智能网联汽车软件在线升级安全风险分析及管理对策建议Analysis of Software Online Updating Safety Risks and Suggestions for Intelligent Connected Vehicles
吴胜男,朱云尧,冀浩杰,付兴坤
摘要(Abstract)：
智能网联是我国汽车产业重大战略方向，软件定义汽车成为行业发展方向的重要特征。智能网联汽车软件在线升级可实现全新功能导入、产品性能迭代、用户体验改善，具备经济、高效的显著特征。近年来，在应用规模、范围等方面均大幅提升。但是，汽车软件在线升级涉及升级前、升级中、升级后过程状态，对原有汽车管理模式带来新的挑战，需要综合分析国内外汽车创新管理经验，针对智能网联汽车软件在线升级潜在的安全风险，从管理方面提出针对性对策建议。
关键词(KeyWords)： 智能网联汽车;软件在线升级;安全风险;对策建议
基金项目(Foundation): 车联网先导应用环境构建及场景测试验证平台建设项目（2020-0101-1-1）
作者(Author): 吴胜男,朱云尧,冀浩杰,付兴坤
DOI: 10.19822/j.cnki.1671-6329.20220191
参考文献(References)：
- [1]武翔宇,赵德华,郝铁亮.浅谈汽车OTA的现状与未来发展趋势[J].汽车实用技术, 2019(3):214-216.
- [2]宋伟,胡巧声,唐俊安.空中下载技术在商用车上的应用[J].汽车电器, 2019(12):8-11.
- [3]万开明,洪雷.车载OTA技术研究[J].时代汽车, 2020(11):10-11.
- [4] SUBKE P, MOSHREF M, ERBER J. In-Vehicle Diagnostic System for Prognostics and OTA Updates of Automated/Autonomous Vehicles[C]//WCX SAE World Congress Experience, 2020.
- [5] FIZZA K, AULUCK N, AZIM A, et al. Faster OTA Updates in Smart Vehicles using Fog Computing[C]//the 12th IEEE/ACM International Conference. ACM, 2019.
- [6]田端祥,段晖,陈洁,等.远程升级技术在汽车智能网联系统中的运用[J].内燃机与配件,2022(5):2014-216.
- [7]武智,刘天宇,贾先锋.智能网联汽车OTA升级安全设计[J].汽车实用技术, 2022(3):38-40.
- [8]尹超.软件定义汽车时代车辆公告管理制度的挑战与对策[J].汽车工业研究, 2021(3):26-28.
- [9]张进华.汽车领域“监管沙盒”的国际经验及启示[EB/OL].(2022-04-11)[2023-02-27].https//baijiahao.baidu.com/s?id=1729778912273146858&wfr=spider&for=pc.
- [10]王栋梁,汤利顺,陈博,等.智能网联汽车整车OTA功能设计研究[J].汽车技术, 2018(10):29-33.
- [11] HAIBO Z, YAN C, KAIJIAN L, XIAOFAN H. The Mobility Management Strategies by Integrating Mobile Edge Computing and CDN in Vehicular Networks[J]. Journal of Electronics&Information Technology, 2020, 42(6):1444-1451.
- [12]周媛媛.车联网信息安全测试技术分析及应用[J].北京汽车, 2020(2):23-27.
- [13] ZHI W, TIANYU L, XIANFENG J, et al. Security design of OTA upgrade for intelligent connected vehicle[C]//Proceedings of the 2021 International Conference on Control and Intelligent Robotics, 2021:736-739.
- [14] HE K X, WANG C Y, HAN Y Y, et al. Research on cyber security Technology and Test Method of OTA for Intelligent Connected Vehicle[C]//2020 International Conference on Big Data, Artificial Intelligence and Internet of Things Engineering(ICBAIE). Fuzhou, China:IEEE:2020.
- [15] HALDER S, GHOSAL A, CONTI M. Secure Over-TheAir Software Updates in Connected Vehicles:A Survey[J].Computer Networks, 2020, 178(9):107343.
- [16] KIM K, KIM J S, JEONG S, et al. Cybersecurity for Autonomous Vehicles:Review of Attacks and Defense[J]. Computers&Security, 2021, 103(4):102150.
- [17] FENG S, FENG Y, YAN X, et al. Safety assessment of highly automated driving systems in test tracks:A new framework[J]. Accident Analysis&Prevention, 2020, 144.
- [18] Society of Automotive Engineers(SAE). Cybersecurity guide book for cyber physical vehicle systems:SAE J3061_202112[S/OL].(2021-12-15)[2023-01-16]. https://www.sae.org/standards/content/j3061_202112/.
- [19] UPSTREAM SECURITY. Global Automotive Cybersecurity Report 2022[EB/OL].[2022-01-17].https://upstream.auto/2022report.
- [20]刘健皓.智能网联汽车的威胁分析与发展建议[J].智能网联汽车, 2019(1):79-79.
- [21] NEERAJ K, RAHAT I, SUDIP M, et al. An intelligent approach for building a secure decentralized public key infrastructure in VANET[J]. Journal of Computer and System Sciences, 2015, 81(6):1042-1058.