CN104468784B - A kind of system and method that board units software upgrading is realized by DSRC interfaces - Google Patents

A kind of system and method that board units software upgrading is realized by DSRC interfaces Download PDF

Info

Publication number
CN104468784B
CN104468784B CN201410742011.7A CN201410742011A CN104468784B CN 104468784 B CN104468784 B CN 104468784B CN 201410742011 A CN201410742011 A CN 201410742011A CN 104468784 B CN104468784 B CN 104468784B
Authority
CN
China
Prior art keywords
upgrading
board units
dsrc
terminals
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201410742011.7A
Other languages
Chinese (zh)
Other versions
CN104468784A (en
Inventor
张北海
桂杰
逯静辉
秦建良
李全发
王占军
薛金银
李楠
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
BEIJING SUTONG TECHNOLOGY Co Ltd
Original Assignee
BEIJING SUTONG TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by BEIJING SUTONG TECHNOLOGY Co Ltd filed Critical BEIJING SUTONG TECHNOLOGY Co Ltd
Priority to CN201410742011.7A priority Critical patent/CN104468784B/en
Publication of CN104468784A publication Critical patent/CN104468784A/en
Application granted granted Critical
Publication of CN104468784B publication Critical patent/CN104468784B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/65Updates

Abstract

The present invention relates to a kind of system and method that the upgrading of ETC board units software security is realized by DSRC interfaces.Including:Upgrading terminals send upgrading query statement by DSRC interfaces to board units;The board units are by the board units current version feedback of the information to upgrading terminals;The upgrading terminals judge whether the board units need to upgrade by the version information that is fed back described in DSRC interfaces;The upgrading terminals decide whether to send upgrade command and upgrading data packet to the board units according to judged result;The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces.The method of the present invention can provide unified upgrade interface for the board units of different model, and ensure the security of updating operation.

Description

A kind of system and method that board units software upgrading is realized by DSRC interfaces
Technical field
The present invention relates to ITS (Intelligent Transport System, intelligent transportation system) technical field, especially It is related to a kind of system and method that board units software upgrading is realized by DSRC interfaces.
Background technology
Highway ETC (Electronic Toll Collection, electric non-stop toll) system is using special The mode of junction service (Dedicated Short Range Communication, abbreviation DSRC) agreement realizes that vehicle does not stop The noncash automatic fare collection system that car passes through freeway toll station.The traction equipment of ETC system mainly includes vehicle electronics mark Sign (or board units, On-Board Unit, be installed on vehicle), roadside unit (Road Side Unit, abbreviation RSU, position Above the lane in which the drivers should pay fees).When vehicle drives into ETC tracks, the antenna of roadside unit is with being arranged on the vehicle-mounted of windshield Unit carries out DSRC communications, and billing operation is completed according to result of communication, and controls track railing action.Whole process is very short It is automatically performed in time, vehicle can complete charge transaction without parking.
ETC system board units are installed on vehicle after delivery user's use, if there is design deficiency of product, ETC Situations such as system upgrade, it is sometimes desirable to upgrade to the software program of board units.Software program upgrading can reduce product into This, is avoided product recall from bringing time and cost allowance to user and equipment vendor, operator.The existing ETC board units in China Upgrading there is no unified upgrading mode and data-interface, and lack validation and the safe operation guarantee of upgrading data. Specifically, first, the special upgrade equipment that each board units manufacturer uses is different, is mostly entered using wired data interface Row upgrading, the structure of special upgrade equipment, the cable data hardware interface disunity of upgrading, upgrades the communication protocol used also not It is identical to the greatest extent, thereby produce the great wasting of resources.Secondly, the use of each special upgrade equipment needs to carry out substantial amounts of personnel's training Instruction, larger burden is brought to upgrade job.Finally, existing board units escalation process lacks data safety pledge system, The risk that user or manufacturer are upgraded and changed privately board units software program by wired data interface be present.With ETC Popularization in the whole nation, existing ETC board units software program upgrading mode can not also adapt to large-scale board units upgrading Business demand.
The content of the invention
Solve in the prior art that board units upgrading is cumbersome, lose time and the problem of human cost, there is provided Yi Zhongtong Cross the system and method that DSRC interfaces realize board units software upgrading.
A kind of system that ETC board units software upgradings are realized by DSRC interfaces provided in an embodiment of the present invention, including,
Board units, upgrading terminals;
The upgrading terminals send upgrading query statement by DSRC interfaces to the board units;
The board units are by the board units current version feedback of the information to upgrading terminals;
Whether the upgrading terminals judge the board units by the version information that is fed back described in DSRC interfaces Need to upgrade;
The upgrading terminals decide whether to send upgrade command and upgrading data to the board units according to judged result Bag;
The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces.
It is described according to embodiments of the present invention a kind of the one of ETC board units software update systems to be realized by DSRC interfaces Individual further aspect, the board units include processor, memory block, DSRC modules and secure access module, wherein,
The processor, for carrying out Digital Signal Processing and control;
The DSRC modules, for carrying out DSRC signal transmitting and receivings;
The secure access module, for storing key data and carrying out encryption and decryption calculating;
The memory block, resident element, application program unit and buffer area are controlled comprising upgrading, wherein the upgrading control Resident element controls upgrading flow according to upgrade command;The application program unit performs the board units and carries out ETC transaction; The buffer area is used to store the upgrading data packet received.Wherein, upgrading control resident element, application program unit and caching Area is all located in same memory chip.
It is described according to embodiments of the present invention a kind of ETC board units software update system to be realized again by DSRC interfaces One further aspect, it is read-only storage chip that the upgrading, which controls resident element,.
It is described according to embodiments of the present invention a kind of the another of ETC board units software update systems to be realized by DSRC interfaces One further aspect, the upgrading terminals include, processor, memory block, DSRC modules and secure access module, wherein,
The processor, for Digital Signal Processing and control;
The DSRC modules, for carrying out DSRC signal transmitting and receivings;
The secure access module, for storing key data and carrying out key data calculating;
The memory block further comprises, upgrades control unit, the control for updating operation;Data storage area, it is used for Store upgrading data packet.
It is described according to embodiments of the present invention a kind of the another of ETC board units software update systems to be realized by DSRC interfaces One further aspect, the upgrading terminals include, processor, memory block, DSRC modules and wireless communication module, wherein,
The processor, for Digital Signal Processing and control;
The DSRC modules, for carrying out DSRC signal transmitting and receivings;
The wireless communication module, for being communicated with background server, obtain upgrading data packet and encryption and decryption calculates As a result;
The memory block further comprises, upgrades control unit, the control for updating operation;Data storage area, it is used for Store upgrading data packet.
The embodiment of the present invention additionally provides one kind and realizes ETC board units method for upgrading software by DSRC interfaces,
Upgrading terminals send upgrading query statement by DSRC interfaces to board units;
The board units are by the board units current version feedback of the information to upgrading terminals;
Whether the upgrading terminals judge the board units by the version information that is fed back described in DSRC interfaces Need to upgrade;
The upgrading terminals decide whether to send upgrade command and upgrading data to the board units according to judged result Bag;
The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces.
It is described according to embodiments of the present invention a kind of the one of ETC board units method for upgrading software to be realized by DSRC interfaces Individual further aspect, the board units carry out encryption and decryption to upgrading query statement, upgrade command and the upgrading data packet Calculate to verify the upgrading query statement, upgrade command and the Information Security of upgrading data packet.
It is described according to embodiments of the present invention a kind of ETC board units method for upgrading software to be realized again by DSRC interfaces One further aspect, the upgrading control resident element that control in board units is upgraded to flow are positioned over read-only storage chip In.
It is described according to embodiments of the present invention a kind of the another of ETC board units method for upgrading software to be realized by DSRC interfaces One further aspect, the comparative result that the upgrading terminals are fed back to upgrading data packet and the board units carries out plus solution It is close to calculate to verify the Information Security of the upgrading data packet and the comparative result.
It is described according to embodiments of the present invention a kind of the another of ETC board units method for upgrading software to be realized by DSRC interfaces One further aspect, the upgrading terminals obtain upgrading data packet and encryption and decryption result of calculation with background server.
By the method and system of the embodiment of the present invention, using DSRC interfaces uniformly connecing as board units software upgrading Mouthful, reduce upgrade cost;Updating operation, compatible all board units models are carried out by special DSRC instruction formats;Rise The legitimate verification of level advance driving carrier unit and upgrading terminals equipment, ensures upgrading data and the safety of escalation process.
In the present invention, after upgrading software package is audited by ETC system operator, upgrading terminals or ETC operations are placed in In the background system of business, the key that upgrading checking needs is controlled by ETC system operator, so as to ensure the complete of upgrading data packet Data safety in property, legitimacy and escalation process.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing There is the required accompanying drawing used in technology description to be briefly described.In the accompanying drawings:
Fig. 1 is that the functional module of board units forms schematic diagram;
Fig. 2 is that the functional module of upgrading terminals equipment forms schematic diagram;
Fig. 3 is the flow chart that the upgrading of ETC board units software program safety is realized by DSRC interfaces;
Fig. 4 is that the functional module of another form of upgrading terminals equipment forms schematic diagram;
Fig. 5 show one kind provided in an embodiment of the present invention and realizes ETC board units software upgradings system by DSRC interfaces The structural representation of system;
Fig. 6 show a kind of stream that ETC board units method for upgrading software is realized by DSRC interfaces of the embodiment of the present invention Cheng Tu.
Embodiment
For the purpose, technical scheme and advantage of the embodiment of the present invention are more clearly understood, below in conjunction with the accompanying drawings to this hair Bright embodiment is described in further details.Here, the schematic description and description of the present invention is used to explain the present invention, but simultaneously It is not as a limitation of the invention.
It is illustrated in figure 5 one kind provided in an embodiment of the present invention and ETC board units software upgradings is realized by DSRC interfaces The structural representation of system, including board units 501, upgrading terminals 502;
The upgrading terminals send upgrading query statement by DSRC interfaces to the board units;
The board units are by the board units current version feedback of the information to upgrading terminals;
Whether the upgrading terminals judge the board units by the version information that is fed back described in DSRC interfaces Need to upgrade;
The upgrading terminals decide whether to send upgrade command and upgrading data to the board units according to judged result Bag;
The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces.
Wherein, board units 501 and upgrading terminals 502 two-way first legitimate verification and board units 501 in upgrading Software and hardware version match checking;After being verified, the upgrading data encryption for needing to transmit is sent to vehicle-mounted by upgrading terminals 502 Unit 501;Board units 501 are decrypted after receiving upgrading data, completeness check, and updating operation;Upgrading is completed Afterwards, board units 501 return to updating result to upgrading terminals 502 and confirm to respond.
The functional module of board units shown in Fig. 1 is formed in schematic diagram, wherein memory block 102, and the part includes upgrading Resident element 1021, application program unit 1022 and buffer area 1023 are controlled, wherein,
Upgrading control resident element 1021 is responsible for judging according to upgrade command mode of operation and the work of current vehicle-mounted end member State.If ETC transaction or board units distribution instruction, then give control to application program unit 1022, carry out phase The ETC transaction or board units distribution work answered;If upgrade command, then corresponding updating operation is carried out.Board units During startup, processor accesses upgrading control resident element 1021 and by its assigned operation content first.
Application program unit 1022, it is that board units carry out ETC transaction and the critical component of other non-cash transactions, program Upgrading mainly upgrades to the application program in application program unit;
Buffer area 1023, it is the data buffer storage space of board units region of memory, for storing the upgrading data received Bag or caching other application data.
The upgrading control resident element 1021 of board units, application program unit 1022 and buffer area 1023 can be placed in In same memory chip, or upgrading control resident element 1021 is individually placed in ROM chip.Upgrading control is stayed Unit 1021 is stayed once writing board units, does not allow to change using solidification as read-only zones;The region of application program unit 1022 It is that control is read-write, buffer area 1023 is read-write region.
The secure access module 104 of board units is made up of independent chip, is transported when board units are installed and issued by ETC Battalion business writes vehicle information data and secure key data, the module are also referred to as ESAM (Embedded Security Access Module, abbreviation security module) module, there is key data and is responsible for encryption and decryption calculating.
The functional module of upgrading terminals equipment shown in Fig. 2 is formed in schematic diagram, including processor 201, memory block 202, DSRC modules 203, wherein secure access module 204, memory block 202, the part include upgrading control unit 2021, realize application The control flow of program upgrade operations, including the production of the two-way legitimate verification of upgrading terminals equipment and board units, board units Product model and software and hardware version confirm, the upgrading function such as data encryption and transmission;Data storage area 2022, it is to be upgraded for storing Packet is data cached with other.
PSAM cards are inserted in secure access module 204, PSAM cards remain with root key data, can be to the vehicle-mounted of different model Unit carries out encryption and decryption calculating.
It is illustrated in figure 6 that the embodiment of the present invention is a kind of to realize ETC board units method for upgrading software by DSRC interfaces Flow chart.
Including step 601, upgrading terminals send upgrading query statement by DSRC interfaces to board units.
Step 602, the board units by the board units current version feedback of the information to upgrading terminals.
Step 603, the upgrading terminals are by the version information that is fed back described in DSRC interfaces, and judge described vehicle-mounted Whether unit, which needs, upgrades.
Step 604, the upgrading terminals according to judged result decide whether to the board units send upgrade command and Upgrading data packet.
Step 605, the board units carry out software by upgrade command and upgrading data packet described in DSRC interfaces Upgrading.
Fig. 3 gives the flow chart that the upgrading of ETC board units software program safety is realized by DSRC interfaces, and step is such as Under:
Step 300, upgrade data to load.Upgrading data packet is supplied to ETC system operator by board units equipment vendor, Packet to be upgraded is stored in the data storage area of upgrading terminals equipment by ETC system operator, needs what is upgraded per a The corresponding upgrading data packet of board units model;
Step 301, upgrading terminals send the downlink command for waking up board units.The instruction format and ETC tracks trackside list Member or issuing equipment wake up wake-up signal BST (Beacon Service Table, beacon service table) form of board units Unanimously;
Step 302, board units return to the relevant information of itself, are VST (Vehicle Service in DSRC agreements Table, vehicle service table), key message (such as board units contract sequence numbers, physically of board units should be included in VST The information such as location, issuing date);
Step 303, upgrading terminals send upgrading query statement to board units.
Upgrading terminals send upgrading query statement to board units, after board units receive upgrade command, return to software version Sheet and hardware revision information.Upgrading terminals equipment returns to board units product type and software and hardware version, and step 302 Whether the contract sequence number of the board units in VST judges its production batch and needs to upgrade.If necessary to upgrade, then enter step Rapid 304 are upgraded;Otherwise enter step 310, discharge communication link, board units enter resting state;
Step 304, upgrading terminals equipment and board units carry out two-way legitimate verification.
Upgrading terminals send the data randomly generated to board units, and board units return to the unique of response after being encrypted to it Encryption data, such as the random data is encrypted by the sequence number of car-mounted terminal, upgrading terminals are according to board units Sequence number information it is encrypted checking, after being verified, complete upgrading terminals equipment to the unidirectional legal of board units Property checking;Then, board units return to random number to upgrading terminals, and board units are handed down to after upgrading terminals encryption, such as logical Random number is encrypted the sequence number for crossing upgrading terminals, and board units are by the sequence number of the upgrading terminals to described random Checking is encrypted in data, after being verified, completes legitimate verification of the board units to upgrading terminals equipment.
For two-way legitimate verification by rear, upgrading terminals equipment enters step 305, carries out upgrading subsequent operation;Otherwise enter Enter step 310, discharge communication link, board units enter resting state;
Step 305, data transfer is upgraded.Upgrading data packet gives vehicle-mounted list by one or more of DSRC burst data transmissions Member, each DSRC transmission carry out frame completeness check, and verification can use CRC (Cyclic Redundancy Check, circulation Redundancy check code) verification.After frame DSRC data transfers, board units all return to the up responsive data frame finished receiving, such as A certain frame data fail to receive correctly among fruit, then return to the uplink data frames for receiving mistake, upgrading terminals are retransmitted descending again Data frame, until all data are all transmitted.
The data of upgrading data packet can be plaintext transmission, or encrypted transmission, and transmission side is specified by upgrading terminals equipment Formula.If transmitting upgrading data packet using ciphertext, there are two kinds of optional modes:
Cipher mode 1:The key of data encrypting and deciphering can use the ETC being pre-stored in the secure access module of board units should Other keys such as application authorization key etc. is formulated with encryption key or by upgrading terminals equipment.The key data is pacified in board units ETC security modules are had been written into during dress distribution, can be used by special instruction;
Cipher mode 2:Every time during upgrading, encryption key is produced temporarily by upgrading terminals, before upgrading data packet is transmitted, is led to Cross special DSRC instruction and be handed down to board units, the upgrading resident control program of board units preserve and received packet it After be decrypted.
It can be plaintext that board units equipment vendor, which is supplied to the upgrading data packet of ETC system operator, can also be by vehicle-mounted Unit business is supplied to ETC operators after carrying out secondary encryption.
Step 306, upgrading data packet integrity verification.After upgrading data are transmitted, the upgrading control of board units is stayed Stay program unit to carry out integrity verification to the data of the upgrading data packet in buffer area, it is correct that checking is returned after being verified Information.
Step 307, upgrade applications.The upgrading of board units controls TSR unit by the ROMPaq of buffer area Bag is upgraded, and upgrading has two ways:Program substitute mode and program change method.
Program substitute mode is that upgrading data packet program is replaced into original erasing application area, original application program No longer exist.
Program change method is that the data of the upgrading data packet of data buffer area are put into the another of application program storage region One memory space, and by ETC trading functions by the application program controlling upgraded, original application program is as back-up application journey Sequence, when being to upgrade failure the advantages of this method, original application program can be switched to and carry out ETC transaction, ensure product Reliability.
Step 308, updating result responds.Board units return to updating result response to upgrading terminals equipment, if upgrading Success, then into step 310, communication link is discharged, board units enter resting state;Else if upgrading failure, then vehicle-mounted Unit returns to the type information of upgrading failure, and such as data packet length is not inconsistent, decrypts failure or upgrading error, into step 309, determine to upgrade again by upgrading terminals equipment and be also off upgrading.
Step 309, upgrading terminals subsequent treatment.The Fail Type information that upgrading terminals equipment returns according to board units, Decision upgrades again to be also off upgrading.If it is determined that stopping upgrading, then into step 310, communication link, record upgrading are discharged Information, board units enter resting state;If it is determined that upgrading again, then into step 301, upgrade again, repeatedly upgrading is lost After losing, multiple failure information will be recorded and stop upgrading.
Step 310, upgrading terminals equipment issues release link instructions, and upgrading terminates.
Fig. 4 provide the present invention another upgrading terminals apparatus-form, in Fig. 4, upgrading data packet and safety calculate by ETC system backstage provides, and upgrading terminals equipment only provides transmission channel, the data received by wireless communication module are passed through DSRC interfaces are sent to board units, and the integrity verification and encryption and decryption of data are between ETC background systems and car-mounted terminal Complete.Fig. 4 upgrading terminals equipment can use independent special equipment, or by the way of smart mobile phone adds DSRC modules, The latter is used as by the application program in smart mobile phone upgrades control unit, after the wireless communication module and ETC system of smart mobile phone Platform communication obtains upgrading data, can also realize processor, memory block by miscellaneous equipment in other embodiments (including wherein Data upgrading control unit and data storage area) and wireless communication unit effect, such as tablet personal computer or with communicate work( Can the equipment such as PDA, by USB, either micro USB interfaces or bluetooth approach are connected with DSRC modules and realize the upgrading The function of terminal.It is identical with Fig. 3 to upgrade flow, will not be repeated here.
For the implementation of the clearer description present invention, two embodiments of the invention are given below.First reality The upgrading terminals equipment built-in security module of example is applied, structure is as shown in Fig. 2 data transfer uses clear-text way.Second implementation The upgrading terminals equipment of example is by the way of smart mobile phone adds DSRC modules, and upgrading data are provided by ETC background systems, and use is bright The mode of text plus identifying code transmits upgrading data.
Embodiment 1:
Step 300, upgrade data to load.Upgrading data packet is pre-stored in the memory block of upgrading terminals equipment.
Step 301, upgrading terminals equipment sends the descending DSRC instructions of upgrading, and instruction format is BST signals.
Step 302, board units return to vehicle service table signal (VST), and the key of board units should be included in VST instructions Information (such as board units contract sequence number, physical address, issuing date).
Step 303, upgrading terminals send upgrading query statement and used to board units, the instruction Transferchannel.rq instruction formats, after board units receive upgrade command, return to Transferchannel.rs responses.
TransferChannel.rq data frame formats and its implication example such as following table:
In upper table, " 00D6810004 " is the instruction for reading model and version information." 0102 " is software version to be upgraded This information, " 0100 " are hardware revision information.
Board units contrast to software version to be upgraded and the software version of itself, if version to be upgraded is It is newest, then the reply that can upgrade is returned to, the TransferChannel.rs data frame formats and its implication example of return are as follows Table:
In upper table, the current version of board units is " 0100 ", and version to be upgraded is newer, can upgrade, therefore is returned The information of " 9000 ".If version to be downloaded is not newest, represent that board units are promoted, it is not necessary to upgrade again, return information For " 6985 ".
Or upgrading terminals can according to information such as board units product type, software version and the hardware versions received, Judge whether current version needs to upgrade, if necessary to upgrade, then verified into step 304;Otherwise step 310 is entered, Communication link is discharged, board units enter resting state;
Step 304, upgrading terminals equipment and board units carry out two-way legitimate verification.
Checking instruction is instructed using getSecure.rq and TransferChannel.rq.Upgrading terminals equipment exists Checking random number (RandRSUForAuthen) is issued in getSecure.rq instructions and carries out safety to board units, board units Return result of calculation (i.e. authentication code Authenticator) is instructed to give upgrading terminals by getSecure.rs after calculating, it is vehicle-mounted Unit returns to the random number of 8 bytes to upgrading terminals simultaneously.After upgrading terminals carry out checking calculating to the authentication code of return, such as Fruit is correct, then completes unidirectional legitimate verification of the upgrading terminals to board units;Then, upgrading terminals return to board units 8 byte random numbers be encrypted after board units are handed down to by TransferChannel.rq instructions, board units checking By rear, completion board units return to TransferChannel.rs responses to the legitimate verification of upgrading terminals.Board units Data verification calculated by ESAM modules, the data verification of upgrading terminals equipment is calculated by PSAM modules.
For two-way legitimate verification by rear, upgrading terminals equipment enters step 305, carries out upgrading subsequent operation;Otherwise enter Enter step 310, discharge communication link, board units enter resting state;
Step 305, data transfer is upgraded.Upgrading data packet is instructed by one or more of TransferChannel.rq Board units are transferred to, existing DSRC data frame transfers use CRC check, and check code is 2 bytes.Passed per frame DSRC data After defeated, board units will all receive and verification situation returns to upgrading terminals by TransferChannel.rs data frames.Such as A certain frame data fail to receive correctly among fruit, then board units, which return, receives error message, and upgrading terminals are retransmitted descending again Data frame, until all data are all transmitted.
In the present embodiment, the data of upgrading data packet use plaintext transmission mode.Board units business is supplied to ETC system to transport Whether the upgrading data packet of battalion business carries out secondary encryption, does not influence to upgrade the validity of flow.If board units equipment vendor is recognized To be necessary to protect its to upgrade data, the then built-in secondary encryption key when board units dispatch from the factory, for entering to upgrading data packet Row decryption.
Upgrade the TransferChannel.rq frame formats and its implication example such as following table of data transfer:
In upper table, " 00D6810120 " is upgrading transmission instruction, and " 20 " represent the follow-up upgrading data of this DSRC data frames Length, unit are byte.
After board units finish receiving, corresponding data frame, the TransferChannel.rs data frame formats of return are returned And its implication example such as following table:
In upper table, board units are completed to return to " 9000 " after receiving, and " 6985 " are returned if reception failure, if its He then returns to other numerical value at mistake.
Step 306, upgrading data packet integrity verification.After upgrading data are transmitted, upgrading terminals send data inclusion Beam TransferChannel.rq instruction, the data frame packet containing upgrading data end command, upgrading data packet length information, with And the CRC check code of upgrading data packet.After board units receive, it upgrades control TSR to the upgrading data in buffer area Packet length and CRC check code carry out integrity verification, are returned after being verified and verify correct information, authentication failed is then returned and tested Demonstrate,prove failure information.If board units authentication failed, upgrading data are transmitted again into step 305, if accumulative 3 transmission Failure, then stop upgrading, into step 310, upgrading terminals man-machine interface shows corresponding information.
The TransferChannel.rq frame formats and its implication example such as following table of upgrading data packet integrity verification:
In upper table, " 00B08101 " is the instruction of upgrading data packet integrity verification, 6, the end byte representation of this instruction this The packet data length of upgrading, unit are byte.
After board units finish receiving, calculate and compare the data packet length of upgrading, the TransferChannel.rs of return Data frame format and its implication example such as following table:
In upper table, data packet length and instruction that board units receive issue it is identical then return to " 9000 ", otherwise return Return other numerical value.
Step 307, upgrade applications.The upgrading of board units controls TSR by the ROMPaq of data buffer area Bag is upgraded.
In the present embodiment, board units are upgraded using program substitute mode, and original application program is deleted, and opens With new ROMPaq.
Step 308, updating result responds.Board units return to updating result response to upgrading terminals, if upgraded successfully, Then enter step 310 after upgrading terminals record upgrade information, discharge communication link, board units enter resting state;Otherwise such as The type information of fruit upgrading failure, then board units return upgrading failure, as data packet length is not inconsistent, decrypts failure or risen Level error etc., into step 309, determine to upgrade again by upgrading terminals equipment and be also off upgrading.
Step 309, upgrading terminals subsequent treatment.The Fail Type information that upgrading terminals return according to board units, determine Upgrade again and be also off upgrading.If it is determined that stopping upgrading, then into step 310, communication link is discharged, board units enter Resting state;Otherwise, if it is determined that upgrading again, then into step 301, upgrade again, add up after 3 upgrading failures, will Stop upgrading, upgrading terminals preserve upgrading record, and show corresponding information in its man-machine interface.
Step 310, upgrading terminals issue release link instructions (Event-Report), this sign off, board units Into resting state.
Embodiment 2:
Step 300, upgrade data to load.Upgrading data packet is pre-stored in ETC system background server, the upgrading data packet by The board units manufacturer of respective model is supplied to ETC system operator.
Step 301, in the present embodiment, upgrading terminals are made up of smart mobile phone and DSRC modules, the application on smart mobile phone Program of the program as control upgrading flow, ETC system background server is connected after startup, and BST signals are sent by DSRC To board units to be upgraded.Performing the application program of smart mobile phone needs the identity of ETC background system verification operation personnel to believe Breath.
Step 302, board units return to vehicle service table signal (VST), and the key of board units should be included in VST instructions Information (such as board units contract sequence number), smart mobile phone are connect by DSRC interface VST information by radio communication Port transmission is to ETC background systems.
Step 303, the application program in smart mobile phone sends upgrading query statement and used to board units, the instruction Transferchannel.rq instruction formats, after board units receive upgrade command, return to Transferchannel.rs responses.
In the present embodiment, product type, software version and the hardware version of all board units, upgrade record etc. by ETC Background system records.The product software and hardware version information that board units return is transmitted to ETC background systems, ETC by smart mobile phone Background system judges whether to need to upgrade according to the contract sequence numbers of board units, and its distribution and upgrading record, if desired Upgrading, then upgraded into step 305;Otherwise ETC background systems send release link by smart mobile phone to board units Instruction, into step 310, stop upgrading, board units enter resting state.
Director data frame format and embodiment 1 in the present embodiment is identical.
Step 304, two-way legitimate verification.
In the present embodiment, smart mobile phone is as transmission channel, and two-way legitimate verification is in ETC background systems and board units Between carry out.ETC background systems produce certification random number (RandRSUForAuthen), smart mobile phone receive after by DSRC moulds Block is handed down to board units in getSecure.rq instructions, and board units are referred to after carrying out safe calculating by getSecure.rs Order returns to result of calculation (i.e. authentication code Authenticator) and gives smart mobile phone, and smart mobile phone relays to ETC background systems, Board units return to the random number of 8 bytes simultaneously, and ETC background systems are transferred to through smart mobile phone.ETC background systems are to return After authentication code carries out checking calculating, if correctly, completing ETC background systems and being tested to the unidirectional legitimacy of board units Card;Then, the 8 byte random numbers that ETC background systems return to board units pass through after being encrypted through smart mobile phone TransferChannel.rq instructions are handed down to board units, after board units are verified, complete board units to ETC backstages The legitimate verification of system, return to TransferChannel.rs responses.The data verification of board units is calculated by ESAM modules, The encryption and decryption of ETC background systems is calculated by encryption equipment.
For two-way legitimate verification by rear, upgrading terminals equipment enters step 305, carries out upgrading subsequent operation;Otherwise test Card unsuccessfully stops upgrading, and into step 310, smart mobile phone sends release link instructions to board units, and board units, which enter, stops Dormancy state;
Step 305, data transfer is upgraded.Upgrading data packet is by one or more through smart mobile phone by ETC background systems Bar TransferChannel.rq instructions are transferred to board units, and existing DSRC transmission uses CRC check, check code 2 Byte.After frame DSRC data transfers, board units will all receive and verification situation passes through TransferChannel.rs data Frame returns to smart mobile phone.The DSRC data frames that smart mobile phone retains current transmission are used as error retransmission, current DSRC data frames It is correctly received, then smart mobile phone no longer preserves current DSRC data frames;Else if current data frame fails to receive correctly, then Board units, which return, receives error message, and smart mobile phone retransmits descending DSRC data frames again.
In the present embodiment, the data of upgrading data packet are using the transmission means for adding mac authentication code in plain text, ETC background systems Upgrading data packet is divided into multiple DSRC data frames, is transferred to board units through smart mobile phone, the key of checking uses vehicle-mounted list The ETC application encryption keys of member.It is secondary whether board units equipment vendor is supplied to the upgrading data packet of ETC system operator to carry out Encryption, do not influence to upgrade the validity of flow.If board units equipment vendor feels the need to protect it to upgrade data, in car Built-in secondary encryption key when carrier unit dispatches from the factory, for upgrading data packet to be decrypted.
Upgrade the TransferChannel.rq frame formats and its implication example such as following table of data transfer:
In upper table, " 04D6810124 " is upgrading transmission instruction, and " 24 " represent the follow-up upgrading data of this DSRC data frames Add the length (the 24 of 16 systems represent 36 bytes) of mac authentication code, unit is byte.
After board units finish receiving, verified, and the result is returned, the TransferChannel.rs of return Data frame format and its implication example such as following table:
In upper table, board units are completed to return to " 9000 " after receiving, and " 6985 " are returned if reception failure, if its He then returns to other numerical value at mistake.
Step 306, upgrading data packet integrity verification.After upgrading data are transmitted, ETC background systems send packet End TransferChannel.rq instruction, the data frame packet containing upgrading data end command, upgrading data packet length information, And the CRC check code of upgrading data packet.After board units receive END instruction via smart mobile phone, it upgrades the resident journey of control Upgrading data packet length and CRC check code in ordered pair buffer area carry out integrity verification, and it is correct that checking is returned after being verified Information, authentication failed then returns to authentication failed information.If board units authentication failed, transmitted again into step 305 Upgrade data, fail if adding up 3 transmission, stop upgrading, discharge link, smart mobile phone application journey into step 310 Sequence interface display corresponding information.
The upgrading data packet integrity verification instruction of the present embodiment and returned data frame format are same as Example 1.
Step 307, upgrade applications.The upgrading of board units controls TSR by the ROMPaq of data buffer area Bag is upgraded.
In the present embodiment, board units are upgraded using program change method, at the same retain original application program and Newly downloaded ROMPaq, new ROMPaq packet are stored in car after the ETC application encryption key decryptions of board units In the memory block of carrier unit, and it is identified as current application program.
Step 308, updating result responds.Board units return to updating result response to smart mobile phone, if upgraded successfully, Then smart mobile phone records upgrade information and enters step 310 after being uploaded to ETC background systems, discharges communication link, board units Into resting state;Else if the type information of upgrading failure, then board units return upgrading failure, such as data packet length not Symbol, decryption failure or upgrading error etc., into step 309, determine to upgrade again by ETC background systems and be also off upgrading.
Step 309, upgrading terminals subsequent treatment.In the present embodiment, failure class that smart mobile phone returns according to board units Type information, decision upgrades again to be also off upgrading.If it is determined that stopping upgrading, then into step 310, communication link is discharged, Upgrade information is recorded, board units enter resting state;If it is determined that upgrade again, then into step 301, smart mobile phone to ETC background system applications are upgraded again, add up 3 times upgrading failure after, smart mobile phone record upgrading failure information and on ETC background systems are reached, stop this upgrading, the man-machine interface of smart mobile phone shows corresponding information.
Step 310, upgrading terminals equipment issues release link instructions (Event-Report), and release is logical with board units Letter connection, board units enter resting state.
In the embodiment of the present invention, the data encrypting and deciphering algorithm for legitimate verification is except ETC system national Specification DES/3DES algorithms outside, the conventional AES such as AES, MD5 and SHA1 can also be used.
By the method and system of the embodiment of the present invention, using DSRC interfaces uniformly connecing as board units software upgrading Mouthful, reduce upgrade cost;Updating operation, compatible all board units models are carried out by special DSRC instruction formats;Rise The legitimate verification of level advance driving carrier unit and upgrading terminals, ensures upgrading data and the safety of escalation process.
For explaining in detail for the respective embodiments described above, its purpose is only that to explain to the present invention, in order to be able to The present invention is more fully understood, still, these descriptions can not be particularly with any explanation into being limitation of the present invention, Each feature described in different embodiments can also be mutually combined, so as to form other embodiment, except having Opposite description is specified, these features should be understood to be applied in any one embodiment, and be not limited merely to Described embodiment.

Claims (10)

  1. A kind of 1. system that board units software upgrading is realized by DSRC interfaces, it is characterised in that including, board units, upgrading Terminal;
    The upgrading terminals send upgrading query statement by DSRC interfaces to the board units;
    The board units are by the board units current version feedback of the information to upgrading terminals;
    The upgrading terminals judge whether the board units need by the version information that is fed back described in DSRC interfaces Upgrading;
    If the board units need to upgrade, the upgrading terminals carry out two-way legitimate verification with the board units;
    The upgrading terminals decide whether that sending upgrading to the board units refers to according to the result of the two-way legitimate verification Order and upgrading data packet;
    The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces;
    Wherein, the two-way legitimate verification includes:
    The upgrading terminals send a random data to the board units, after the board units encrypt the random data The upgrading terminals are returned to, the upgrading terminals verify the random data after the encryption;
    The board units send a random data to the upgrading terminals, after the upgrading terminals encrypt the random data The board units are returned to, the board units verify the random data after the encryption.
  2. 2. a kind of system that board units software upgrading is realized by DSRC interfaces according to claim 1, its feature exist In, the board units include processor, memory block, DSRC modules and secure access module, wherein,
    The processor, for carrying out Digital Signal Processing and control;
    The DSRC modules, for carrying out DSRC signal transmitting and receivings;
    The secure access module, for storing key data and carrying out encryption and decryption calculating;
    The memory block, resident element, application program unit and buffer area are controlled comprising upgrading, wherein the upgrading control is resident Unit controls upgrading flow according to upgrade command;The application program unit performs the board units and carries out ETC transaction;It is described Buffer area is used to store the upgrading data packet received.
  3. 3. a kind of system that board units software upgrading is realized by DSRC interfaces according to claim 2, its feature exist In it is read-only storage chip that the upgrading, which controls resident element,.
  4. 4. a kind of system that board units software upgrading is realized by DSRC interfaces according to claim 1, its feature exist In, the upgrading terminals include, processor, memory block, DSRC modules and secure access module, wherein,
    The processor, for Digital Signal Processing and control;
    The DSRC modules, for carrying out DSRC signal transmitting and receivings;
    The secure access module, for storing key data and carrying out key data calculating;
    The memory block further comprises, upgrades control unit, the control for updating operation;Data storage area, for storing Upgrading data packet.
  5. 5. a kind of system that board units software upgrading is realized by DSRC interfaces according to claim 1, its feature exist In, the upgrading terminals include, processor, memory block, DSRC modules and wireless communication module, wherein,
    The processor, for Digital Signal Processing and control;
    The DSRC modules, for carrying out DSRC signal transmitting and receivings;
    The wireless communication module, for being communicated with background server, obtain upgrading data packet and encryption and decryption result of calculation;
    The memory block further comprises, upgrades control unit, the control for updating operation;Data storage area, for storing Upgrading data packet.
  6. A kind of 6. method that board units software upgrading is realized by DSRC interfaces, it is characterised in that
    Upgrading terminals send upgrading query statement by DSRC interfaces to board units;
    The board units are by the board units current version feedback of the information to upgrading terminals;
    The upgrading terminals judge whether the board units need by the version information that is fed back described in DSRC interfaces Upgrading;
    If the board units need to upgrade, the upgrading terminals carry out two-way legitimate verification with the board units;
    The upgrading terminals decide whether that sending upgrading to the board units refers to according to the result of the two-way legitimate verification Order and upgrading data packet;
    The board units carry out software upgrading by upgrade command and upgrading data packet described in DSRC interfaces;
    Wherein, the two-way legitimate verification includes:
    The upgrading terminals send a random data to the board units, after the board units encrypt the random data The upgrading terminals are returned to, the upgrading terminals verify the random data after the encryption;
    The board units send a random data to the upgrading terminals, after the upgrading terminals encrypt the random data The board units are returned to, the board units verify the random data after the encryption.
  7. 7. a kind of method that board units software upgrading is realized by DSRC interfaces according to claim 6, its feature exist Established in, board units by the key that is preset in secure access module or in the board units and upgrading terminals The key received during connection carries out encryption and decryption to upgrading query statement, upgrade command and the upgrading data packet and calculated to verify State the Information Security of upgrading query statement, upgrade command and upgrading data packet.
  8. 8. a kind of method that board units software upgrading is realized by DSRC interfaces according to claim 7, its feature exist In the upgrading control resident element that control in board units is upgraded to flow is positioned in read-only storage chip.
  9. 9. a kind of method that board units software upgrading is realized by DSRC interfaces according to claim 6, its feature exist In the comparative result that the upgrading terminals are fed back to upgrading data packet and the board units carries out encryption and decryption and calculated to verify State upgrading data packet and the Information Security of the comparative result.
  10. 10. a kind of method that board units software upgrading is realized by DSRC interfaces according to claim 6, its feature exist In the upgrading terminals obtain upgrading data packet and encryption and decryption result of calculation with background server.
CN201410742011.7A 2014-12-05 2014-12-05 A kind of system and method that board units software upgrading is realized by DSRC interfaces Active CN104468784B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410742011.7A CN104468784B (en) 2014-12-05 2014-12-05 A kind of system and method that board units software upgrading is realized by DSRC interfaces

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410742011.7A CN104468784B (en) 2014-12-05 2014-12-05 A kind of system and method that board units software upgrading is realized by DSRC interfaces

Publications (2)

Publication Number Publication Date
CN104468784A CN104468784A (en) 2015-03-25
CN104468784B true CN104468784B (en) 2018-01-02

Family

ID=52914136

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410742011.7A Active CN104468784B (en) 2014-12-05 2014-12-05 A kind of system and method that board units software upgrading is realized by DSRC interfaces

Country Status (1)

Country Link
CN (1) CN104468784B (en)

Families Citing this family (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104991804A (en) * 2015-07-17 2015-10-21 深圳市凯立德科技股份有限公司 Updating method and equipment of drive recorder
CN106411967B (en) * 2015-07-27 2019-08-30 深圳市赛格导航科技股份有限公司 Automobile electronics remote upgrade method and system
CN105118100B (en) * 2015-07-31 2018-01-16 北京万集科技股份有限公司 Vehicle carried electronic label method for updating program, mobile terminal and program updating system
CN105182941B (en) * 2015-09-21 2018-11-02 深圳市家信信息科技开发有限公司 A kind of intelligent bicycle vehicle body device detection system based on bus
CN105867961A (en) * 2015-12-07 2016-08-17 乐视移动智能信息技术(北京)有限公司 System upgrading and degrading method and device
CN105589719B (en) * 2015-12-17 2019-12-13 广州汽车集团股份有限公司 system for remotely upgrading whole vehicle-mounted controller software and upgrading method
CN106934868A (en) * 2015-12-31 2017-07-07 航天信息股份有限公司 ETC mobile units and upgrade method, the equipment and control method of control ETC mobile unit upgradings
US10235154B2 (en) * 2016-03-09 2019-03-19 Ford Global Technologies, Llc Over-the-air trigger to vehicle interrogator updates
CN105978975A (en) * 2016-05-12 2016-09-28 广州橙行智动汽车科技有限公司 Upgrading method and system for automobile function module
CN109002304A (en) * 2017-05-31 2018-12-14 北京奔驰汽车有限公司 A kind of vehicle centre console software renewing apparatus and its update method
CN107491326A (en) * 2017-07-31 2017-12-19 惠州市德赛西威汽车电子股份有限公司 A kind of vehicle mounted guidance automatic adaptation method for upgrading software
CN107680181B (en) * 2017-09-01 2020-04-07 深圳市金溢科技股份有限公司 Multifunctional intelligent vehicle-mounted unit and control method thereof
CN109542473A (en) * 2017-09-20 2019-03-29 北京聚利科技股份有限公司 The method for updating program of on board unit, device and system
CN107797815A (en) * 2017-10-18 2018-03-13 北京聚利科技股份有限公司 Upgrade method, mobile unit and the updating apparatus of mobile unit
CN107943497B (en) * 2017-11-23 2021-04-02 天津科畅慧通信息技术有限公司 ETC electronic tags bluetooth upgrade management system
CN108733392A (en) * 2018-02-23 2018-11-02 北京是捷科技有限公司 A kind of update method and system of Bluetooth electronic tag program
CN108710495A (en) * 2018-03-29 2018-10-26 北京聚利科技股份有限公司 Electronic tag method for updating program, electronic tag and storage medium
CN112055952A (en) * 2018-04-30 2020-12-08 华为国际有限公司 Vehicle-mounted equipment upgrading method and related equipment
CN110730020B (en) * 2018-07-17 2021-08-13 北京聚利科技有限公司 Communication method, handheld terminal, vehicle-mounted equipment and communication system
CN109525961A (en) * 2018-10-18 2019-03-26 北京长城华冠汽车技术开发有限公司 Vehicle communications device upgrade method, vehicle communications device, mobile terminal
CN111292431A (en) * 2018-12-06 2020-06-16 上海搜林信息技术有限公司 Vehicle-mounted unit operation method and vehicle-mounted unit
CN109375939A (en) * 2018-12-17 2019-02-22 蜂巢(武汉)微系统技术有限公司 A kind of onboard system firmware on line upgrading method
CN109783122A (en) * 2019-01-29 2019-05-21 重庆邮电大学 A kind of software security upgrade method and system based on V2X roadside device
CN112562104A (en) * 2020-11-26 2021-03-26 东南大学 Programmable self-adaptive single-chip vehicle-mounted unit
CN112929041A (en) * 2021-01-12 2021-06-08 北京卓越信通电子股份有限公司 A equipment that is used for highway ETC air interface data to monitor
CN114035830A (en) * 2021-12-22 2022-02-11 深圳市兆珑科技有限公司 Software upgrading method and device and electronic equipment
CN114489738B (en) * 2022-04-01 2022-07-08 广东利通科技投资有限公司 ETC lane computer program upgrading method, device and medium based on big data
CN115426260A (en) * 2022-08-04 2022-12-02 浙江大华技术股份有限公司 Software upgrading system and method
TWI823535B (en) * 2022-08-26 2023-11-21 新唐科技股份有限公司 Over-the-air device and over-the-air method

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102998557A (en) * 2012-11-13 2013-03-27 北京速通科技有限公司 Onboard unit in ETC (electronic toll collection) system, and system and method for testing onboard unit
CN103176821A (en) * 2013-02-28 2013-06-26 北京万集科技股份有限公司 Roadside control device, vehicle electronic tag device and program update method of vehicle electronic tag device
CN203386245U (en) * 2013-05-20 2014-01-08 北京速通科技有限公司 Electronic toll collection (ETC) on board unit on-line issuing system combining mobile terminal
CN103793948A (en) * 2013-02-01 2014-05-14 深圳市金溢科技有限公司 Vehicle terminal, internal interconnection realization method, remote monitoring method and system thereof

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102998557A (en) * 2012-11-13 2013-03-27 北京速通科技有限公司 Onboard unit in ETC (electronic toll collection) system, and system and method for testing onboard unit
CN103793948A (en) * 2013-02-01 2014-05-14 深圳市金溢科技有限公司 Vehicle terminal, internal interconnection realization method, remote monitoring method and system thereof
CN103176821A (en) * 2013-02-28 2013-06-26 北京万集科技股份有限公司 Roadside control device, vehicle electronic tag device and program update method of vehicle electronic tag device
CN203386245U (en) * 2013-05-20 2014-01-08 北京速通科技有限公司 Electronic toll collection (ETC) on board unit on-line issuing system combining mobile terminal

Also Published As

Publication number Publication date
CN104468784A (en) 2015-03-25

Similar Documents

Publication Publication Date Title
CN104468784B (en) A kind of system and method that board units software upgrading is realized by DSRC interfaces
CN100559391C (en) A kind of distributing method of ETC electronic tag
CN203386245U (en) Electronic toll collection (ETC) on board unit on-line issuing system combining mobile terminal
CN104574530B (en) Method and system, mobile terminal and the OBU supplemented with money to OBU by mobile terminal
US11039293B2 (en) Method and devices for transmitting a secured data package to a communication device
CN102333305B (en) Communication equipment, communication means and communication system
US20130344807A1 (en) Communications Devices Comprising NFC Communicators
CN103247085A (en) Front-mounted electronic toll collection (ETC) on board unit online publication system and method
CN105303626A (en) On BoardUnit self-service issuing method and system, and radio networking device for On BoardUnit self-service issuing
US20090055936A1 (en) Method and system for the user-specific initialization of identification devices in the field
CN107026833A (en) Method for authorizing the software upgrading in motor vehicles
CN101819702A (en) Transaction system and method taking mobile telephone as mobile card reader
CN112396712A (en) ETC electronic tag secondary issuing method, system and storage medium
CN102136161A (en) Releasing equipment, system and method for ETC (Electronic Toll Collection) on board unit
CN105118100B (en) Vehicle carried electronic label method for updating program, mobile terminal and program updating system
CN106296839B (en) A kind of safety certifying method and ETC system of anti-lock card
CN101251389B (en) Vehicle mounted terminal for monitoring vehicle , vehicle monitoring system and vehicle monitoring method
EP3238182B1 (en) On-board device for a vehicle
CN203386246U (en) Electronic toll collection (ETC) vehicle-mounted electronic label on-line issuing system
CN205621082U (en) On -vehicle unit secondary of ETC distribution data additional recording system
CN108733392A (en) A kind of update method and system of Bluetooth electronic tag program
JP3509664B2 (en) Automatic toll collection system and vehicle-mounted device for the system
CN112767566B (en) User equipment, method and ETC system for ETC system
US20180037114A1 (en) Smart key devices and methods
JP2003153341A (en) In-vehicle communication terminal, server, and method of registering in-vehicle communication terminal in server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant