CN106203071A - A kind of firmware upgrade method and device - Google Patents

Abstract

The invention discloses a firmware upgrading method and device. The method includes the following steps: obtaining a target firmware file for upgrading firmware; determining the first summary information according to the summary data recorded in the target firmware file; extracting the content of the manufacturer's firmware recorded in the target firmware file according to a preset summary algorithm summary, obtain the second summary information; compare the first summary information and the second summary information; if the first summary information and the second summary information are consistent, then use the target firmware file to match the corresponding hardware device identification information according to the target firmware file. upgrade the firmware of the hardware device. Applying the technical solutions provided by the embodiments of the present invention can avoid safety hazards caused by using unreliable firmware files for firmware upgrades to the kernel, and improve the security of the computer system.

Description

A firmware upgrade method and device

technical field

The invention relates to the technical field of computers, in particular to a firmware upgrading method and device.

Background technique

In a computer, firmware, namely firmware, is usually stored and solidified in the EEPROM (Electrically Erasable Programmable Read-Only Memory) or FLASH chip of the hardware device, which bears the lowest and most basic work.

Firmware can be regarded as the programming of hardware devices, which determines the working performance of hardware devices. As the design level of hardware devices gets higher and higher, firmware becomes more powerful and complex. In practical applications, there may be bugs in the firmware, or the corresponding firmware parameters need to be changed due to different application scenarios, all of which need to be resolved through firmware upgrades.

In the Linux system, the kernel supports the online upgrade of the firmware, by obtaining and loading the firmware file from the local file system, and directly passing it to the driver of the hardware device to complete the upgrade of the firmware of the hardware device.

There are certain shortcomings in this method. The firmware file obtained by the kernel from the local file system may be modified or forged by illegal personnel. Using the firmware file to upgrade the firmware of the hardware device will cause a security risk in the computer system.

Contents of the invention

In order to solve the above technical problems, the present invention provides a firmware upgrade method and device.

A firmware upgrade method, comprising:

Obtain the target firmware file for upgrading the firmware;

determining first summary information according to summary data recorded in the target firmware file;

According to a preset summary algorithm, extract the summary of the manufacturer's firmware content recorded in the target firmware file, and obtain the second summary information;

comparing the first summary information with the second summary information;

If the first summary information is consistent with the second summary information, the target firmware file is used to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file.

In a specific implementation manner of the present invention, before the first summary information is determined according to the summary data recorded in the target firmware file, the method further includes:

Determine whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship, and if so, execute the method of determining the first summary information according to the summary data recorded in the target firmware file. operate.

In a specific implementation manner of the present invention, before determining whether the current version information and dependent version information recorded in the target firmware file conform to a preset version dependency relationship, the method further includes:

According to the cyclic redundancy check mark recorded in the target firmware file, determine whether the target firmware file is complete, if yes, perform the determination of whether the current version information recorded in the target firmware file and the dependent version information conform to Actions for preset version dependencies.

In a specific embodiment of the present invention, the summary data is a summary of the manufacturer's firmware content recorded in the target firmware file using the summary algorithm preset by the manufacturer in advance, and the summary is encrypted. The data, the first summary information is determined according to the summary data recorded in the target firmware file, including:

Extracting the vendor identification information corresponding to the target firmware file from the target firmware file;

Searching for a trusted public key corresponding to the vendor identification information from a pre-acquired trusted public key library;

Using the trusted public key to decrypt the summary data recorded in the target firmware file to obtain first summary information.

In a specific embodiment of the present invention, the method also includes:

If the first summary information is inconsistent with the second summary information, output prompt information related to the fact that the target firmware file is an unreliable upgrade file.

A firmware upgrade device, comprising:

The target firmware file obtaining module is used to obtain the target firmware file for upgrading the firmware;

The first summary information determining module is configured to determine the first summary information according to the summary data recorded in the target firmware file;

The second summary information obtaining module is used to extract the summary of the manufacturer's firmware content recorded in the target firmware file according to a preset summary algorithm, and obtain the second summary information;

a summary information comparison module, configured to compare the first summary information with the second summary information;

A firmware upgrade module, configured to use the target firmware file to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file when the first summary information is consistent with the second summary information. to upgrade.

In a specific embodiment of the present invention, the device also includes:

A version dependency determining module, configured to determine whether the current version information and dependent version information recorded in the target firmware file conform to a preset version dependency, and if so, trigger the first summary information determining module.

In a specific embodiment of the present invention, the device also includes:

The integrity determination module is configured to determine whether the target firmware file is complete according to the cyclic redundancy check identifier recorded in the target firmware file, and if so, trigger the version dependency determination module.

In a specific embodiment of the present invention, the summary data is a summary of the manufacturer's firmware content recorded in the target firmware file using the summary algorithm preset by the manufacturer in advance, and the summary is encrypted. data, the first summary information determination module is specifically used for:

Extracting the vendor identification information corresponding to the target firmware file from the target firmware file;

Searching for a trusted public key corresponding to the vendor identification information from a pre-acquired trusted public key library;

Using the trusted public key to decrypt the summary data recorded in the target firmware file to obtain first summary information.

In a specific embodiment of the present invention, the device also includes:

A prompt information output module, configured to output prompt information related to the fact that the target firmware file is an unreliable upgrade file when the first summary information is inconsistent with the second summary information.

Applying the technical solution provided by the embodiment of the present invention, after obtaining the target firmware file for upgrading the firmware, the first summary information can be determined according to the summary data recorded in the target firmware file, and the first summary information can be extracted according to the preset summary algorithm. The summary of the manufacturer’s firmware content recorded in the target firmware file is used to obtain the second summary information. By comparing the first summary information and the second summary information, the reliability of the target firmware file is determined. If the two are consistent, the target firmware file is used to compare the The firmware of the corresponding hardware device is upgraded. In this way, the potential safety hazards brought to the kernel by using unreliable firmware files for firmware upgrade can be avoided, and the security of the computer system is improved.

Description of drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions of the prior art, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only For some embodiments of the present invention, those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is the implementation flowchart of a kind of firmware upgrading method in the embodiment of the present invention;

FIG. 2 is a schematic structural diagram of a firmware upgrade device in an embodiment of the present invention.

detailed description

In order to enable those skilled in the art to better understand the solution of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Referring to Fig. 1, it is an implementation flowchart of a firmware upgrade method provided by an embodiment of the present invention, the method may include the following steps:

S110: Obtain a target firmware file for upgrading firmware.

In practical applications, when the firmware of the hardware device needs to be upgraded, or when an upgradeable firmware file is detected, the kernel can obtain the target firmware file for upgrading the firmware from the local file system.

S120: Determine first summary information according to the summary data recorded in the target firmware file.

In the embodiment of the present invention, the target firmware file records the manufacturer's firmware content and summary data, and the summary data is the data obtained after the manufacturer extracts the summary of the manufacturer's firmware content in advance using a preset summary algorithm.

According to the summary data recorded in the target firmware file, the first summary information can be determined. If the summary data recorded in the target firmware file is non-encrypted data, the summary data recorded in the target firmware file may be directly determined as the first summary information. In practical applications, in order to strengthen the security of the firmware file, the summary data can be encrypted, and the first summary information can be determined according to the summary data recorded in the target firmware file.

In a specific embodiment of the present invention, the digest data is the data obtained by extracting the digest of the firmware content recorded in the target firmware file using a preset digest algorithm in advance by the manufacturer, and encrypting the digest. Step S120 may include The following steps:

Step 1: extracting the vendor identification information corresponding to the target firmware file from the target firmware file;

Step 2: Find the trusted public key corresponding to the manufacturer's identification information from the pre-acquired trusted public key library;

Step 3: Use the trusted public key to decrypt the digest data recorded in the target firmware file to obtain the first digest information.

For ease of description, the above three steps are combined for description.

The manufacturer identification information corresponding to the target firmware file can be recorded in the target firmware file, that is, which manufacturer provides the target firmware file. When the manufacturer releases the firmware file, it also releases the public key of the key pair used to encrypt the digest.

The kernel may obtain trusted public keys of multiple manufacturers in advance, and the trusted public key is the public key of the key pair used by the manufacturer to encrypt the digest of the manufacturer's firmware content. The kernel can store the obtained trusted public key in the trusted public key store. In the trusted public key store, the manufacturer identification information of each manufacturer is correspondingly stored with the trusted public key issued by the manufacturer.

The corresponding manufacturer identification information can be extracted from the target firmware file, and then the trusted public key corresponding to the manufacturer identification information can be searched from the pre-acquired trusted public key database.

After the trusted public key corresponding to the manufacturer's identification information is found in the trusted public key database, the trusted public key can be used to decrypt the digest data recorded in the target firmware file, and the decrypted digest data is the first digest information.

The specific encryption and decryption algorithm used may be a pre-specified encryption and decryption algorithm, and may also be an encryption and decryption algorithm recorded in the target firmware file.

S130: According to a preset digest algorithm, extract the digest of the manufacturer's firmware content recorded in the target firmware file to obtain second digest information. The preset digest algorithm here is consistent with the digest algorithm corresponding to the digest data in step S120.

In this embodiment of the present invention, the preset digest algorithm may be a pre-specified digest algorithm, or may be a digest algorithm recorded in the target firmware file.

According to a preset digest algorithm, the digest of the manufacturer's firmware content recorded in the target firmware file can be extracted to obtain the second digest information.

It should be noted that, the embodiment of the present invention does not limit the execution sequence of step S120 and step S130.

S140: Compare the first summary information with the second summary information.

In step S120, the kernel determines the first summary information, and the first summary information corresponds to the summary of the manufacturer's firmware content extracted by the manufacturer in advance according to a preset summary algorithm. In step S130, the kernel obtains the second summary information, which corresponds to the summary of the manufacturer's firmware content extracted by the kernel according to a preset summary algorithm.

By comparing the first summary information with the second summary information, the reliability of the target firmware file can be determined.

S150: If the first summary information is consistent with the second summary information, use the target firmware file to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file.

If the first summary information is consistent with the second summary information, it indicates that the target firmware file is less likely to be tampered with and has higher reliability, and the target firmware file can be used according to the hardware device identification information recorded in the target firmware file Upgrade the firmware of the corresponding hardware device. Specifically, the kernel can transfer the target firmware file to the driver of the corresponding hardware device, so as to complete the upgrade of the firmware of the hardware device.

If the first summary information is inconsistent with the second summary information, it indicates that the target firmware file may have been tampered with, and the reliability is low. If the target firmware file is used to upgrade the firmware of the hardware device, it may cause harm to the computer system. In this case, the target firmware file may not be loaded. It is also possible to output prompt information related to the fact that the target firmware file is an unreliable upgrade file, prompting the user that the target firmware file may have been damaged.

Applying the method provided by the embodiment of the present invention, after obtaining the target firmware file for upgrading the firmware, the first summary information can be determined according to the summary data recorded in the target firmware file, and the target can be extracted according to the preset summary algorithm. The summary of the manufacturer's firmware content recorded in the firmware file, obtain the second summary information, and determine the reliability of the target firmware file by comparing the first summary information and the second summary information. If the two are consistent, use the target firmware file to match the corresponding upgrade the firmware of the hardware device. In this way, the potential safety hazards brought to the kernel by using unreliable firmware files for firmware upgrade can be avoided, and the security of the computer system is improved.

In one embodiment of the present invention, before step S120, the method may further include the following steps:

It is determined whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship, and if yes, the operation of step S120 is performed.

In this embodiment of the present invention, current version information and dependent version information may be recorded in the target firmware file. After the kernel obtains the target firmware file, it may first determine whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship. The preset version dependency relationship can be set according to the actual situation, for example, the version number in the dependent version information needs to be smaller than the version number in the current version information.

If yes, continue to perform the operation of step S120, if not, the target firmware file may be unreliable, the target firmware file may not be loaded, or a prompt message related to version incompatibility may be output.

In one embodiment of the present invention, before determining whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship, the method may also include the following steps:

According to the cyclic redundancy check identification recorded in the target firmware file, determine whether the target firmware file is complete, if yes, perform the operation of determining whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship .

In this embodiment of the present invention, a cyclic redundancy check identifier may be recorded in the target firmware file. According to the cyclic redundancy check identification, it can be determined whether the target firmware file is complete, and if so, continue to perform the operation of determining the version dependency or perform the operation of comparing summary information.

In practical applications, the above embodiments can be combined to improve the security of the system, and also have a good preventive effect on camouflaged viruses such as hiding.

In the embodiment of the present invention, the target firmware file may have a preset file format as shown in Table 1:

Table 1

Cyclic redundancy check identification CRC32: used to determine the integrity of the target firmware file according to this identification, to avoid information loss caused by abnormal loading;

Vendor ID VendorId: used to record the vendor to which the target firmware file belongs;

Hardware device identifier ProductId: used to record the hardware device corresponding to the target firmware file;

Current Version Current Version: used to record the current version information of the target firmware file;

Dependency version Request Version: used to record the dependency version information corresponding to the current version of the target firmware file;

Summary data Encrypt Digest: used to record the digest obtained by using the digest algorithm for the manufacturer's firmware content, and encrypt the digest using the encryption and decryption algorithm and the manufacturer's private key;

Digest algorithm Digest Method: used to record the digest algorithm used to generate the digest data;

Encryption and decryption algorithm Encrypt Method: the encryption and decryption algorithm used to record the summary data;

Size Size: used to record the size of the manufacturer's firmware content;

Vendor Firmware Content: Used to record the content of the vendor firmware.

Each manufacturer can generate a firmware file with a unified file format according to the above file format when releasing the firmware file. After the kernel obtains the firmware file, the completeness and safety review of the firmware file can be performed according to the information recorded in the firmware file, so as to avoid unreliable firmware files from causing harm to system security.

Corresponding to the above method embodiment, the embodiment of the present invention also provides a firmware upgrade device. Referring to shown in Figure 2, the device can include the following modules:

Target firmware file obtaining module 210, for obtaining the target firmware file for upgrading firmware;

The first summary information determining module 220 is configured to determine the first summary information according to the summary data recorded in the target firmware file;

The second summary information obtaining module 230 is used to extract the summary of the manufacturer's firmware content recorded in the target firmware file according to a preset summary algorithm, and obtain the second summary information;

Summary information comparison module 240, configured to compare the first summary information and the second summary information;

The firmware upgrade module 250 is configured to use the target firmware file to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file when the first summary information is consistent with the second summary information.

Applying the device provided by the embodiment of the present invention, after obtaining the target firmware file for upgrading the firmware, the first summary information can be determined according to the summary data recorded in the target firmware file, and the target can be extracted according to the preset summary algorithm. The summary of the manufacturer's firmware content recorded in the firmware file, obtain the second summary information, and determine the reliability of the target firmware file by comparing the first summary information and the second summary information. If the two are consistent, use the target firmware file to match the corresponding upgrade the firmware of the hardware device. In this way, the potential safety hazards brought to the kernel by using unreliable firmware files for firmware upgrade can be avoided, and the security of the computer system is improved.

In one embodiment of the present invention, the device may also include the following modules:

The version dependency determination module is configured to determine whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship, and if so, trigger the first summary information determination module 220 .

In one embodiment of the present invention, the device may also include the following modules:

The integrity determination module is configured to determine whether the target firmware file is complete according to the cyclic redundancy check identifier recorded in the target firmware file, and if so, trigger the version dependency determination module.

In a specific implementation of the present invention, the summary data is the data obtained by extracting the summary of the manufacturer's firmware content recorded in the target firmware file using a preset summary algorithm in advance by the manufacturer, and encrypting the summary. The first summary The information determination module 220 is specifically used for:

Extracting the vendor identification information corresponding to the target firmware file from the target firmware file;

Find the trusted public key corresponding to the manufacturer's identification information from the pre-acquired trusted public key library;

The digest data recorded in the target firmware file is decrypted by using the trusted public key to obtain the first digest information.

In one embodiment of the present invention, the device may also include the following modules:

The prompt information output module is configured to output prompt information related to the target firmware file being an unreliable upgrade file when the first summary information is inconsistent with the second summary information.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related part, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

A firmware upgrade method and device provided by the present invention have been introduced in detail above. In this paper, specific examples are used to illustrate the principle and implementation of the present invention, and the descriptions of the above embodiments are only used to help understand the method and core idea of the present invention. It should be pointed out that for those skilled in the art, without departing from the principle of the present invention, some improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims (10)

1. A firmware upgrade method, characterized in that, comprising: Obtain the target firmware file for upgrading the firmware; determining first summary information according to summary data recorded in the target firmware file; According to a preset summary algorithm, extract the summary of the manufacturer's firmware content recorded in the target firmware file, and obtain the second summary information; comparing the first summary information with the second summary information; If the first summary information is consistent with the second summary information, the target firmware file is used to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file. 2. The method according to claim 1, wherein, before determining the first summary information according to the summary data recorded in the target firmware file, the method further comprises: Determine whether the current version information and dependent version information recorded in the target firmware file conform to the preset version dependency relationship, and if so, execute the method of determining the first summary information according to the summary data recorded in the target firmware file. operate. 3. The method according to claim 2, wherein before determining whether the current version information recorded in the target firmware file and the dependent version information conform to the preset version dependency relationship, the method further comprises: According to the cyclic redundancy check mark recorded in the target firmware file, determine whether the target firmware file is complete, if yes, perform the determination of whether the current version information recorded in the target firmware file and the dependent version information conform to Actions for preset version dependencies. 4. The method according to any one of claims 1 to 3, wherein the summary data is a summary of the manufacturer's firmware content recorded in the target firmware file using the summary algorithm preset by the manufacturer in advance , and the digest is encrypted to the data, and the first digest information is determined according to the digest data recorded in the target firmware file, including: Extracting the vendor identification information corresponding to the target firmware file from the target firmware file; Searching for a trusted public key corresponding to the vendor identification information from a pre-acquired trusted public key library; Using the trusted public key to decrypt the summary data recorded in the target firmware file to obtain first summary information. 5. method according to claim 4, is characterized in that, described method also comprises: If the first summary information is inconsistent with the second summary information, output prompt information related to the fact that the target firmware file is an unreliable upgrade file. 6. A firmware upgrade device, characterized in that, comprising: The target firmware file obtaining module is used to obtain the target firmware file for upgrading the firmware; The first summary information determining module is configured to determine the first summary information according to the summary data recorded in the target firmware file; The second summary information obtaining module is used to extract the summary of the manufacturer's firmware content recorded in the target firmware file according to a preset summary algorithm, and obtain the second summary information; a summary information comparison module, configured to compare the first summary information with the second summary information; A firmware upgrade module, configured to use the target firmware file to upgrade the firmware of the corresponding hardware device according to the hardware device identification information recorded in the target firmware file when the first summary information is consistent with the second summary information. to upgrade. 7. The device according to claim 6, further comprising: A version dependency determining module, configured to determine whether the current version information and dependent version information recorded in the target firmware file conform to a preset version dependency, and if so, trigger the first summary information determining module. 8. The device according to claim 7, further comprising: The integrity determination module is configured to determine whether the target firmware file is complete according to the cyclic redundancy check identifier recorded in the target firmware file, and if so, trigger the version dependency determination module. 9. The device according to any one of claims 6 to 8, wherein the summary data is a summary of the manufacturer's firmware content recorded in the target firmware file using the summary algorithm preset by the manufacturer in advance , and encrypt the digested data, the first digest information determination module is specifically used for: Extracting the vendor identification information corresponding to the target firmware file from the target firmware file; Searching for a trusted public key corresponding to the vendor identification information from a pre-acquired trusted public key library; Using the trusted public key to decrypt the summary data recorded in the target firmware file to obtain first summary information. 10. The device according to claim 9, further comprising: A prompt information output module, configured to output prompt information related to the fact that the target firmware file is an unreliable upgrade file when the first summary information is inconsistent with the second summary information.