent smart vehicles provide OTA services of in-vehicle software. Compared to the existing method of updating software through physical connection, in-vehicle software update is more easily possible through OTA. Accordingly, the demand for OTA is gradually increasing. However, if the vehicle's software is updated through OTA, if malicious code is inserted into the updated software, or if incorrect software is updated in an unauthorized vehicle, it can lead to a vehicle accident and lead to personal injury. Concerns exist.

Recently, in order to support secure software updates, methods of applying cryptographic techniques such as symmetric keys and hash chains or using secure hardware security modules (HSMs) have been proposed.

However, when encryption technologies such as symmetric keys and hash chains are applied to software updates, there may be disadvantages of managing and storing symmetric keys shared in advance to provide confidentiality of software. On the other hand, if HSM is used for software update, it may be more secure than the application of additional encryption technology, but additional costs may be incurred due to the use of additional hardware.

Accordingly, there may be a demand in the art for a technique capable of safely updating software while maintaining confidentiality of software at an appropriate cost.

Kim, Geunhyoung, and Im Y. Jung. "Integrity Assurance of OTA Software Update in Smart Vehicles." International Journal on Smart Sensing & Intelligent Systems 12.1 (2019)

The present disclosure has been made in response to the above background art, and aims to provide a vehicle software update technique using a white box password.

The technical problems of the present disclosure are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the following description.

According to some embodiments of the present disclosure for solving the above problems, a vehicle software update method performed by a processor of a computing device associated with a vehicle is disclosed. The method includes: receiving encrypted software from a server; obtaining decrypted software by inputting vehicle-specific information and the encrypted software to a white box decryption algorithm stored in a memory; and updating the vehicle software using the decrypted software, wherein the whitebox decoding algorithm includes a whitebox table locked based on the vehicle-specific information, and the whitebox table comprises: It may be a table in which encryption keys of encrypted software are distributed and stored.

In addition, the encrypted software may be encrypted as update software used for updating the vehicle software is input to a white box encryption algorithm, and the white box encryption algorithm may include the white box table.

In addition, the vehicle-specific information may include at least one of vehicle identification number information for identifying the vehicle, vehicle number information, vehicle-specific password information, and vehicle model information.

The receiving of the encrypted software from the server may include: receiving a software update notification signal from the server before receiving the encrypted software from the server; Transmitting a software update request signal to the server in response to the software update notification signal; and transmitting the software update request signal to the server and then receiving the encrypted software from the server.

The method may further include transmitting update result information about an update result of the vehicle software to the server when the update of the vehicle software is completed.

The method may further include receiving update information for updating the whitebox table from the server when the update result information for the update failure of the vehicle software is transmitted to the server; and updating the whitebox table based on the update information.

According to some embodiments of the present disclosure for solving the above problems, a computer program stored in a computer readable storage medium is disclosed. The computer program includes instructions for causing a processor of a computing device associated with the vehicle to perform the following steps: receiving encrypted software from a server; obtaining decrypted software by inputting vehicle-specific information and the encrypted software to a white box decryption algorithm stored in a memory; and updating vehicle software using the decrypted software, wherein the whitebox decryption algorithm includes a whitebox table locked based on the vehicle-specific information, and the whitebox table includes the encryption It may be a table in which encryption keys of encrypted software are distributed and stored.

According to some embodiments of the present disclosure to solve the above problems, a computing device associated with a vehicle is disclosed. The apparatus includes: a communication unit receiving encrypted software from a server; a memory storing a white box decoding algorithm; and a processor for obtaining decrypted software by inputting vehicle-specific information and the encrypted software to the white box decryption algorithm, wherein the processor updates vehicle software using the decrypted software, and the white box decryption algorithm updates the vehicle software. The box decryption algorithm may include a white box table locked based on the vehicle-specific information, and the white box table may be a table in which an encryption key of the encrypted software is distributed and stored.

The technical solutions obtainable in the present disclosure are not limited to the above-mentioned solutions, and other solutions not mentioned will become clear to those skilled in the art from the description below. You will be able to understand.

The present disclosure can provide a vehicle software update technology using a white box password so that the correct software is installed in the vehicle as well as confidentiality of the updated software.

Effects obtainable in the present disclosure are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below. .

Various aspects are now described with reference to the drawings, wherein like reference numbers are used to collectively refer to like elements. In the following embodiments, for explanation purposes, numerous specific details are set forth in order to provide a thorough understanding of one or more aspects. However, it will be apparent that such aspect(s) may be practiced without these specific details. In other instances, well-known structures and devices are shown in block diagram form in order to facilitate describing one or more aspects.
1 is a diagram showing the outline of a conventional OTA service of in-vehicle software.
2 is a block diagram of a computing device related to a vehicle for performing a method for updating vehicle software using a white box password according to some embodiments of the present disclosure.
3 is a diagram showing an overview of a conventional software encryption method and a software encryption method of the present disclosure.
4 and 5 are diagrams for explaining an example of a software encryption and decryption method according to some embodiments of the present disclosure.
6 is a flowchart illustrating an example of a vehicle software update method using a white box password according to some embodiments of the present disclosure.
7 depicts a general schematic diagram of an example computing environment in which embodiments of the present disclosure may be implemented.

Various embodiments and/or aspects are now disclosed with reference to the drawings. In the following description, for purposes of explanation, numerous specific details are set forth in order to facilitate a general understanding of one or more aspects. However, it will also be appreciated by those skilled in the art that such aspect(s) may be practiced without these specific details. The following description and accompanying drawings describe in detail certain illustrative aspects of one or more aspects. However, these aspects are exemplary and some of the various methods in principle of the various aspects may be used, and the described descriptions are intended to include all such aspects and their equivalents. Specifically, “embodiment,” “example,” “aspect,” “exemplary,” etc., as used herein, is not to be construed as indicating that any aspect or design described is superior to or advantageous over other aspects or designs. Maybe not.

Hereinafter, the same reference numerals are given to the same or similar components regardless of reference numerals, and overlapping descriptions thereof will be omitted. In addition, in describing the embodiments disclosed in this specification, if it is determined that a detailed description of a related known technology may obscure the gist of the embodiment disclosed in this specification, the detailed description thereof will be omitted. In addition, the accompanying drawings are only for easy understanding of the embodiments disclosed in this specification, and the technical ideas disclosed in this specification are not limited by the accompanying drawings.

Although first, second, etc. are used to describe various elements or components, these elements or components are not limited by these terms, of course. These terms are only used to distinguish one element or component from another. Accordingly, it goes without saying that the first element or component mentioned below may also be the second element or component within the technical spirit of the present invention.

Unless otherwise defined, all terms (including technical and scientific terms) used in this specification may be used in a meaning commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in commonly used dictionaries are not interpreted ideally or excessively unless explicitly specifically defined.

In addition, the term “or” is intended to mean an inclusive “or” rather than an exclusive “or”. That is, unless otherwise specified or clear from the context, “X employs A or B” is intended to mean one of the natural inclusive substitutions. That is, X uses A; X uses B; Or, if X uses both A and B, "X uses either A or B" may apply to either of these cases. Also, the term "and/or" as used herein should be understood to refer to and include all possible combinations of one or more of the listed related items.

Also, the terms "comprises" and/or "comprising" mean that the feature and/or element is present, but excludes the presence or addition of one or more other features, elements and/or groups thereof. It should be understood that it does not. Also, unless otherwise specified or where the context clearly indicates that a singular form is indicated, the singular in this specification and claims should generally be construed to mean "one or more".

In addition, the terms "information" and "data" used herein may often be used interchangeably with each other.

It is understood that when a component is referred to as being “connected” or “connected” to another component, it may be directly connected or connected to the other component, but other components may exist in the middle. It should be. On the other hand, when a component is referred to as “directly connected” or “directly connected” to another component, it should be understood that no other component exists in the middle.

The suffixes "module" and "unit" for the components used in the following description are given or used interchangeably in consideration of ease of writing the specification, and do not have meanings or roles that are distinct from each other by themselves.

Objects and effects of the present disclosure, and technical configurations for achieving them will become clear with reference to embodiments described later in detail in conjunction with the accompanying drawings. In describing the present disclosure, if it is determined that a detailed description of a known function or configuration may unnecessarily obscure the gist of the present disclosure, the detailed description will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present disclosure, which may vary according to the intention or custom of a user or operator.

However, the present disclosure is not limited to the embodiments disclosed below and may be implemented in a variety of different forms. These embodiments are provided only to make this disclosure complete and to completely inform those skilled in the art of the scope of the disclosure, and the disclosure is only defined by the scope of the claims. . Therefore, the definition should be made based on the contents throughout this specification.

2 is a block diagram of a computing device related to a vehicle for performing a method for updating vehicle software using a white box password according to some embodiments of the present disclosure.

Referring to FIG. 2 , a computing device 100 may include a processor 110 , a communication unit 120 and a memory 130 . However, since the above-described components are not essential to implement the computing device 100, the computing device 100 may have more or fewer components than the components listed above.

Computing device 100 according to some embodiments of the present disclosure may be associated with a vehicle. Specifically, the computing device 100 is provided in a vehicle and can control various functions of the vehicle.

Computing device 100 may include any type of computer system or computer device, such as, for example, microprocessors, mainframe computers, digital processors, portable devices and device controllers, and the like. However, it is not limited thereto.

The processor 110 of the computing device 100 typically controls the overall operation of the computing device 100 . The processor 110 provides appropriate information or functions to the user by processing signals, data, information, etc. input or output through components included in the computing device 100 or by running an application program stored in the memory 130. or can be processed.

Also, the processor 110 may control at least some of the components of the computing device 100 in order to drive an application program stored in the memory 130 . Furthermore, the processor 110 may combine and operate at least two or more of the components included in the computing device 100 to drive the application program.

According to some embodiments of the present disclosure, the processor 110 of the computing device 100 may control the communication unit 120 to receive update software for updating a vehicle from a server.

Specifically, the processor 110 may control the communication unit 120 to receive encrypted software for updating a vehicle from a server. In this case, the processor 110 may obtain decrypted software by inputting vehicle-specific information and encrypted software to a white box decryption algorithm. Also, the processor 110 may update vehicle software using the decrypted software.

The server of the present disclosure may be associated with a vehicle manufacturer or a vehicle software management company. Specifically, the server may manage the vehicle by transmitting update software for periodically updating the software of the computing device 100 included in the vehicle to the vehicle.

Hereinafter, a description of a vehicle software update method using a white box password will be described later with reference to FIGS. 3 to 6 .

The communication unit 120 of the computing device 100 may include one or more modules enabling communication between the computing device 100 and a vehicle or between the computing device 100 and a user terminal. Also, the communication unit 120 may include one or more modules that connect the computing device 100 to one or more networks.

A network connecting communication between the computing device 100 and the vehicle may be any wired or wireless communication network capable of transmitting and receiving any type of data and signals.

The network according to the embodiments of the present disclosure may be configured regardless of its communication mode, such as wired and wireless, and is composed of various communication networks such as a local area network (LAN) and a wide area network (WAN). It can be. In addition, the network may be the known World Wide Web (WWW), or may use a wireless transmission technology used for short-range communication, such as Infrared Data Association (IrDA) or Bluetooth.

The techniques described herein may be used in the networks mentioned above as well as other networks.

The memory 130 of the computing device 100 may store programs for operation of the processor 110 and may temporarily or permanently store input/output data. The memory 130 may be a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (eg SD or XD memory, etc.), RAM (Random Access Memory, RAM), SRAM (Static Random Access Memory), ROM (Read-Only Memory, ROM), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory), magnetic memory, magnetic It may include at least one type of storage medium among disks and optical disks. This memory 130 may be operated under the control of the processor 110 .

According to software implementation, embodiments such as procedures and functions described in this specification may be implemented as separate software modules. Each of the software modules may perform one or more functions and operations described herein. The software code may be implemented as a software application written in any suitable programming language. The software code may be stored in the memory 130 of the computing device 100 and executed by the processor 110 of the computing device 100 .

3 is a diagram showing an overview of a conventional software encryption method and a software encryption method of the present disclosure.

First, referring to FIG. 3 (a), it is an outline of a conventional symmetric key encryption method. As shown, in the conventional symmetric key encryption method, an encryption key may be used for encryption and decryption. In this case, a high level of security may be required when storing or transmitting an encryption key.

Meanwhile, referring to (b) of FIG. 3 , the encryption method of the present disclosure may perform encryption for software using an encryption key.

Specifically, the encryption key of the present disclosure may use a white box encryption method.

More specifically, in the white box encryption method, the encryption key 10 may be mixed and inserted into software through a complex encryption algorithm and changed in a distributed form. That is, in the white box encryption method, the white box table 20 can be used as an encryption key.

Therefore, the vehicle software update method of the present disclosure makes it impossible to extract an encryption key through a white box encryption method in which an encryption key is distributed, thereby increasing the confidentiality of vehicle software compared to the existing symmetric key encryption method.

In addition, the vehicle software update method of the present disclosure can prevent malicious code from being inserted into software by malicious users. That is, the vehicle software update method of the present disclosure can ensure the safety of vehicle software.

Hereinafter, a vehicle software update method using a white box encryption method will be described with reference to FIGS. 4 and 5 .

4 and 5 are diagrams for explaining encryption and decryption methods of software according to some embodiments of the present disclosure.

Referring to FIG. 4 , the processor 110 of the computing device 100 may receive encrypted software from the server through the communication unit 120 (S110).

Specifically, the processor 110 of the computing device 100 may receive a software update notification signal from the server through the communication unit 120 before receiving encrypted software from the server. In this case, the processor 110 may control the communication unit 120 to transmit a software update request signal to the server in response to the software update notification signal. After transmitting the software update request signal to the server, the processor 110 may receive the encrypted software from the server through the communication unit 120 .

That is, the computing device 100 of the present disclosure may be associated with a vehicle. Specifically, the computing device 100 is provided in a vehicle and can control various functions of the vehicle. Meanwhile, the server of the present disclosure may be associated with a vehicle manufacturer or a vehicle software management company. Specifically, the server may manage the vehicle by transmitting update software for periodically updating the software of the computing device 100 included in the vehicle to the vehicle.

Meanwhile, the encrypted software of the present disclosure may be encrypted as software for updating used for updating vehicle software is input to a white box encryption algorithm. Also, the whitebox encryption algorithm may include a whitebox table.

Here, the white box table may be transmitted from the server to the computing device 100 before the computing device 100 receives encrypted software from the server. Specifically, the server may lock the white box table using vehicle-specific information related to the computing device 100 and transmit the locked white box table to the computing device 100 . For example, the vehicle-specific information may include at least one of vehicle identification number information, vehicle number information, vehicle-specific password information, and vehicle model information. However, it is not limited thereto.

That is, the white box table used for encryption or decryption of software is locked with vehicle-specific information, so that only the vehicle to be updated can obtain encrypted software.

Therefore, the vehicle software update method of the present disclosure may prevent inappropriate software update in advance, thereby ensuring safety specifications of the vehicle.

Meanwhile, when the processor 110 of the computing device 100 receives the encrypted software from the server, it may obtain the decrypted software by inputting the vehicle-specific information and the encrypted software to the white box decryption algorithm (S120). . Here, the white box decoding algorithm may be stored in the memory 130 of the computing device 100 .

Meanwhile, the whitebox decoding algorithm of the present disclosure may include a whitebox table locked based on vehicle-specific information. And, the white box table may be a table in which encryption keys of encrypted software are distributed and stored.

Referring to FIG. 5 , the computing device 100 of the present disclosure inputs encrypted software and vehicle-specific information into a white box table (or white box encryption table) pre-received from the server and pre-stored in the memory 130, Decrypted software can be obtained.

That is, according to the vehicle software update method using white box encryption of the present disclosure, only a vehicle (ie, a computing device) having vehicle-specific information can decrypt encrypted software.

Therefore, the vehicle software update method using the white box encryption of the present disclosure can safely transmit confidentiality-guaranteed software to the vehicle to be updated, thereby providing safe software updates.

As described above, the vehicle software update technique using white box cryptography of the present disclosure can provide users with a method for providing secure vehicle software updates.

As the vehicle software update method using the white box encryption of the present disclosure uses the white box encryption, the encryption key used to ensure the confidentiality of the software is mixed with the encryption algorithm in the white box table, so an attacker extracts the encryption key. can stop doing it.

Therefore, the vehicle software update method using the white box encryption of the present disclosure can solve key management and storage problems that occur when encryption technologies such as a conventional symmetric key or hash chain are applied.

In addition, the vehicle software update method using the white box encryption of the present disclosure can protect intermediate operation values and encryption keys of the encryption algorithm only by using software (white box encryption table) compared to the method using hardware-based HSM.

In addition, the vehicle software update method using the white box encryption of the present disclosure can provide confidentiality-guaranteed software to vehicles corresponding to the software update by locking the white box table with unique information of each vehicle.

In addition, the vehicle software update method using the white box encryption of the present disclosure can improve safety because only the table can be easily updated when a key used for software encryption is required due to a security problem.

Referring back to FIG. 4 , when the decrypted software is obtained, the processor 110 of the computing device 100 may update the vehicle software using the decrypted software (S130).

Also, when the vehicle software update is completed, the processor 110 may transmit update result information on the vehicle software update result to the server.

In detail, the processor 110 may receive update information for updating the white box table from the server through the communication unit 120 when the update result information regarding the update failure of the vehicle software is transmitted to the server. Also, the processor 110 may update the whitebox table based on the update information.

Therefore, the vehicle software update method of the present disclosure can improve update stability by preventing an update failure that may occur in the future.

6 is a flowchart illustrating an example of a vehicle software update technique using a white box encryption according to some embodiments of the present disclosure.

First, according to the vehicle software update method using a white box password of the present disclosure, the vehicle-related computing device 100 stores a white box table in which a software encryption key locked with vehicle-specific information of each vehicle is hidden, as shown in FIG. 5 . may be doing

The remote maintenance server 200 in charge of updating the software of the vehicle may notify the computing device 100 or the user (user terminal) that there is an update of the software existing in the vehicle. For example, the remote maintenance server 200 may transmit a message related to a software update to the computing device 100 or a user terminal. However, it is not limited thereto.

Meanwhile, the computing device 100 or the user receiving the software update notification may request the software update from the remote maintenance server. For example, a user may transmit a message related to a software update request to a remote maintenance server using the computing device 100 or a user terminal. However, it is not limited thereto.

Upon receiving the request for software update, the remote maintenance server 200 may transmit encrypted software to the computing device 100 or the user terminal through a white box encryption algorithm. Here, the remote maintenance server 200 may provide confidentiality of the updated software by encrypting and transmitting the software.

Meanwhile, the computing device 100 or the user terminal receiving (or downloading) the encrypted software performs a decryption process by inputting vehicle-specific information and the encrypted software as shown in FIG. 5 to decrypt the encrypted software. can do. Here, since vehicle-specific information is input to obtain the decrypted software, only the vehicle corresponding to the update can obtain the decrypted software.

When the computing device 100 or the user terminal completes decryption of the encrypted software, the decrypted software may be installed in the computing device 100 . In addition, the computing device 100 or the user terminal may transmit an update result to the remote maintenance server 200 . In addition, the remote maintenance server 200 may update the white box table in which the vehicle is stored when the computing device 100 or the user terminal fails to update, thereby improving the safety of future software updates.

7 depicts a general schematic diagram of an example computing environment in which embodiments of the present disclosure may be implemented.

Although the present disclosure has generally been described above in terms of computer-executable instructions that can be executed on one or more computers, those skilled in the art will appreciate that the present disclosure may be implemented in combination with other program modules and/or as a combination of hardware and software. will know

Generally, modules herein include routines, procedures, programs, components, data structures, etc. that perform particular tasks or implement particular abstract data types. It will also be appreciated by those skilled in the art that the methods of the present disclosure may be used in single-processor or multiprocessor computer systems, minicomputers, mainframe computers, as well as personal computers, handheld computing devices, microprocessor-based or programmable consumer electronics, and the like (each of which is It will be appreciated that other computer system configurations may be implemented, including those that may be operative in connection with one or more associated devices.

The described embodiments of the present disclosure may also be practiced in distributed computing environments where certain tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote memory storage devices.

A computer typically includes a variety of computer readable media. Media accessible by a computer includes volatile and nonvolatile media, transitory and non-transitory media, removable and non-removable media. By way of example, and not limitation, computer readable media may include computer readable storage media and computer readable transmission media.

Computer readable storage media are volatile and nonvolatile media, transitory and non-transitory, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. includes media Computer readable storage media may include RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital video disk (DVD) or other optical disk storage device, magnetic cassette, magnetic tape, magnetic disk storage device or other magnetic storage device. device, or any other medium that can be accessed by a computer and used to store desired information.

A computer readable transmission medium typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism. Including all information delivery media. The term modulated data signal means a signal that has one or more of its characteristics set or changed so as to encode information within the signal. By way of example, and not limitation, computer readable transmission media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared, and other wireless media. Combinations of any of the above are also intended to be included within the scope of computer readable transmission media.

An exemplary environment 1100 implementing various aspects of the present disclosure is shown including a computer 1102, which includes a processing unit 1104, a system memory 1106, and a system bus 1108. do. System bus 1108 couples system components, including but not limited to system memory 1106 , to processing unit 1104 . Processing unit 1104 may be any of a variety of commercially available processors. Dual processor and other multiprocessor architectures may also be used as the processing unit 1104.

System bus 1108 may be any of several types of bus structures that may additionally be interconnected to a memory bus, a peripheral bus, and a local bus using any of a variety of commercial bus architectures. System memory 1106 includes read only memory (ROM) 1110 and random access memory (RAM) 1112 . A basic input/output system (BIOS) is stored in non-volatile memory 1110, such as ROM, EPROM, or EEPROM, and is a basic set of information that helps transfer information between components within computer 1102, such as during startup. contains routines. RAM 1112 may also include high-speed RAM, such as static RAM, for caching data.

The computer 1102 may also include an internal hard disk drive (HDD) 1114 (eg, EIDE, SATA) - the internal hard disk drive 1114 may also be configured for external use within a suitable chassis (not shown). Yes—a magnetic floppy disk drive (FDD) 1116 (e.g., for reading from or writing to removable diskette 1118), and an optical disk drive 1120 (e.g., CD-ROM) for reading disc 1122 or reading from or writing to other high capacity optical media such as DVDs). The hard disk drive 1114, magnetic disk drive 1116, and optical disk drive 1120 are connected to the system bus 1108 by a hard disk drive interface 1124, magnetic disk drive interface 1126, and optical drive interface 1128, respectively. ) can be connected to The interface 1124 for external drive implementation includes, for example, at least one or both of Universal Serial Bus (USB) and IEEE 1394 interface technologies.

These drives and their associated computer readable media provide non-volatile storage of data, data structures, computer executable instructions, and the like. In the case of computer 1102, drives and media correspond to storing any data in a suitable digital format. Although the description of computer-readable storage media above refers to HDDs, removable magnetic disks, and removable optical media such as CDs or DVDs, those skilled in the art can use zip drives, magnetic cassettes, flash memory cards, cartridges, It will be appreciated that other types of storage media readable by the computer may also be used in the exemplary operating environment and any such media may include computer executable instructions for performing the methods of the present disclosure. .

A number of program modules may be stored on the drive and RAM 1112, including an operating system 1130, one or more application programs 1132, other program modules 1134, and program data 1136. All or portions of the operating system, applications, modules and/or data may also be cached in RAM 1112. It will be appreciated that the present disclosure may be implemented in a variety of commercially available operating systems or combinations of operating systems.

A user may enter commands and information into the computer 1102 through one or more wired/wireless input devices, such as a keyboard 1138 and a pointing device such as a mouse 1140. Other input devices (not shown) may include a microphone, IR remote control, joystick, game pad, stylus pen, touch screen, and the like. Although these and other input devices are often connected to the processing unit 1104 through an input device interface 1142 that is connected to the system bus 1108, a parallel port, IEEE 1394 serial port, game port, USB port, IR interface, may be connected by other interfaces such as the like.

A monitor 1144 or other type of display device is also connected to the system bus 1108 through an interface such as a video adapter 1146. In addition to the monitor 1144, computers typically include other peripheral output devices (not shown) such as speakers, printers, and the like.

Computer 1102 may operate in a networked environment using logical connections to one or more remote computers, such as remote computer(s) 1148 via wired and/or wireless communications. Remote computer(s) 1148 may be a workstation, server computer, router, personal computer, handheld computer, microprocessor-based entertainment device, peer device, or other common network node, and may generally refer to computer 1102. Although many or all of the described components are included, for brevity, only memory storage device 1150 is shown. The logical connections shown include wired/wireless connections to a local area network (LAN) 1152 and/or a larger network, such as a wide area network (WAN) 1154 . Such LAN and WAN networking environments are common in offices and corporations and facilitate enterprise-wide computer networks, such as intranets, all of which can be connected to worldwide computer networks, such as the Internet.

When used in a LAN networking environment, computer 1102 connects to local network 1152 through wired and/or wireless communication network interfaces or adapters 1156. Adapter 1156 may facilitate wired or wireless communications to LAN 1152, which also includes a wireless access point installed therein to communicate with wireless adapter 1156. When used in a WAN networking environment, computer 1102 may include a modem 1158, be connected to a communications server on WAN 1154, or other device that establishes communications over WAN 1154, such as over the Internet. have the means A modem 1158, which may be internal or external and a wired or wireless device, is connected to the system bus 1108 through a serial port interface 1142. In a networked environment, program modules described for computer 1102, or portions thereof, may be stored on remote memory/storage device 1150. It will be appreciated that the network connections shown are exemplary and other means of establishing a communication link between computers may be used.

Computer 1102 is any wireless device or entity that is deployed and operating in wireless communication, eg, printers, scanners, desktop and/or portable computers, portable data assistants (PDAs), communication satellites, wireless detectable tags associated with It operates to communicate with arbitrary equipment or places and telephones. This includes at least Wi-Fi and Bluetooth wireless technologies. Thus, the communication may be a predefined structure as in conventional networks or simply an ad hoc communication between at least two devices.

Wi-Fi (Wireless Fidelity) makes it possible to connect to the Internet without wires. Wi-Fi is a wireless technology, such as a cell phone, that allows such devices, eg, computers, to transmit and receive data both indoors and outdoors, i.e. anywhere within coverage of a base station. Wi-Fi networks use a radio technology called IEEE 802.11 (a,b,g, etc.) to provide secure, reliable, and high-speed wireless connections. Wi-Fi can be used to connect computers to each other, to the Internet, and to wired networks (using IEEE 802.3 or Ethernet). Wi-Fi networks can operate in the unlicensed 2.4 and 5 GHz radio bands, for example, at 11 Mbps (802.11a) or 54 Mbps (802.11b) data rates, or on products that include both bands (dual band). there is.

Those skilled in the art will understand that the various illustrative logical blocks, modules, processors, means, circuits, and algorithm steps described in connection with the embodiments disclosed herein are electronic hardware, (for convenience) , may be implemented by various forms of program or design code (referred to herein as “software”) or a combination of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends on the particular application and the design constraints imposed on the overall system. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present disclosure.

Various embodiments presented herein may be implemented as a method, apparatus, or article of manufacture using standard programming and/or engineering techniques. The term "article of manufacture" includes a computer program or media accessible from any computer-readable device. For example, computer-readable storage media include magnetic storage devices (eg, hard disks, floppy disks, magnetic strips, etc.), optical disks (eg, CDs, DVDs, etc.), smart cards, and flash memory devices (eg, EEPROM, cards, sticks, key drives, etc.), but are not limited thereto. The term “machine-readable medium” includes, but is not limited to, wireless channels and various other media that can store, hold, and/or convey instruction(s) and/or data.

The description of the presented embodiments is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art of this disclosure, and the general principles defined herein may be applied to other embodiments without departing from the scope of this disclosure. Thus, the present disclosure is not to be limited to the embodiments presented herein, but is to be interpreted in the widest scope consistent with the principles and novel features presented herein.

Claims (8)

A vehicle software update method performed by a processor of a computing device associated with a vehicle,
receiving the encrypted software from the server;
obtaining decrypted software by inputting vehicle-specific information and the encrypted software to a white box decryption algorithm stored in a memory;
Updating the vehicle software using the decrypted software;
transmitting update result information about an update result of the vehicle software to the server when the update of the vehicle software is completed;
receiving update information for updating a white box table from the server when the update result information regarding the update failure of the vehicle software is transmitted to the server; and
updating the whitebox table based on the update information;
including,
The white box decoding algorithm,
Including the white box table locked based on the vehicle-specific information including vehicle identification number information for identifying the vehicle, vehicle number information, vehicle-specific password information, and vehicle model information do,
The white box table,
A table in which the encryption key of the encrypted software is distributed and stored,
How to update vehicle software.
According to claim 1,
The encrypted software,
Software for updating used for updating the vehicle software is encrypted as it is input to a white box encryption algorithm,
The white box encryption algorithm,
Including the white box table,
How to update vehicle software.
delete According to claim 1,
Receiving the encrypted software from the server,
receiving a software update notification signal from the server before receiving the encrypted software from the server;
Transmitting a software update request signal to the server in response to the software update notification signal; and
receiving the encrypted software from the server after transmitting the software update request signal to the server;
including,
How to update vehicle software.
delete delete A computer program stored on a computer readable storage medium,
The computer program includes instructions for causing a processor of a computing device associated with the vehicle to perform the following steps:
receiving the encrypted software from the server;
obtaining decrypted software by inputting vehicle-specific information and the encrypted software to a white box decryption algorithm stored in a memory;
Updating vehicle software using the decrypted software;
transmitting update result information about an update result of the vehicle software to the server when the update of the vehicle software is completed;
receiving update information for updating a white box table from the server when the update result information regarding the update failure of the vehicle software is transmitted to the server; and
updating the whitebox table based on the update information;
including,
The white box decoding algorithm,
Including the white box table locked based on the vehicle-specific information including vehicle identification number information for identifying the vehicle, vehicle number information, vehicle-specific password information, and vehicle model information do,
The white box table,
A table in which the encryption key of the encrypted software is distributed and stored,
A computer program stored on a computer readable storage medium.
As a computing device associated with a vehicle,
Communication unit for receiving the encrypted software from the server;
a memory storing a white box decoding algorithm; and
a processor for obtaining decrypted software by inputting vehicle-specific information and the encrypted software to the white box decryption algorithm;
including,
the processor,
Updating vehicle software using the decrypted software;
When the update of the vehicle software is completed, transmitting update result information on the update result of the vehicle software to the server;
receiving update information for updating a white box table from the server when the update result information for the update failure of the vehicle software is transmitted to the server; and
Based on the update information, update the whitebox table;
The white box decoding algorithm,
Including the white box table locked based on the vehicle-specific information including vehicle identification number information for identifying the vehicle, vehicle number information, vehicle-specific password information, and vehicle model information do,
The white box table,
A table in which the encryption key of the encrypted software is distributed and stored,
A computing device associated with a vehicle.

Images