关键词: 车联网OTA, 数字证书, 对称加密, 数字签名, 密钥管理

Abstract: OTA technology has gradually become a standard part of mass production vehicles, and OTA security is a key link of vehicle information security. Based on the analysis of OTA security risks and countermeasures, an OTA method based on CA and KMS is proposed, which provides security protection from the generation, storage, download and security verification of the upgrade package. This method is verified on some preproduction vehicles, effectively improving the authenticity, integrity and confidentiality protection of the vehicle OTA upgrade package in all aspects.

Key words: Internet of vehicle OTA, digital certificate, symmetrical encryption, digital signature, key management