CN103297429B - A kind of embedded upgrade file transmission method - Google Patents

Abstract

The present invention relates to a kind of embedded upgrade file transmission method, its step includes: 1) upgrade server generates information of upgrade file and encryption key sends deciphering PKI to third party's network management server simultaneously；2) third party's network management server is set up with updating client and is connected, and client information of upgrade file, upgrade server address and deciphering PKI are sent to updating client；3) updating client sends upgrade request to upgrade server, it is connected with upgrade server foundation according to upgrade server address, obtain the differential file on upgrade server according to client information of upgrade file, go out check value according to deciphering public key decryptions, transmit file after verifying successfully and complete upgrading.Solving existing embedded upgrade file transmission degree of safety low, the most under fire, lack fileinfo and reveal the shortcomings such as strick precaution, have efficiency of transmission high, transmission safety coefficient is high, information privacy, the advantages such as ID authentication mechanism is more perfect.

Description

An embedded upgrade file transfer method

technical field

The invention relates to a safe upgrade technology of an embedded communication system, in particular to a safe and efficient upgrade file transmission method.

Background technique

During the operation of embedded remote communication devices, due to program failures, increased functional requirements, performance updates and improvements, etc., it is necessary to upgrade the software of remote devices. During the upgrade process, it is first necessary to realize the remote transmission of files from the server to the embedded device. In a complex network communication environment, there is a possibility that important file transmission content will be leaked, the communication process will be monitored, and the core technology will be stolen. Malicious attacks on embedded network devices may also occur, so the security of file transmission is guaranteed very important. Due to factors such as unstable speed and transmission delay in remote network transmission, it is also necessary to consider the reliability of file transmission and improve the efficiency of file transmission for upgrades.

At present, most embedded remote upgrade technologies do not pay enough attention to the security of upgrade file transmission. Most of the existing security mechanisms for embedded upgrade file transfer only encrypt or encode the upgrade file, and the file transfer only involves the server and The client side lacks a complete identity authentication mechanism, and there is no prevention mechanism for information leakage of upgrade files. For embedded communication devices at the core of the network, it is especially necessary to implement a complete set of upgrade file transfer methods.

Contents of the invention

The purpose of the present invention is to provide an upgrade file transmission method based on differential file encoding, a reliable verification mechanism and secure identity verification.

In order to achieve the above object, the technical solution of the present invention is: an embedded upgrade file transfer method, the steps of which include:

1) The upgrade server generates the upgrade file information and encryption key and sends the decryption public key to the third-party network management server at the same time;

2) The third-party network management server establishes a connection with the upgrade client, and sends the client upgrade file information, upgrade server address and decryption public key to the upgrade client;

3) The upgrade client sends an upgrade request to the upgrade server, establishes a connection with the upgrade server according to the upgrade server address, obtains the difference file on the upgrade server according to the upgrade file information of the client, and obtains the difference file on the upgrade server according to the decryption public key Decrypt the verification value, and transfer the file to complete the upgrade after the verification is successful.

Furthermore, the upgrade client uses the received difference file and the local version to restore the updated version file according to the following method:

The upgrade client first reads the version information of the initial block of the difference file, if it is the current version, then copies data from the current version file to the restored file according to the first address and block length of the block; secondly, if it is an updated version, then According to its block length, copy data from the difference file to the restore file; finally, restore each block in turn until the end of the difference file.

Furthermore, compare the verification code of the restored file with the decrypted verification code according to the following method:

1) The client uses the public key to decrypt the received encrypted verification code, and selects a hash function to calculate the hash value of the restored file;

2) Check whether the decrypted verification code is consistent with the hash value. If they are the same, the file transfer information is complete and the identity of the file sender is safe;

3) If not the same, it means that there is an error in the file transfer, and the file should be retransmitted.

Further, the hash function is MD5, SHA.

Further, the generation method of the difference file is: in the upgrade server, the update version file in the upgrade file information is divided into several blocks by several bytes, and compared with the current version file block by block.

Further, the comparison method is:

1) Calculate the weak Hash value and strong Hash value of each block, and save them as Hash tables;

2) Compare the first few characters of the character block of the current version with the character block of the updated version, if they match, compare the weak Hash value and the strong Hash value in turn, if they all match, save the character block of the current version in the file of the current version The first address, block length and version are marked in the difference file;

3) If the updated version of the character block cannot find a matching block, save the length of the updated version of the character block, the version mark and the content of the block to the difference file.

Further, the encryption and/or decryption key is an RSA or ECC private key and/or public key generated randomly.

Furthermore, the upgrade server address establishes a TCP connection with the upgrade server.

Furthermore, the third-party network management server establishes a communication connection with the upgrade client according to a network management system that has passed security identity authentication and sends information.

Furthermore, the sending information is encrypted by DES and AES encryption algorithms.

Beneficial effect:

The embedded upgrade file transmission method disclosed by the present invention solves the shortcomings of the existing embedded upgrade file transmission, such as low security, easy to be attacked, lack of file information leakage prevention, etc., and has high transmission efficiency, high transmission safety factor, and information confidentiality. The identity authentication mechanism is relatively complete and so on.

Description of drawings

Fig. 1 is a schematic flow diagram in an embodiment of the safe embedded upgrade file transmission method of the present invention;

FIG. 2 is a schematic diagram of a file transfer process in an embodiment of the secure embedded upgrade file transfer method of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. It should be understood that the described embodiments are only some of the embodiments of the present invention, not all of them. example. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative efforts belong to the protection scope of the present invention.

As shown in Figure 1, it is a schematic flow diagram in an embodiment of the safe embedded upgrade file transmission method of the present invention;

The technical proposal of the present invention is that a safe transmission mode involves a third-party network management server, an upgrade host server and an upgrade client.

In the present invention, the third-party network management server is responsible for notifying the upgraded file information, the upgraded server address information and the decrypted public key to the upgraded client, and the method is as follows:

The third-party network management server (any server with network management function that can perform secure identity authentication with the client) establishes a secure communication channel with the client through the network management system with secure identity authentication. Security level encryption algorithm encryption, including DES, AES encryption algorithm.

The network management system is a distributed network application system that combines software and hardware with software as the mainstay. Its purpose is to manage the network and make the network run efficiently and normally.

Network management functions are generally divided into five major management functions: performance management, configuration management, security management, billing management, and fault management.

Network management objects generally include routers, switches, HUBs, etc. In recent years, network management objects have a tendency to expand, that is, almost all entities in the network: network equipment, application programs, server systems, auxiliary equipment such as UPS power supplies, etc. are all regarded as managed objects. Provide network system administrators with a comprehensive system view of the network.

The upgrade server and the third-party network management server belong to the management center. The management center is responsible for the network management and upgrade of the embedded client. The staff of the management center can manage the upgrade server and the third-party network management server at the same time. The public key issued is generated by the upgrade server. And inform the third-party network management server.

In one embodiment of the present invention, after the upgrade server receives the upgrade request from the client, it transmits to it the difference between the current version of the client and the updated version of the upgraded file, as well as the encrypted verification information. The file is converted to binary file form.

In one embodiment of the present invention, the method for generating the difference file is: in the upgrade server, the updated version file is divided into several blocks by several bytes, and compared with the current version file block by block.

The comparison method is as follows:

First calculate the weak hash value and strong hash value of each block, and store them as Hash tables respectively; the weak hash value means that the collision probability of the hash values of two character blocks is higher, but the calculation speed is faster. A strong hash value means that the collision probability of the hash values of two character blocks is very low, but the calculation speed is slow.

In one embodiment of the present invention, compare the first few characters of the current version character block and the updated version character block, if they match, compare their weak Hash value and strong Hash value in turn, if they all match, then save the current version character block in The first address, block length and version mark of the current version file are stored in the difference file. If the updated version character block cannot find a matching block, save the length of the updated version character block, the version mark and the content of the block to the difference file. If so, a diff file is generated.

In one embodiment of the present invention, the encryption and decryption keys are RSA or ECC (Elliptic Curve Encryption Algorithm) private key and public key generated randomly, respectively, and the RSA or ECC private key is used to encrypt the verification information in the upgrade server , and send the RSA or ECC public key to the third-party network management server.

In an embodiment of the present invention, the verification information is to use hash functions such as MD5 and SHA to calculate the hash value of the updated version file, and the specific algorithm is selected according to the calculation speed of the client.

In an embodiment of the present invention, the client uses the received difference file and the local version to restore the updated version file, and compares its check code with the decrypted check code.

In an embodiment of the present invention, the restoration method is that the client first reads the version information of the initial block of the difference file, if it is the current version, then copies data from the current version file to the restored file according to the first address and block length of the block; if is an updated version, copy data from the difference file to the restore file according to its block length. In this way, each block is restored in turn until the end of the difference file.

In one embodiment of the present invention, the verification code comparison method is firstly that the client uses the public key to decrypt the received encrypted verification code, then uses the selected hash function to calculate the hash value of the restored file, and compares the decrypted Whether the check code is consistent with the hash value. If they are the same, the file transfer information is complete, and the identity of the file sender is safe; if not, it means that there is an error in the file transfer and needs to be retransmitted.

Example:

FIG. 2 is a schematic diagram of a file transfer process in an embodiment of the secure embedded upgrade file transfer method of the present invention.

To upgrade the system, you need to upgrade the kernel image file of the client, and the upgrade server sends the RSA public key and kernel image file information to the third-party snmp network management system server; the third-party snmp network management system server calls the snmp agent of the client, and calls the upgrade client program through the snmp agent , send the update file name kernel_new of the kernel image, the update file version 1, the upgrade server IP address, and the RSA public key to it, and the snmp protocol will securely encrypt the information it sends.

After the upgrade client is invoked, it saves the received upgrade file information and RSA public key, establishes a TCP connection to the upgrade server, and sends request information, including the upgrade file name kernel_new and upgrade file version 1, and the current file version 0. The server receives the request information, finds the file, obtains the difference file between the updated version 1 and the current version 0, calculates the MD5 hash function value of the updated version kernel, and encrypts it with the RSA private key, and then sends the kernel difference file and encryption to the client After the hash value (ie check code).

The upgrade server randomly generates the RSA key before the upgrade, and runs the upgrade service program all the time, and its kernel difference file can also be pre-generated before the upgrade.

The client receives the kernel difference file and the encrypted verification code, first restores the kernel update file, and calculates its MD5 hash value; then the client uses the RSA public key to decrypt the received verification code, and decrypts the decrypted verification code. The code is compared with the locally calculated MD5 hash value. If they are the same, an upgrade success signal is returned to the third-party network management server; if they are different, the kernel file is retransmitted, and if the transmission still fails after N times, an upgrade failure signal is returned to the third-party network management server.

Claims (10)

1. an embedded upgrade file transmission method, its step includes:

1) upgrade server generates information of upgrade file and encryption key sends deciphering PKI to third party's network management server simultaneously, its In, this third party's network management server be every can carry out safety identification authentication with a updating client there is network management merit The server of energy；

2) described third party's network management server is set up with described updating client and is connected, by described client information of upgrade file, liter Level server address and deciphering PKI are sent to described updating client；

3) described updating client transmission upgrade request is to upgrade server, according to described upgrade server address and described upgrade server Set up and connect, obtain the differential file on upgrade server according to described client information of upgrade file, according to described deciphering PKI Decrypt check value, transmit file after verifying successfully and complete upgrading.

Embedded upgrade file transmission method the most as claimed in claim 1, also includes, the described updating client difference received File and local version restore more new edition file as follows:

First described updating client reads the version information of the starting block of differential file, if current version, then according to block First address and block length copy data to also original from current version file；Secondly, if more redaction, then according to its block Length, copies data to also original from differential file；Finally, reduce each block successively, until differential file terminates.

Embedded upgrade file transmission method the most as claimed in claim 2, it is characterised in that reduce described in comparison as follows Check code after the check code of file and deciphering:

1) client utilizes the cryptographic check code that public key decryptions receives, and selects hash function to calculate the hashed value of also original；

2) check code after comparison deciphering is the most consistent with hashed value, if identical, then file transmission information is complete, file sender's identity For safety；

3) if it is not the same, supporting paper transmission is wrong, file transmits again.

Embedded upgrade file transmission method the most as claimed in claim 3, it is characterised in that described hash function is MD5, SHA.

Embedded upgrade file transmission method the most as claimed in claim 1, it is characterised in that the generation method of described differential file is: In upgrade server, more new edition file in information of upgrade file is one piece with several bytes and is divided into some pieces, and block-by-block With current version Documents Comparison.

Embedded upgrade file transmission method the most as claimed in claim 5, it is characterised in that the method for described comparison is:

1) calculate the weak hash value of each block and strong hash value, and save as Hash table respectively；

2) ratio is to several characters before current version character block and more redaction character block, if it does, then its weak Hash of comparison successively Value and strong hash value, if all mated, then preserve current version character block first address, block length and version at current version file Originally it is tagged in differential file；

3) if more redaction character block can not find the block of coupling, then more the length of redaction character block, version flag and this block are preserved Content is in differential file.

Embedded upgrade file transmission method the most as claimed in claim 1, it is characterised in that described encryption and/or decruption key are logical Cross RSA or ECC private key and/or PKI that random fashion produces.

Embedded upgrade file transmission method the most as claimed in claim 1, it is characterised in that described upgrade server address is with described Upgrade server is set up TCP and is connected.

Embedded upgrade file transmission method the most as claimed in claim 1, it is characterised in that described third party's network management server Communicate to connect, according to by the NMS foundation of safety identification authentication, breath of concurrently delivering letters with described updating client.

Embedded upgrade file transmission method the most as claimed in claim 9, it is characterised in that described transmission information is through DES, AES AES is encrypted.