Secure and interruptible transfer of a map update package to a navigation device

• US 9,141,372 B1
• Filed: 06/20/2014
• Issued: 09/22/2015
• Est. Priority Date: 06/20/2014
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Sarkar, Susanta P., Alrabady, Ansaf I.
• Primary Examiner(s): Cheung, Mary
• Assistant Examiner(s): Sweeney, Brian P
• Application Number:
  US14/310,757
• Time in Patent Office: 459 Days
• Field of Search: 701/450
• US Class Current: 1/1
• CPC Class Codes: G01C 21/3804 Creation or updating of map data
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method is provided for performing a map update for a navigation device. The method includes: receiving a manifest file corresponding to a map update package and receiving a digital signature corresponding to the manifest file, wherein the map update package comprises a plurality of pieces; verifying, by a processor, the digital signature; receiving, after successful verification of the digital signature, a piece of the map update package to be written to a storage of the navigation device; verifying, by the processor, the received piece using the received manifest file; and writing, in response to successful verification of the received piece, the received piece to the storage of the navigation device.

Claims

1. A method for performing a map update for a navigation device, the method comprising:

receiving a manifest file corresponding to a map update package and receiving a digital signature corresponding to the manifest file, wherein the map update package comprises a plurality of pieces;

verifying, by a processor, the digital signature;

receiving, after successful verification of the digital signature, a piece of the map update package to be written to a storage of the navigation device;

verifying, by the processor, the received piece using the received manifest file; and

writing, in response to successful verification of the received piece, the received piece to the storage of the navigation device.

2. The method according to claim 1, further comprising:

initiating, by the processor, a transfer of map update package from a map data source to the navigation device;

interrupting the transfer before the map update package is completely transferred to the navigation device;

resuming, by the processor, the transfer of the map update package; and

determining, after resuming the transfer, which pieces of the map update package have previously been written to the storage of the navigation device.

3. The method according to claim 2, wherein determining which pieces of the map update package have previously been written is based on an index reflecting which pieces of the map update package have previously been written.

4. The method according to claim 3, wherein the index comprises hash values corresponding to each of the pieces of the map update package that have previously been written.

5. The method according to claim 1, further comprising:

determining, after writing the received piece, whether any other pieces of the map update package are to be transferred to the navigation device.

6. The method according to claim 1, wherein a failure to verify the signature of the manifest file results in exception processing being performed by the processor, wherein the exception processing includes notification to a user of the navigation device.

7. The method according to claim 1, wherein a failure to verify the received piece results in exception processing being performed by the processor, wherein the exception processing includes notification to a user of the navigation device.

8. The method according to claim 1, wherein verifying the digital signature further comprises:

applying a public key to the digital signature.

9. The method according to claim 1, wherein verifying the received piece comprises:

applying a hash function to the received piece so as to obtain a hash result; and

comparing the hash result to a corresponding entry in the manifest file.

10. The method according to claim 9, wherein the hash function applied to the unwritten piece utilizes the SHA-256 algorithm.

11. A non-transitory processor-readable medium having processor-executable instructions stored thereon for performing a map update for a navigation device, the processor-executable instructions, when executed by a processor, facilitating the performance of the following steps:

receiving a manifest file corresponding to a map update package and receiving a digital signature corresponding to the manifest file, wherein the map update package comprises a plurality of pieces;

verifying the digital signature;

receiving, after successful verification of the digital signature, a piece of the map update package to be written to a storage of the navigation device;

verifying the received piece using the received manifest file; and

writing, in response to successful verification of the received piece, the received piece to the storage of the navigation device.

12. The non-transitory processor-readable medium of claim 11, wherein the steps further include:

initiating a transfer of map update package from a map data source to the navigation device;

interrupting the transfer before the map update package is completely transferred to the navigation device;

resuming the transfer of the map update package; and

determining, after resuming the transfer, which pieces of the map update package have previously been written to the storage of the navigation device.

13. The non-transitory processor-readable medium of claim 12, wherein determining which pieces of the map update package have previously been written is based on an index reflecting which pieces of the map update package have previously been written.

14. The non-transitory processor-readable medium of claim 13, wherein the index comprises hash values corresponding to each of the pieces of the map update package that have previously been written.

15. The non-transitory processor-readable medium of claim 11, wherein the steps further include:

determining, after writing the received piece, whether any other pieces of the map update package are to be transferred to the navigation device.

16. The non-transitory processor-readable medium of claim 11, wherein a failure to verify the signature of the manifest file results in exception processing being performed, wherein the exception processing includes notification to a user of the navigation device.

17. The non-transitory processor-readable medium of claim 11, wherein a failure to verify the received piece results in exception processing being performed, wherein the exception processing includes notification to a user of the navigation device.

18. The non-transitory processor-readable medium of claim 11, wherein verifying the digital signature further comprises:

applying a public key to the digital signature.

19. The non-transitory processor-readable medium of claim 11, wherein verifying the received piece comprises:

applying a hash function to the received piece so as to obtain a hash result; and

comparing the hash result to a corresponding entry in the manifest file.

20. The non-transitory processor-readable medium of claim 19, wherein the hash function applied to the unwritten piece utilizes the SHA-256 algorithm.