WO2025123728A1 - Doip transmission upgrade package-based verification field generation method and system - Google Patents

Abstract

A DoIP transmission upgrade package-based verification field generation method and system, and a DoIP transmission upgrade package-based verification upgrade method and apparatus. The verification field generation method comprises the following steps: S1, in response to an upgrade downloading request, obtaining a first fixed value by performing an integrity check on an upgrade package, and obtaining a first verification value by measuring the size of the upgrade package; S2, checking whether the starting address of the upgrade package stored in request packet information meets a preset condition; and if yes, setting a storage area corresponding to the starting address as an area to be filled; S3, verifying the first fixed value, and then filling the first fixed value into said area to obtain a second verification value; and S4, encapsulating the first verification value and the second verification value to obtain an upgrade package verification field. According to the present invention, no additional instruction is required, and an upgrade verification end actively verifies the received upgrade package, thereby eliminating the risk that a vehicle system gets bricked due to the upgrade package failing to decompress normally or install correctly, without increasing the load of the upgrade system.

Description

A method and system for generating a check field based on DoIP transmission upgrade package Technical Field

The present invention relates to the field of vehicle diagnosis upgrade control, and in particular to a verification field generation method, system, verification upgrade method and device based on DoIP transmission upgrade package.

Background Art

The existing DoIP (diagnostic communication protocol based on Internet Protocol) based upgrade package transmission process can refer to the standard ISO 13400-1. In this standard, there is no verification of the upgrade package before, during, and after the upgrade package transmission. Although a new DID (Data Identification) or RID (Routine Control Identification) can be added after the step to verify the upgrade package, there will be the following technical problems.

1. There is a risk of inconsistent upgrade packages: the risk of inconsistent upgrade packages between the 0x34 service requesting the vehicle to download the upgrade package and the actual transmission of the upgrade package through 0x36; the current verification method only performs a simple integrity check on the received data packet, such as whether it can form a complete compressed package, whether the upgrade service can decompress the package normally, etc., such as the OTA upgrade system and method for an in-vehicle infotainment system based on the DoIP protocol disclosed in 202210670170.5. Because the contents of the upgrade package cannot be verified, there is a risk of tampering with the system or bricking the system during installation.

2. Increase system load and operation times: Subsequent addition of DID or RID to verify the upgrade package also increases the DoIP load and operation times, requires additional commands, and cannot implement active verification of the upgrade package.

When deploying diagnostic upgrades based on DoIP, some fields in the request message corresponding to the upgrade package are wasted under the corresponding environment. For example, when the Autosar diagnostic module is deployed on the Android platform, there is no memory address for Android, so the upgrade package is directly placed in the In a certain path of Android, for the 0x34 service, the memoryAddress field is wasted and has no effect. It can be any value and has no meaning.

Therefore, there is still a great need to improve the DoIP upgrade package transmission technology, effectively utilize specific invalid fields without increasing the system load, and improve the upgrade package verification field generation and verification method.

Summary of the invention

The purpose of the present invention is to provide a verification field generation method, system, verification upgrade method and device based on DoIP transmission upgrade package. The present invention solves the problem that the poor correlation between verification field generation and upgrade package content affects the accuracy of the upgrade package, and additional verification instructions increase the load of the upgrade system.

The present invention provides the following solution

In the first aspect, the present invention records a method for generating a check field based on a DoIP transmission upgrade package, comprising the following steps:

S1: In response to an upgrade download request, obtaining a first fixed value based on integrity detection of the upgrade package, and obtaining a first check value based on detection of the size of the upgrade package;

S2: Detect whether the first address of the upgrade package stored in the request message information meets the preset condition. If so, set the storage area corresponding to the first address as the area to be filled;

S3: after verifying the first fixed value, fill the first fixed value into the to-be-filled area to obtain a second verification value;

S4: Encapsulate the first verification value and the second verification value to obtain the upgrade package verification field.

The obtaining of the first fixed value based on the integrity detection of the upgrade package includes performing the integrity detection on the upgrade package through a preset algorithm to obtain the first fixed value having a first byte length.

The detection request message information stores whether the first address of the upgrade package meets the preset condition. If it does, the first address is set as the to-be-filled area; including responding to the diagnostic service command, detecting the corresponding Check whether the operating platform has a storage area corresponding to the first address of the upgrade package. If not, confirm that the storage area corresponding to the first address meets the second byte length, and set the storage area to be filled.

After verifying the first fixed value, filling the first fixed value into the to-be-filled area to obtain a second verification value includes verifying the first fixed value by a cyclic redundancy check so that the verified first fixed value has a third byte length, and the third byte length is less than the first byte length;

When the third byte length does not exceed the second byte length, the first fixed value is filled into the area to be filled to obtain a second check value.

In a second aspect, the present invention describes a verification field generation system based on DoIP transmission upgrade package, the generation system includes

An upgrade package detection module, used to detect the package to be upgraded to obtain a first fixed value corresponding to the integrity of the upgrade package and a first check value corresponding to the size of the upgrade package;

A message detection module, used to detect whether the request message information meets the preset conditions, and identify the storage area corresponding to the first address in the request message information as the area to be filled;

A verification module, used for verifying the first fixed value so that the byte length of the verified first fixed value does not exceed the length of the area to be filled;

A filling module is used to fill the first fixed value into the to-be-filled area to obtain a second verification value.

The check field generation system also includes

The encapsulation and sending module is used to encapsulate the first verification value and the second verification value to obtain the upgrade package verification field, and send the upgrade package verification field to the upgrade verification end.

In a third aspect, the present invention records a verification upgrade method based on DoIP transmission upgrade package, comprising the following steps:

S1: connect with the host computer, stop status update and other operations;

S2: Enter bootloader mode (programming session), after security unlocking, send an upgrade download request to the host computer;

S3: receiving the upgrade package verification field sent by the host computer through the upgrade download service;

S4: receiving the upgrade package sent by the host computer through the data transmission service;

S5: Use the upgrade package verification field to verify the received upgrade package, and install the upgrade package after the verification is completed;

The upgrade package verification field is generated using the verification field generation method described above.

The receiving host computer sends the upgrade package through the data transmission service, including

S41: receiving the upgrade package size sent by the host computer through the upgrade download service;

S42: Determine the maximum amount of data transmitted by the data transmission service each time according to the size of the upgrade package, and feed it back to the host computer;

S43: receiving the upgrade package data continuously and cyclically sent by the host computer through the data transmission service until the sending is completed.

The upgrade package verification field is used to verify the received upgrade package, and after the verification is completed, the upgrade package is installed, including

After the transmission is completed, the upgrade package transmission completion is fed back by requesting to exit the transmission service, and the received upgrade package is verified using the upgrade package verification field.

In a fourth aspect, the present invention describes a verification and upgrade device based on DoIP transmission upgrade package, comprising:

The upgrade verification end receives the upgrade download request sent by the host computer, and after receiving the complete upgrade package, verifies the upgrade package through the upgrade package verification field;

Verification field generation system, used to generate upgrade package verification fields;

The data link module, in response to the upgrade download service and the data transmission service, enables the upgrade verification terminal and the host computer to be in a data link open state during the upgrade package verification field and the upgrade package data transmission;

The check field generation system is based on the check field generation system of the DoIP transmission upgrade package mentioned above.

Compared with the prior art, the present invention has the following advantages: the upgrade package verification field generated by the present invention is derived from the upgrade package content information, the upgrade package verification field contained in the present invention can not only verify the size but also the content, and part of the verification field is filled in the message information, without the need for additional instructions, and the upgrade verification end is Active verification of received upgrade packages not only eliminates the risk of the upgrade package failing to be decompressed or incorrectly installed, causing the vehicle system to become bricked, but also does not increase the load on the upgrade system.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

FIG. 1 is a flow chart of an embodiment of a method for generating a check field according to the present invention.

FIG. 2 is a structural block diagram of an embodiment of a check field generation system of the present invention.

FIG. 3 is a flow chart of an embodiment of a verification and upgrading method of the present invention.

FIG. 4 is a structural block diagram of an embodiment of a verification and upgrading device of the present invention.

DETAILED DESCRIPTION

In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings, and "multiple" generally includes at least two.

It should be understood that the term "and/or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and/or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character "/" in this article generally indicates that the associated objects before and after are in an "or" relationship.

It should be understood that although the terms first, second, third, etc. may be used to describe in the embodiments of the present application, these descriptions should not be limited to these terms. These terms are only used to distinguish the descriptions. For example, without departing from the scope of the embodiments of the present application, the first may also be referred to as the second, and similarly, the second may also be referred to as the first.

As used herein, the words "if" and "if" may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

It should also be noted that the term "includes", "comprising" or any other variation thereof is intended to cover non-exclusive inclusion, so that a commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprising a ..." do not exclude the existence of other identical elements in the commodity or device including the elements.

It should be particularly noted that any symbols and/or numbers in the specification that are not marked in the accompanying drawings are not drawing marks.

Embodiment 1

As shown in FIG1 , the present application discloses a method for generating a check field based on a DoIP transmission upgrade package, comprising the following steps:

S1: In response to an upgrade download request, obtaining a first fixed value based on integrity detection of the upgrade package, and obtaining a first check value based on detection of the size of the upgrade package;

S2: Detect whether the first address of the upgrade package stored in the request message information meets the preset condition. If so, set the storage area corresponding to the first address as the area to be filled;

S3: after verifying the first fixed value, fill the first fixed value into the to-be-filled area to obtain a second verification value;

S4: Encapsulate the first verification value and the second verification value to obtain the upgrade package verification field.

When diagnosing a vehicle based on the DoIP protocol, tools such as a diagnostic instrument or a host computer are used to upgrade the vehicle. The UDS commands used for the upgrade package transmission are 0x34, 0x36, and 0x37; the process is to use the 0x34 service to inform the vehicle of the size of the upgrade package, and then send the data of the upgrade package through the 0x36 service until the transmission is completed; after the transmission is completed, the 0x37 service is used to inform the vehicle that the upgrade package has been transmitted. The vehicle system starts to install the upgrade package, which may involve restarting the vehicle, then the diagnostic instrument or host computer will be temporarily disconnected from the vehicle system; after the vehicle system reconnects to the diagnostic instrument or host computer, it needs to restore the update of the DTC status bit, etc. This completes the DoIP flashing process. It can be seen that no verification of the upgrade package is performed before, during, or after the upgrade package is transmitted.

To solve this problem, the upgrade package verification field generation method of the technical solution of the present application at least includes the generation of a first verification value for characterizing the size of the upgrade package, the first verification value is used to verify that the upgrade package transmission size is a preset size; and also includes the generation of a second verification value for marking the uniqueness and integrity of the upgrade package content. In this way, the upgrade package verification field generation method can realize a double verification of the upgrade package size and content integrity, ensuring that the upgrade package is not tampered with.

At the same time, the generation of the second check value depends on a fixed value obtained by performing integrity check on the upgrade package. The integrity check can be the characterization data of the specific storage location/specific content of the upgrade package. Changes to the content of the upgrade package will result in changes to the characterization data. The fixed value is filled into the storage area corresponding to the first address. The obtained second check value will be used to verify the content of the upgrade package after it is sent to the vehicle, without the need to send an additional check command.

The method of obtaining a fixed value by performing integrity detection on the upgrade package may be the message content of the upgrade package, an extract of the content of the upgrade package itself, or a combination of the message content and the content of the upgrade package.

Embodiment 2

The step of obtaining the first fixed value based on the integrity check of the upgrade package includes performing integrity check on the upgrade package using a preset algorithm to obtain a first fixed value having a first byte length. The fixed value has different and fixed byte lengths according to different detection methods, and the first fixed value includes one or more marking points representing the integrity of the content of the upgrade package.

Take the request message format of 0x34 service in UDS protocol as an example;

The memoryAddress field in the 0x34 service can be used as the first fixed value to complete the upgrade package detection. Then, the upgrade package is integrity checked through algorithms such as md5sum or sha256sum, and a fixed-length digest or hashing value is obtained. For example, md5sum is 16 bytes and sha256sum is 32 bytes.

The detection request message information stores the first address of the upgrade package to see if it meets the preset conditions. If so, the first address is set as the area to be filled; including responding to the diagnostic service command, detecting whether the corresponding operating platform has a storage area corresponding to the first address of the upgrade package. If not, confirming that the storage area corresponding to the first address meets the second byte length, and setting the storage area as the area to be filled. An example of detecting that memoryAddress meets the preset conditions is that when the Autosar diagnostic module is deployed on the Android platform, there is no storage area first address memoryAddress for Android, and the upgrade package is directly placed in a certain path of Android. In this way, for the 0x34 service, the memoryAddress field is wasted and does not play a role. At this time, memoryAddress can be used as the area to be filled.

Furthermore, for other environments, a storage area that is meaningless relative to the deployment platform is detected in the request message format and can be used as an area to be filled.

After verifying the first fixed value, filling the first fixed value into the to-be-filled area to obtain a second verification value, including verifying the first fixed value by a cyclic redundancy check method, so that the verified first fixed value has a third byte length, and the third byte length is less than the first byte length. Preferably, the third byte length is one-third to one-fifth of the first byte length; for example, after obtaining a 16-byte digest or a 32-byte hashing value, the value can be verified by a verification method such as crc32 (4 bytes) or crc64 (8 bytes); filling the digest or hashing value verified by the crc into the memoryAddress field of the 0x34 service; before filling, it is also necessary to extract the length of the storage field of memoryAddress, which can be a length of the ALFID The address is confirmed by the lower 4 bits of (addressAndLengthFormatIdentifier), which is a maximum of 16 bytes, and usually 4 bytes are used.

When the third byte length does not exceed the second byte length, the first fixed value is filled into the area to be filled to obtain a second check value. In the above example, if the second byte length is detected to be 16 bytes, the corresponding parameters of 4 bytes or 8 bytes obtained after the first fixed value is checked by CRC etc. can be filled into the area to be filled to obtain a second check value.

The upgrade package verification field obtained by this solution contains the total size of the upgrade package and the digest or hashing value of the upgrade package content, which can be sent to the vehicle system through the 0x34 service. The vehicle system obtains the size and digest or hashing value of the upgrade package to be transmitted, and can perform integrity verification with the subsequent upgrade package obtained through the 0x36 service, without the need for additional DID or RID to passively verify the upgrade package.

Embodiment 3

In a second aspect, the present invention discloses a verification field generation system based on DoIP transmission upgrade package, as shown in FIG2, the generation system includes

An upgrade package detection module, used to detect the package to be upgraded to obtain a first fixed value corresponding to the integrity of the upgrade package and a first check value corresponding to the size of the upgrade package;

A message detection module, used to detect whether the request message information meets the preset conditions, and identify the storage area corresponding to the first address in the request message information as the area to be filled;

A verification module, used for verifying the first fixed value so that the byte length of the verified first fixed value does not exceed the length of the area to be filled;

A filling module is used to fill the first fixed value into the to-be-filled area to obtain a second verification value.

The verification field generation system further includes an encapsulation and sending module, which is used to encapsulate the first verification value and the second verification value to obtain an upgrade package verification field, and send the upgrade package verification field to the upgrade verification terminal.

The upgrade package detection module is linked to the cloud to detect in real time whether there is an installation package to be updated in the cloud. After obtaining an update response, the upgrade package detection is initiated, including detection of the upgrade package size and integrity detection of the upgrade package and its content. The upgrade package detection module can also be set to detect the upgrade package version and the compatibility of the upgrade package version with the vehicle to be upgraded.

The message detection module and the upgrade package detection module can be operated in parallel. When an upgrade download request is obtained, the message detection module identifies the preset area in the request message information while detecting the upgrade package. If the storage area corresponding to the first address is a meaningless storage area, the area is set as the area to be filled.

The verification module obtains the first fixed value obtained from the upgrade package detection module, verifies the first fixed value, and the verified first fixed value meets the preset length.

The filling module selects a first fixed value of appropriate length and verifies it to fill into the filling area, and the parameter that can be filled into the corresponding position of the detection request message information is the second verification value.

Finally, the first check value and the second check value are encapsulated and sent to the vehicle system together with the request message information.

Embodiment 4

Based on Example 3, the present invention discloses a verification field generation system for an upgrade package based on DoIP transmission, which also includes an upgrade package encryption module for obtaining an upgrade package encryption key, and pre-encapsulating the encryption key outside the upgrade package verification field, and sending it to the vehicle system together with the upgrade package verification field. Only when the vehicle system successfully decompresses the upgrade package through the encryption key, the upgrade package verification field will further start the subsequent upgrade package verification program.

Embodiment 5

As shown in FIG. 3 , the present invention records a verification upgrade method based on DoIP transmission upgrade package, comprising the following steps:

S1: connect with the host computer, stop status update and other operations;

S2: Enter bootloader mode, and after security unlocking, send an upgrade download request to the host computer;

S3: receiving the upgrade package verification field sent by the host computer through the upgrade download service;

S4: receiving the upgrade package sent by the host computer through the data transmission service;

S5: Use the upgrade package verification field to verify the received upgrade package, and install the upgrade package after the verification is completed;

The upgrade package verification field is generated using the verification field generation method described above.

The specific process is

(1) The diagnostic instrument or host computer establishes a DoIP connection with the vehicle;

(2) Before upgrading, stop updating the DTC status bit, etc., enter the programming session to perform security unlocking, etc.; in response to the upgrade service request, start generating the upgrade package verification field;

(3) The diagnostic instrument or host computer uses the 0x34 service to inform the vehicle of the upgrade package checksum field, decompression key and other information of the upgrade package; the vehicle returns the maximum amount of data transmitted each time by the subsequent 0x36 service;

(4) The diagnostic instrument or host computer continuously sends the data of the upgrade package through the 0x36 service until the sending is completed;

(5) After the transmission is completed, the 0x37 service is used to inform the vehicle that the upgrade package has been transmitted.

(6) The vehicle system starts installing the upgrade package, which may involve restarting the vehicle. In this case, the diagnostic instrument or host computer will be temporarily disconnected from the vehicle system.

(7) After the vehicle system reconnects to the diagnostic instrument or host computer, it is necessary to restore the update of the DTC status bit.

The receiving host computer sends the upgrade package through the data transmission service, including

S41: receiving the upgrade package size sent by the host computer through the upgrade download service;

S42: Determine the maximum amount of data transmitted by the data transmission service each time according to the size of the upgrade package, and feed it back to the host computer;

S43: receiving the upgrade package data continuously and cyclically sent by the host computer through the data transmission service until the sending is completed.

Referring to the above example, the diagnostic instrument or host computer uses the 0x34 service to inform the vehicle of the size of the upgrade package, and the vehicle returns the maximum amount of data transmitted each time by the subsequent 0x36 service to improve data transmission efficiency.

Embodiment 6

As shown in FIG. 4 , the present invention records a verification upgrade device based on DoIP transmission upgrade package, including

The upgrade verification end receives the upgrade download request sent by the host computer, and after receiving the complete upgrade package, verifies the upgrade package through the upgrade package verification field;

Verification field generation system, used to generate upgrade package verification fields;

The data link module, in response to the upgrade download service and the data transmission service, enables the upgrade verification end and the host computer to be in a data link open state in the upgrade package verification field and the upgrade package data transmission;

The check field generation system is based on the check field generation system of the DoIP transmission upgrade package mentioned above.

The solution of the present invention makes full use of the memoryAddress field in the UDS 0x34 service as an integrity check for the upgrade package; it avoids the additional operation of adding DID or RID to the integrity check in the prior art, realizes active verification of vehicle upgrades, and avoids the risk of tampering with the upgrade package.

Finally, it should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other. For the system or device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims (10)

A method for generating a check field based on a DoIP transmission upgrade package, characterized in that it comprises the following steps: S1: In response to an upgrade download request, obtaining a first fixed value based on integrity detection of the upgrade package, and obtaining a first check value based on detection of the size of the upgrade package; S2: Detect whether the first address of the upgrade package stored in the request message information meets the preset condition. If so, set the storage area corresponding to the first address as the area to be filled; S3: after verifying the first fixed value, fill the first fixed value into the to-be-filled area to obtain a second verification value; S4: Encapsulate the first verification value and the second verification value to obtain the upgrade package verification field. The method for generating a check field based on DoIP transmission upgrade package according to claim 1 is characterized in that the step of obtaining the first fixed value based on integrity detection of the upgrade package comprises the following steps: The upgrade package is integrity checked using a preset algorithm to obtain a first fixed value having a first byte length. The method for generating a check field based on DoIP transmission upgrade package as claimed in claim 2 is characterized in that the first address of the upgrade package stored in the detection request message information satisfies a preset condition, and if so, the first address is set as a to-be-filled area; including In response to the diagnostic service command, it is detected whether the corresponding operating platform has a storage area corresponding to the first address of the upgrade package. If not, it is confirmed that the storage area corresponding to the first address meets the second byte length, and the storage area is set as the area to be filled. The method for generating a check field based on a DoIP transmission upgrade package as claimed in claim 3, characterized in that after verifying the first fixed value, the first fixed value is filled into the to-be-filled area to obtain a second check value, including Verify the first fixed value by a cyclic redundancy check, so that the verified first fixed value has a third byte length, and the third byte length is less than the first byte length; When the third byte length does not exceed the second byte length, the first fixed value is filled into the area to be filled to obtain a second check value. A verification field generation system based on DoIP transmission upgrade package, characterized in that the generation system includes An upgrade package detection module, used to detect the package to be upgraded to obtain a first fixed value corresponding to the integrity of the upgrade package and a first check value corresponding to the size of the upgrade package; A message detection module, used to detect whether the request message information meets the preset conditions, and identify the storage area corresponding to the first address in the request message information as the area to be filled; A verification module, used for verifying the first fixed value so that the byte length of the verified first fixed value does not exceed the length of the area to be filled; A filling module is used to fill the first fixed value into the to-be-filled area to obtain a second verification value. The check field generation system based on DoIP transmission upgrade package according to claim 5, characterized in that it also includes The encapsulation and sending module is used to encapsulate the first verification value and the second verification value to obtain the upgrade package verification field, and send the upgrade package verification field to the upgrade verification end. A verification and upgrade method based on DoIP transmission upgrade package, characterized in that it includes the following steps S1: Link with the host computer and stop status update; S2: Enter bootloader mode, and after security unlocking, send an upgrade download request to the host computer; S3: receiving the upgrade package verification field sent by the host computer through the upgrade download service; S4: receiving the upgrade package sent by the host computer through the data transmission service; S5: Use the upgrade package verification field to verify the received upgrade package, and install the upgrade package after the verification is completed; The upgrade package check field is generated by the check field generation method for the upgrade package based on DoIP transmission as described in any one of claims 1-4. The verification and upgrade method based on DoIP transmission upgrade package as claimed in claim 7 is characterized in that the upgrade package sent by the receiving host computer through the data transmission service includes: S41: receiving the upgrade package size sent by the host computer through the upgrade download service; S42: Determine the maximum amount of data transmitted by the data transmission service each time according to the size of the upgrade package, and feed it back to the host computer; S43: receiving the upgrade package data continuously and cyclically sent by the host computer through the data transmission service until the sending is completed. The verification and upgrade method based on DoIP transmission upgrade package as claimed in claim 8 is characterized in that the received upgrade package is verified by using the upgrade package verification field, and the upgrade package is installed after the verification is completed, including After the transmission is completed, the upgrade package transmission completion is fed back by requesting to exit the transmission service, and the received upgrade package is verified using the upgrade package verification field. A verification and upgrade device based on DoIP transmission upgrade package, characterized in that it includes The upgrade verification end receives the upgrade download request sent by the host computer, and after receiving the complete upgrade package, verifies the upgrade package through the upgrade package verification field; Verification field generation system, used to generate upgrade package verification fields; The data link module, in response to the upgrade download service and the data transmission service, enables the upgrade verification terminal and the host computer to be in a data link open state during the upgrade package verification field and the upgrade package data transmission; The check field generation system is the check field generation system based on DoIP transmission upgrade package as described in claim 5 or 6.