Secure software file transfer systems and methods for vehicle control modules

• US 8,966,248 B2
• Filed: 09/26/2012
• Issued: 02/24/2015
• Est. Priority Date: 04/06/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Baltes, Kevin M., Forest, Thomas M.
• Primary Examiner(s): To, Baotran N
• Application Number:
  US13/627,055
• Publication Number:
  US 20130268754A1
• Time in Patent Office: 881 Days
• Field of Search: 713/156, 713/155, 713/176
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A server includes an import module that receives a first content file and a first instruction file from a design network. The first instruction file includes a first set of parameters. A job request module, based on the first instruction parameter set, determines a second parameter set and generates a second instruction file comprising the second parameter set. The job request module transmits the first content file and the second parameter set to a signature server. An export module receives a signature file from the signature server. The signature server generates the signature file based on the second instruction file. The export module integrates the signature into the first content file to generate a second content file and downloads the second content file to at least one of a service server, a manufacturing server, and a supplier network.

Claims

1. A first server comprising:

an import module that receives a first content file and a first instruction file from a design network, wherein the first instruction file includes a first set of parameters;

a job request module that, based on the first set of parameters, determines a second set of parameters and generates a second instruction file comprising the second set of parameters, wherein the job request module transmits the first content file and the second instruction file to a signature server; and

an export module that receives a signature file from the signature server, wherein the signature file includes a signature, and wherein the signature server generates the signature file based on the second instruction file, and

wherein the export module integrates the signature into the first content file to generate a second content file and downloads the second content file to at least one of a service server, a manufacturing server, and a supplier network,

wherein

the first set of parameters comprises (i) a part number of the first content file, (ii) a part usage value, and (iii) a part type of the first content file, and

the job request module (i) based on the part usage value, determines whether a first vehicle control module permits the server to select a signing key, (ii) based on the part type, determines a type of the first content file, and (iii) generates the second instruction file based on the part number, the part usage value, and the part type.

2. The first server of claim 1, wherein:

the first set of parameters includes a key identifier;

the second set of parameters include the key identifier; and

the export module generates the signature based on the key identifier.

3. The first server of claim 1, wherein each first instruction file, the second instruction file, and the second content file are extensible markup language files.

4. The first server of claim 1, wherein:

the first set of parameters comprises a first address of the signature and a second address of a signature algorithm, and the export module stores the signature when generating the second content file based on the first address and the second address.

5. The first server of claim 1, wherein:

the first set of parameters comprises an address of a second key; and

the export module embeds the second key in a boot file based on the address and exports the boot file for use by the first vehicle control module,

wherein the boot file includes instructions that when executed by the first vehicle control module verify the signature based on the second key.

6. The first server of claim 1, wherein the job request module, based on the part type, determines whether the first content file is one of a calibration file, a software file, a firmware file, a boot file, a key replacement file, and a license file.

7. The first server of claim 1, wherein:

the first set of parameters comprises

a creator identifier indicating a person that created the first content file, and

a certificate indicating a second key to use to validate the signature and a plurality of vehicle control modules to use the second content file, wherein the plurality of vehicle control modules include the first vehicle control module;

the job request module generates the second instruction file based on the creator identifier and the certificate; and

the export module generates the second content file based on the certificate.

8. The first server of claim 1, wherein the second set of parameters comprises:

a job identifier indicating a number of a job request including the first content file and the second set of parameters;

a key identifier indicating a second key the signature server is to use to generate the signature; and

a signature algorithm identifier indicating a signature algorithm the signature server is to use to generate the signature.

9. The first server of claim 1, wherein:

the signature file comprises a third set of parameters; and

the third set of parameters comprises;

a job identifier indicating a number of a job request including the first content file and the second set of parameters; and

the signature.

10. A file download system comprising:

a first server, wherein the first server comprises

an import module that receives a first content file and a first instruction file from a design network, wherein the first instruction file includes a first set of parameters,

a job request module that, based on the first set of parameters, determines a second set of parameters and generates a second instruction file comprising the second set of parameters, wherein the job request module transmits the first content file and the second instruction file to a signature server,

a memory configured to store the second set of parameters, and

an export module that receives a signature file from the signature server, wherein the signature file includes a signature, and wherein the signature server generates the signature file based on the second instruction file,

wherein the export module integrates the signature into the first content file to generate a second content file and downloads the second content file to at least one of a service server, a manufacturing server, and a supplier network, and

wherein

the first set of parameters comprises (i) a part number of the first content file, (ii) a part usage value, and (iii) a part type of the first content file, and

the job request module (i) based on the part usage value, determines whether a first vehicle control module permits the server to select a signing key, (ii) based on the part type, determines a type of the first content file, and (iii) generates the second instruction file based on the part number, the part usage value, and the part type;

the service server; and

the manufacturing server.

11. The file download system of claim 10, further comprising the design network.

12. The file download system of claim 10, wherein at least one of:

the service server downloads the second content file to a service control module, wherein the service control module downloads the second content file to the first vehicle control module in a vehicle; and

the manufacturing server downloads the second content file to a manufacturing control module, wherein the manufacturing control module downloads the second content file to the first vehicle control module.

13. A method comprising:

receiving a first content file and a first instruction file from a design network, wherein the first instruction file includes a first set of parameters, wherein the first set of parameters comprises (i) a part number of the first content file, (ii) a part usage value, and (iii) a part type of the first content file;

based on the first set of parameters, determining a second set of parameters and generates a second instruction file comprising the second set of parameters;

transmitting the first content file and the second instruction file to a signature server;

receiving a signature file from the signature server, wherein the signature file includes a signature, and wherein the signature server generates the signature based on the second instruction file;

integrating the signature into the first content file to generate a second content file;

downloading the second content file to at least one of a service server, a manufacturing server, and a supplier network;

based on the part usage value, determining whether a first vehicle control module permits the server to select a signing key;

based on the part type, determining a type of the first content file; and

generating the second instruction file based on the part number, the part usage value, and the part type.

14. The method of claim 13, further comprising generating the signature based on an identifier of a second key, wherein:

the first set of parameters includes the identifier of the second key; and

the second set of parameters includes the identifier of the second key.

15. The method of claim 13, wherein each first instruction file, the second instruction file, and the second content file are extensible markup language files.

16. The method of claim 13, further comprising storing the signature when generating the second content file based on a first address and a second address, wherein the first set of parameters comprises:

the first address of the signature; and

the second address of a signature algorithm.

17. The method of claim 13, further comprising:

embedding a second key in a boot file based on an address; and

exporting the boot file for use by the first vehicle control module, wherein the first set of parameters comprises the address of the second key, and

wherein the boot file includes instructions that when executed by the first vehicle control module verify the signature based on the second key.

18. The method of claim 13, further comprising determining whether the first content file is one of a calibration file, a software file, a firmware file, a boot file, a key replacement file, and a license file.

19. The method of claim 13, further comprising:

generating the second instruction file based on a creator identifier and a certificate; and

generating the second content file based on the certificate,

wherein the first set of parameters comprises

the creator identifier indicating a person that created the first content file,

the certificate indicating a second key to use to validate the signature and a plurality of vehicle control modules to use the second content file, and

the plurality of vehicle control modules include the first vehicle control module.

20. The method of claim 13, wherein:

the second set of parameters comprises

a job identifier indicating a number of a job request including the first content file and the second set of parameters,

a key identifier indicating a second key the signature server is to use to generate the signature, and

a signature algorithm identifier indicating a signature algorithm the signature server is to use to generate the signature;

the signature file comprises a third set of parameters; and

the third set of parameters comprises

the job identifier indicating the number of the job request including the first content file and the second set of parameters, and

the signature.