As the development of automotive intelligent and networking, OTA technology has become an important means of remote upgrade of connected cars. However, cyber security problems have not been solved in the OTA upgrade process of the connected cars. The lack of data protection strategy and testing methods seriously hinder the application of OTA upgrade. This paper takes the typical connected car OTA upgrade system architecture as a case and analyzes the architecture and upgrade process of the connected vehicle OTA upgrade system. And this paper researches the cyber security threat model of the OTA upgrade systems. This paper proposes an all-around protection strategy for OTA upgrade system cyber security of connected vehicle. This paper proposes a comprehensive and implementable test evaluation method basing on the professional darkroom. The results provide reference for OTA-based intelligent connected vehicle.