Abstract: OTA technology has gradually become a standard part of mass production vehicles, and OTA security is a key link of vehicle information security. Based on the analysis of OTA security risks and countermeasures, an OTA method based on CA and KMS is proposed, which provides security protection from the generation, storage, download and security verification of the upgrade package. This method is verified on some preproduction vehicles, effectively improving the authenticity, integrity and confidentiality protection of the vehicle OTA upgrade package in all aspects.

Key words: Internet of vehicle OTA, digital certificate, symmetrical encryption, digital signature, key management

摘要： 车联网OTA技术已经逐渐成为量产车型的标配，OTA安全是车辆信息安全的关键一环.分析了当前车联网OTA安全风险和应对措施，提出了基于CA和KMS的OTA方法，从升级包的生成、存储、下载和安全验证各环节进行安全保护，并在预量产车型上进行了验证，有效提升了车辆OTA升级包在各环节的真实性、完整性和保密性保护.

关键词: 车联网OTA, 数字证书, 对称加密, 数字签名, 密钥管理