FIRMWARE UPGRADE METHOD AND SYSTEM THEREOF

• US 20150180840A1
• Filed: 11/25/2014
• Published: 06/25/2015
• Est. Priority Date: 12/24/2013
• Status: Abandoned Application

• Current Assignee: Hyundai Motor Company (Hyundai Motor Group)
• Original Assignee: Hyundai Motor Company (Hyundai Motor Group)
• Inventors: Lee, Chung Hi, JUNG, Ho Jin, Ahn, Hyun Soo
• Application Number:
  US14/553,645
• Publication Number:
  US 20150180840A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A firmware transmission method through which a server transmits firmware, includes generating a secret key using a designated secret key generation function, encrypting original firmware using the secret key, encrypting the secret key using a public key of a reception terminal which is stored in advance, and generating a hash value by inputting the original firmware to a designated hash function, and encrypting the generated hash value using a private key of the server which is stored in advance, wherein firmware data including the encrypted original firmware, the encrypted secret key, and the encrypted hash value is transmitted to the reception terminal. Therefore, the firmware transmission method provides safe firmware upgrade.

Claims

1. A firmware transmission method through which a server transmits firmware, comprising:

generating a secret key using a designated secret key generation function;

encrypting original firmware using the secret key;

encrypting the secret key using a public key of a reception terminal that is stored in advance; and

generating a hash value by inputting the original firmware to a designated hash function, and encrypting the generated hash value using a private key of the server that is stored in advance,

wherein firmware data includes the encrypted original firmware, the encrypted secret key, and the encrypted hash value is transmitted to the reception terminal.

2. The firmware transmission method according to claim 1, wherein the secret key is generated by inputting current time information to the secret key generation function.

3. The firmware transmission method according to claim 1, wherein the reception terminal is an electronic control unit (ECU) in a vehicle.

4. The firmware transmission method according to claim 3, wherein the firmware data further includes an ECU identifier to inherently identify the reception terminal.

5. The firmware transmission method according to claim 1, wherein the firmware data is transmitted to the reception terminal via a diagnostic apparatus and a gateway for vehicles.

6. A firmware data processing method through which an electronic control unit (ECU) for vehicles processes firmware data transmitted by a server, comprising:

receiving the firmware data including encrypted firmware, an encrypted secret key, and an encrypted hash value;

decrypting the encrypted secret key using a private key of the ECU, which is stored in advance;

decrypting the encrypted firmware using the decrypted secret key;

acquiring a first hash value by inputting the decrypted firmware to a designated hash function;

decrypting the encrypted hash value using a public key of the server which is stored in advance; and

determining whether or not the first hash value and the decrypted hash value are equal,

wherein, upon judging that the first hash value and the decrypted hash value are equal, designated re-programming is performed using the decrypted firmware.

7. The firmware data processing method according to claim 6, wherein the encrypted firmware is information acquired by encrypting the decrypted firmware using the decrypted secret key.

8. The firmware data processing method according to claim 6, wherein the encrypted secret key is information encrypted using a public key of the ECU.

9. The firmware data processing method according to claim 6, wherein the encrypted hash value is information encrypted using a private key of the server.

10. The firmware data processing method according to claim 6, wherein the decrypted secret key is generated by the server and is generated by inputting current time information as a seed value to a designated secret key generation function.

11. A system providing firmware upgrade comprising:

a diagnostic apparatus;

a server transmitting firmware data including encrypted firmware, an encrypted secret key, and an encrypted hash value to the diagnostic apparatus according to a firmware transmission request from the diagnostic apparatus; and

an electronic control unit (ECU), when the ECU receives the firmware data, decrypting the encrypted secret key using a private key of the ECU, decrypting the encrypted firmware using the decrypted secret key, and performing re-programming using the decrypted firmware if a first hash value acquired by inputting the decrypted firmware to a designated hash function and a second hash value acquired by decrypting the encrypted hash value using a public key of the server which is stored in advance are the same.

12. The system providing firmware upgrade of claim 11, wherein the server providing firmware comprises:

a controller;

a firmware database in which original firmware is stored;

a secret key generation module generating a secret key using a designated secret key generation function;

a firmware encryption module encrypting the original firmware using the secret key;

a secret key encryption module encrypting the secret key using a reception terminal public key which is stored in advance;

a hash value encryption module generating a hash value by inputting the original firmware to a designated hash function and encrypting the generated hash value using a private key of the server; and

a communication unit transmitting firmware data including the encrypted firmware, the encrypted secret key, and the encrypted hash value to an external device according to a control signal from the controller.

13. The server providing firmware of claim 12, further comprising:

a security key storage module for storing security keys maintained in the server, wherein the security key storage module is set such that only a user authenticated through a designated user authentication procedure can access the security key storage module.

14. The system providing firmware upgrade of claim 11, wherein the electronic control unit (ECU) which performs firmware upgrade by interlocking with the server, comprises:

a controller;

a communication unit receiving firmware data including encrypted firmware, an encrypted secret key, and an encrypted hash value and providing the received firmware data to the controller;

a secret key decryption module decrypting the encrypted secret key using a private key of the ECU, which is stored in advance;

a firmware decryption module decrypting the encrypted firmware using the decrypted secret key; and

an integrity check module acquiring a first hash value by inputting the decrypted firmware to a designated hash function, decrypting the encrypted hash value using a public key of the server which is stored in advance, and judging that the decrypted firmware is integral if the first hash value and the decrypted hash value are the same,

wherein, upon judging that the decrypted firmware is integral, re-programming is performed using the decrypted firmware.