DE102004040683A1 - Prevention of unauthorized replication of update data, especially for a vehicle navigation system by provision of encrypted creation data that must be matched before access to update data is granted - Google Patents

Abstract

Method for preventing unauthorized replication of update data has the following steps: creation of an original file on a memory card (5); opening of the original file and storage of original creation data in encrypted format; checking using the original creation name of the file if the original file is present on the memory card; reading out and decryption of the original creation data from the original file; comparison of the encrypted creation data with the original creation data and; if the two agree carrying out the update using data that are not stored on the card. Independent claims are also included for the following:- (A) a memory card for preventing unauthorized copying of update data and; (B) a device for preventing unauthorized access to update data.

Description

The The present invention relates generally to a method and a Device for protection against unauthorized transmission of update data and more particularly, a method and apparatus for protection unauthorized disclosure of update data of a navigation system.

It is known to be a widespread problem that copyright protection underlying data or navigation data without authorization via the Internet or storage media such as mini discs, CDs or DVDs are distributed.

Therefore it is an object of the present invention to provide a cost effective, simple and possible develop a secure procedure or a cost-effective, simple and possible safe device available to provide, with which an unauthorized passing on of update data and especially update navigation data is prevented.

in the Within the scope of this task, there is a particular object of the present invention Invention in the provision of a method and a device, the or a multiple uploading update data in general and in particular update navigation data to a processing unit only on the same vehicle permitting or distributing the data via the Internet or storage media can be prevented.

Summary the invention

These and further to be taken from the following description tasks are obtained by a method and a device according to claims 1, 7 or 14 solved. About that In addition, these and others will be taken from the description Problems solved by a memory card according to claim 16. Further advantageous embodiments of the invention are set forth in the dependent claims.

Further Features and advantages of the present invention as well as the mode of action various embodiments The present invention will be described below with reference to the following Description and the only figure of the invention understandable which is a schematic block diagram of a presently preferred one Device illustrated. The description and the associated figure serve to that, the principles to explain the invention and to enable a person skilled in the field to to use the invention and by no means, its scope to restrict.

Description of the preferred embodiments

With reference to the 1 For example, the present invention will be illustrated by way of example with reference to a navigation system that can be used, for example, in a vehicle. The navigation system includes a head unit 1 , which includes a processor, the associated fast memory and the operating software (all not shown), a hard disk 2 as a mass storage, a drive 3 for reading CDs, DVDs or the like, and a card reader 4 , The hard disk 2 , the drive 3 and the card reader 4 are well known to the skilled person via respective buses or a common bus with the head unit 1 connected for data transmission.

The card reader 4 is designed to be commercially available memory cards 5 such as compact flash cards, SD cards, memory sticks, PCMCIA hard disks, microdrives, multimedia cards or the like. The memory card 5 is supplied with an update of the navigation system, which may be present on a CD / DVD, with corresponding data and serves as a review medium as explained below.

According to the invention, in a first step, an original file with a specific name is stored directly on the memory card 5 created. The original file can be created on a remote computer or on the head unit 1 themselves, provided they are equipped with appropriate software. The original file will then receive the following information:
a recognition name or file name;
Creation dates (eg creation date and creation time); and
Change data (for example, change date and change time).

Otherwise, according to the invention, there are no further data in the original file of the memory card 5 required.

In a second step are from the original file of the memory card 5 the creation dates (creation date and creation time) are read out, the original file on the memory card 5 is opened and the creation data (creation date and creation time) written in encrypted form in the original file. The encryption and decryption explained below may be performed in accordance with a variety of methods well known to those skilled in the art, which need no further explanation.

Inevitably, the changes will now da The date (date and time of change) of the original file has been changed to a new value, but the original creation dates (creation date and creation time) remain unchanged. This second step can also be done on a remote computer or on the head unit 1 provided that it is equipped with the necessary software. In the event that this second step is only feasible on a remote computer, this step provides an additional security aspect of the present invention, since even unauthorized initial installation of data (in particular navigation data) is prevented if there is only one empty memory card.

If now an update take place, so checks in a third step, the head unit 1 which is to be updated, whether the required original file on the memory card 5 is available.

If the result of the check is positive, in a fourth step, the encrypted creation data (creation date and creation time) of the original file on the memory card 5 read out, which belong to the contents of the original file, and decrypted.

In another, fifth Step is a test, whether the decrypted in the content of the original File containing creation data (creation date and creation time) with the creation data (creation date and creation time) the original one File matches.

If a match is given in the fifth step above, then in a sixth step, a check of the data of the update (for example, of the navigation system), which takes place on one in the drive 3 inserted update CD / DVD can be present.

In a basic embodiment The invention can already after this sixth step, an update respectively. However, the invention provides further advantages, which are given below become apparent if the following steps are performed.

If the result of the test in step six is positive, then the head unit 1 (or another device to be updated) in a seventh step read in the version identifier or version number of the update (eg, the version of the CD / DVD that includes a unique CD / DVD version identifier). In addition, preferably the head unit 1 also contain the identification number of the vehicle. Instead of the identification number of the vehicle, another identification number of any device in which the device to be updated is located can be used.

In a subsequent eighth step, the original file is now saved on the memory card 5 deleted and created a new file. The deletion of the original file is necessary because an overwrite operation would not change the original creation data.

From This new file will now be the new creation data (creation date and creation time) and read out with the previously read Data, namely the unique version identifier of the update and the identification number of the vehicle (or the like), linked and encrypted in the new file written.

Preferably the new file has a new recognition name, which is the already performed Update shows.

The contains new file an encrypted sequence from the creation data (creation date and creation time), the identification number of the vehicle (or the like) and the Version identifier of the update. About that In addition, new creation data (creation date and creation time) and new change data.

For example, in a ninth step, the update can be done from the CD or DVD by updating the data to disk 2 the head unit 1 to be written. The memory card 5 can then be removed.

If an update is to be carried out again at a later date, the new file is checked, with all data encrypted on the memory card 5 including an additional creation data check are available and can be read before a new update and compared. This is achieved according to the invention that always only the same version (version identifier) of the update data on a head unit 1 is played in the same vehicle.

• • Der jeweilige Dateiinhalt enthält ursprüngliche Erstellungsdaten oder auch nach einem Update die neue Kombination aus Erstellungsdaten/Identifikationsnummer des Fahrzeugs/Eindeutiger Version der Update-Daten, die in verschlüsselter Form vorliegen;
• • Unterschiedliche Speicherkarten haben stets unterschiedliche Dateiinhalte, da jeweils die verschlüsselte Erstellungsdaten (Erstellungsdatum und Erstellungsuhrzeit) einen anderen Dateiinhalt ergeben;
• • Werden die Daten der Speicherkarte beispielsweise auf eine Festplatte kopiert oder über das Internet verschickt und auf einen anderen Rechner geladen, erhält die Datei dort neue Erstellungsdaten (Erstellungsdatum und Erstellungsuhrzeit) und daher wird die Überprüfung negativ ausfallen und ein Update verhindert.
• • Wird die ursprüngliche Datei vor dem Update beispielsweise auf eine Festplatte eines Rechners kopiert und nach dem Update wieder zurück auf die Speicherkarte, so ändern sich bei diesem Kopiervorgang die Erstellungsdaten auf einen neuen Wert, da die Datei "neu" auf der Speicherkarte erstellt wird. Deshalb ist auch der vorstehend erläuterte Löschvorgang der ursprünglichen Datei notwendig, da bei einem Überschreibvorgang das ursprüngliche Erstellungsdatum nicht verändert wird. Somit fällt auch in diesem Fall eine Überprüfung negativ aus.
• • Auch die neue Datei nach einem Update besitzt mit den Erstellungsdaten und dem verschlüsselten Inhalt dieselben Sicherheitsmechanismen, da Kopiervorgänge an andere Orte die Erstellungsdaten verändern.

From the foregoing, it will be appreciated that the present invention accomplishes the stated objectives and provides additional security aspects to a navigation system in terms of unauthorized update of navigation data. These safety aspects include the following:

• • The respective file content contains original creation data or even after an update the new combination of creation data / identification number of the vehicle / unique version of the update data, which are available in encrypted form;
• • Different memory cards always have different file contents because the ver create data created (creation date and creation time) results in a different file content;
• • If, for example, the data on the memory card is copied to a hard disk or sent via the Internet and downloaded to another computer, the file will receive new creation data (creation date and creation time) and therefore the check will be negative and an update will be prevented.
• • If, for example, the original file is copied to a hard disk of a computer before updating and then back to the memory card after the update, the creation data will change to a new value during this copying process as the file "new" will be created on the memory card. Therefore, the above-explained deletion process of the original file is necessary because in an overwrite operation, the original creation date is not changed. Thus, even in this case, a review is negative.
• • The new file after an update also has the same security mechanisms with the creation data and the encrypted content as copying to other locations changes the creation data.

If Features in the claims are provided with reference numerals, these reference numerals are only for better understanding the claims available. Accordingly, such reference numerals are not limited the scope of such elements, the only by way of example such reference numerals are indicated.

Claims (16)

A method of protecting against unauthorized disclosure of update data, comprising the steps of: a) creating an original file on a memory card ( 5 ), the file being designated by an original recognition name and creation data; b) opening the original file and storing the original creation data in encrypted form so that the encrypted original creation data is contained in the contents of the original file on the memory card ( 5 ) are present; c) checking by the original recognition name before performing an update whether the original file on the memory card ( 5 ) is present; d) the reading and decrypting of the encrypted original creation data in the content of the original file on the memory card ( 5 ); e) comparing the decrypted creation data with the original creation data of the original file; and f) performing an update based on update data not stored on the memory card ( 5 ) are present. The method of claim 1, further comprising, after the step of comparing, the steps of: g) reading the version identifier or version number of the update; h) reading out an identification number of the device to be updated or a device containing the device; i) deleting the original file; j) creating a new file on the memory card ( 5 ), the file being designated by a new recognition name and creation data; and k) opening the new file and storing the new creation data, as well as the version identifier and the identification number in encrypted form, such that the encrypted new creation data, the version identifier and the identification number in the content of the new file on the memory card ( 5 ) are present. The method of claim 2, wherein the device is a head unit ( 1 ) and the device is a vehicle. Method according to one or more of claims 1-3, wherein the build data is a build date and build time include. Method according to one or more of claims 1-4, wherein the update data are present on a CD / DVD and / or wherein the memory card ( 5 ) consists of a compact flash card, SD card, memory stick, PCMCIA hard disk, microdrive or multimedia card. Method according to one or more of claims 1-5, wherein the update data includes navigation data. Device for protection against unauthorized transmission of update data, which is a central processing unit ( 1 ), a hard disk ( 2 ), a drive ( 3 ) for reading CDs, DVDs or the like, and a card reader ( 4 ) for recording a memory card ( 5 ), which are communicatively connected to each other, the apparatus further comprising: a) means for creating an original file on the memory card ( 5 ), the file being designated by an original recognition name and creation data; b) a means to open the original file and for storing the original creation data in encrypted form so that the encrypted original creation data is contained in the content of the original file on the memory card ( 5 ) are present; c) means for checking by the original recognition name, before performing an update, whether the original file on the memory card ( 5 ) is present; d) means for reading out and decrypting the encrypted original creation data in the content of the original file on the memory card ( 5 ); e) means for comparing the decrypted creation data with the original creation data of the original file; and f) means for updating using update data not stored on the memory card ( 5 ) are present. The apparatus of claim 7, further comprising: g) means for reading the version identifier or version number of the update; h) means for reading out an identification number of the central unit ( 1 ) to be updated, or the device containing the central processing unit ( 1 ) contains; i) means for deleting the original file; j) means for creating a new file on the memory card ( 5 ), the file being designated by a new recognition name and creation data; and k) means for opening the new file and storing the new creation data, as well as the version identifier and the identification number in encrypted form so that the encrypted new creation data, the version identifier and the identification number in the content of the new file on the memory card ( 5 ) are present. Apparatus according to claim 7 or 8, wherein the central unit comprises a head unit ( 1 ) and the device is a vehicle. Device according to one or more of claims 7-9, wherein the creation dates are a creation date and a creation time include. Device according to one or more of claims 7-10, wherein the update data are present on a CD / DVD and / or wherein the memory card ( 5 ) consists of a compact flash card, SD card, memory stick, PCMCIA hard disk, microdrive or multimedia card. Device according to one or more of claims 7-11, wherein the update data includes navigation data. Device for protecting unauthorized transmission of update data, which is a central processing unit ( 1 ), a hard disk ( 2 ), a drive ( 3 ) for reading CDs, DVDs or the like, and a card reader ( 4 ) for recording a memory card ( 5 ), whereby the memory card ( 5 ) contains a file designated by a recognition name and creation data and including the creation data in an encrypted form. The apparatus of claim 13, wherein the file further comprises a version identifier of the update and an identification number of a central processing unit ( 1 ) which is to be updated, or the device which is the central unit ( 1 ). Memory card for protection against unauthorized transmission of update data, whereby the memory card ( 5 ) contains a file designated by a recognition name and creation data and including the creation data in an encrypted form. A memory card according to claim 15, wherein the file furthermore a version identifier of the update and the identification number a head unit to be updated, or a device that supports the Central unit includes.