CN111832013A - Firmware upgrade method and device - Google Patents

Abstract

An embodiment of the present specification provides a firmware upgrade method and apparatus, where the method includes: the server side encrypts the first firmware file by adopting a second key to obtain a second firmware file; verifying the second firmware file by adopting a preset verification algorithm to obtain a first verification value; and sending a firmware upgrading instruction to the terminal equipment, wherein the firmware upgrading instruction is used for indicating the terminal equipment to carry out firmware upgrading, and the firmware upgrading instruction carries a download address of the second firmware file, the second key and the first check value. Therefore, in the embodiment of the specification, the content of the firmware file is prevented from being cracked and tampered in the firmware upgrading process by encrypting and verifying the new firmware file developed by a developer, and the safety is high.

Description

Firmware upgrade method and device

(This application is a divisional application of the patent application with application number 201810981834.3)

technical field

The present application relates to the field of electronic technologies, and in particular, to a method and device for upgrading firmware.

Background technique

Firmware refers to the device "driver" stored inside the device, which undertakes the most basic and bottom-level work of the operating system. Through the firmware, the operating system can realize the operation of a specific machine according to the standard device driver. It can be seen that in a hardware device, firmware is the soul of the hardware device and determines the function and performance of the hardware device.

To fix product defects, meet changing requirements and new features, and shorten product cycles, device firmware is upgraded. At present, in the process of upgrading the firmware, the relevant firmware files have a low degree of confidentiality and are easy to be tampered with or cracked, which poses a great security risk.

In order to solve the above technical problems, it is necessary to propose a firmware upgrade method with high security.

SUMMARY OF THE INVENTION

The purpose of the embodiments of this specification is to provide a firmware upgrade method and device, and the embodiments of this specification are implemented as follows:

In a first aspect, a firmware upgrade method is provided, applied to a server, and the method includes:

Encrypt the first firmware file with the second key to obtain the second firmware file;

The second firmware file is verified by using a preset verification algorithm to obtain a first verification value;

Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file.

In a second aspect, a firmware upgrade method is provided, applied to a terminal device, the method includes:

Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate;

Verifying the digital certificate corresponding to the download address of the second firmware file;

If the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

The second firmware file is verified by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file;

Perform firmware upgrade on the terminal device based on the first firmware file.

In a third aspect, a firmware upgrade device is provided, which is applied to a server, and the device includes:

an encryption module for encrypting the first firmware file with a second key to obtain a second firmware file;

a first verification module, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value;

A sending module, configured to send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second firmware file The key and the first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the validity of the download address of the second firmware file.

In a fourth aspect, a firmware upgrade apparatus is provided, which is applied to a terminal device, and the apparatus includes:

The instruction receiving module is used to receive the firmware upgrade instruction sent by the server, and the firmware upgrade instruction carries the download address, the second key and the first check value of the second firmware file, and the second firmware file adopts the first check value. Obtained by encrypting the first firmware file with the second key, and the first check value is obtained by verifying the second firmware file by using a preset check algorithm; the download address of the second firmware file corresponds to Set up with a digital certificate;

a download module, configured to verify the digital certificate corresponding to the download address of the second firmware file; if the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

a second verification module, configured to perform verification on the second firmware file by using the preset verification algorithm to obtain a second verification value;

a decryption module, configured to decrypt the second firmware file by using the second key to obtain the first firmware file when the second check value matches the first check value;

An upgrade module, configured to upgrade the firmware of the terminal device based on the first firmware file.

In a fifth aspect, an electronic device is provided, comprising:

processor; and

memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Encrypt the first firmware file with the second key to obtain the second firmware file;

The second firmware file is verified by using a preset verification algorithm to obtain a first verification value;

Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file.

In a sixth aspect, an electronic device is provided, comprising:

processor; and

memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate;

Verifying the digital certificate corresponding to the download address of the second firmware file;

If the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

The second firmware file is verified by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file;

The firmware of the terminal device is upgraded based on the first firmware file.

In a seventh aspect, a computer storage medium is provided that stores one or more programs that, when executed by an electronic device including a plurality of application programs, cause the electronic The device does the following:

Encrypt the first firmware file with the second key to obtain the second firmware file;

The second firmware file is verified by using a preset verification algorithm to obtain a first verification value;

Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file.

In an eighth aspect, there is provided a computer storage medium storing one or more programs that, when executed by an electronic device including a plurality of application programs, cause the electronic The device does the following:

Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate;

Verifying the digital certificate corresponding to the download address of the second firmware file;

If the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

The second firmware file is verified by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file;

Perform firmware upgrade on the terminal device based on the first firmware file.

It can be seen from the technical solutions provided by the above embodiments of this specification that in the embodiments of this specification, the new firmware files developed by developers are encrypted and verified to ensure that the contents of the firmware files are not cracked and tampered with during the firmware upgrade process, High security.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present specification or the prior art, the following briefly introduces the accompanying drawings required in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments described in this specification. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative labor.

1 is an application scenario diagram of a firmware upgrade method according to an embodiment of this specification;

2 is a flowchart of a firmware upgrade method according to an embodiment of this specification;

3 is a flowchart of a firmware upgrade method according to another embodiment of the present specification;

4 is a schematic structural diagram of a firmware upgrade apparatus according to an embodiment of the present specification;

5 is a schematic structural diagram of a firmware upgrade apparatus according to another embodiment of the present specification;

6 is a schematic structural diagram of an electronic device according to an embodiment of the present specification;

FIG. 7 is a schematic structural diagram of an electronic device according to another embodiment of the present specification.

Detailed ways

In order to make those skilled in the art better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings in the embodiments of this specification. Obviously, the described The embodiments are only some of the embodiments of the present specification, but not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of this specification.

The embodiments of this specification provide a method and device for upgrading firmware.

For ease of understanding, the following first introduces some concepts and application scenarios involved in the embodiments of this specification.

Over The Air (OTA): refers to distributing resources or configurations that need to be upgraded to embedded terminal devices through a variety of over-the-air transmission methods (including but not limited to WiFi, ZigBee, and BLE, etc.) Updated technology. At present, the firmware upgrade of terminal equipment is mainly realized through OTA.

Message Queuing Telemetry Transport (MQTT): It is an instant messaging protocol developed by IBM and is a lightweight transport protocol.

Asymmetric encryption: Asymmetric encryption algorithm is a key encryption method, involving public key and private key, in which the public key and the private key are a pair, if the data is encrypted with the private key, only the It can only be decrypted with the corresponding public key; if the data is encrypted with the public key, it can only be decrypted with the corresponding private key.

Symmetric Encryption: Symmetric encryption algorithm is a secret key method, using single-key key encryption, the same key can be used for data encryption and decryption at the same time, also known as single-key encryption.

Digital digest: Digital digest is to turn a message of any length into a short message of fixed length, which is similar to a function whose argument is the message, that is, the Hash function. The digital digest uses a one-way Hash function to "digest" the plaintext to be encrypted into a string of ciphertexts with a fixed length (for example, 128 bits). This string of ciphertexts is also called a digital fingerprint. The result of ciphertext is always different, and the digest of the same plaintext must be the same.

Boot Loader: It is the first piece of code executed after the embedded system is powered on. After it completes the initialization of the CPU and related hardware, the operating system image or the solidified embedded application is loaded into the memory and then Jump to the space where the operating system is located, and start the operating system to run.

Application scenarios of the technical solutions of the embodiments of this specification: The application scenarios include: a development environment, a management center, a server, and a terminal device; wherein, developers develop firmware files in the development environment, and the firmware files developed by developers are called "source firmware files". file”, the source firmware file is used for firmware upgrade of the terminal device; the management center is used to store and manage the version information of the source firmware file developed by the developer. After the developer develops a new source firmware file, the management center will update the The source firmware file is entered into the management center. In order to ensure the legitimacy of the source firmware file, the management center will asymmetrically encrypt the new source firmware, and provide the firmware file obtained by asymmetric encryption to the server; After a series of processing of the firmware file from the management center, the download address of the processed firmware file is provided to the terminal device; the terminal device downloads the firmware file according to the firmware file download address from the server, and verifies the downloaded firmware file. , decryption, if the verification is passed and the decryption is successful, the source firmware file will be obtained, and the firmware of the terminal device will be upgraded using the source firmware file.

Next, a firmware upgrade method provided by the embodiments of this specification will be introduced.

FIG. 2 is a flowchart of a firmware upgrade method according to an embodiment of the present specification. The method is applied to a server. As shown in FIG. 2, the method may include the following steps: step 204, step 206 and step 208, wherein,

In step 204, the first firmware file is encrypted with the second key to obtain a second firmware file.

In the embodiment of this specification, in order to avoid leakage of data and business logic of the firmware file during transmission, the server encrypts the first firmware file. Considering that the AES encryption algorithm has the advantages of fast operation speed, high security, and low resource consumption, it is preferable to use the AES encryption algorithm to encrypt the first firmware. In this case, the second key is the AES key.

The first firmware file may be a source firmware file or a firmware file obtained by performing processing such as encryption on the source firmware file. In this embodiment, the specific processing manner used to obtain the first firmware file by processing the source firmware file is not limited.

For example, before step 204, the following processing steps may also be performed to obtain the first firmware file:

Obtain a first firmware file, where the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key.

In the embodiment of this specification, the source firmware file is a firmware file developed by a developer in a development environment, and the source firmware file is a non-encrypted file.

In the embodiment of this specification, after the developer develops (or compiles) a new source firmware file in the development environment, it will be entered into the management center for storage, and the management center will asymmetrically encrypt the source firmware file to obtain a non-symmetrical encryption of the source firmware file. The symmetrically encrypted firmware file is the first firmware file; specifically, the management center can encrypt the source firmware file with the private key of the RSA encryption algorithm to obtain the first firmware file. Correspondingly, the server obtains the first firmware file from the management center.

In step 206, a preset verification algorithm is used to verify the second firmware file to obtain a first verification value.

In the embodiment of this specification, to ensure the security of the firmware upgrade process, the server will verify the second firmware file, where the verification algorithm may include: SHA256 verification algorithm, SHA128 verification algorithm or MD5 verification algorithm. Specifically, when the verification algorithm is the SHA256 verification algorithm, the first verification value is a 256-bit character string; specifically, when the verification algorithm is the SHA128 verification algorithm, the first verification value is a 128-bit character string String; specifically, when the check algorithm is the MD5 check algorithm, the first check value is a 128-bit character string.

In step 206, a firmware upgrade instruction is sent to the terminal device, wherein the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the first check value .

In the embodiment of this specification, when it is detected that the firmware version in the terminal device is lower than the version of the source firmware file, a firmware upgrade instruction is sent to the terminal device.

Considering that the amount of data carried in the firmware upgrade instruction is relatively small, in the embodiment of this specification, the firmware upgrade instruction may be sent to the terminal device through a lightweight transmission protocol; wherein, the lightweight transmission protocol may include: MQTT protocol or CoAP protocol .

In the embodiment of this specification, the server may receive status information reported by the terminal device, where the status information may include at least one of the following: firmware version information and firmware installation progress information, and the firmware version information is used to determine whether the terminal device is A firmware upgrade is required.

In the embodiment of this specification, if an error occurs in the firmware upgrade process of the terminal device, the server can locate the error according to the installation progress information of the firmware.

In the embodiment of this specification, if the firmware upgrade of the terminal device fails, the server may issue the firmware upgrade instruction again when the terminal device restarts.

As can be seen from the above-mentioned embodiment, in this embodiment, the new firmware file (namely the source firmware file) developed by the developer is encrypted and verified multiple times to ensure that the content of the firmware file is not cracked and tampered with during the firmware upgrade process. , higher security.

FIG. 3 is a flowchart of a firmware upgrade method according to another embodiment of the present specification. The method is applied to a terminal device. As shown in FIG. 3 , the method may include the following steps: step 302 , step 304 , step 306 , step 308 and Step 310, wherein,

In step 302, a firmware upgrade instruction sent by the server is received, wherein the firmware upgrade instruction carries the download address, the second key and the first check value of the second firmware file, and the second firmware file uses the second key The first check value is obtained by encrypting the first firmware file, and the first check value is obtained by checking the second firmware file by using a preset check algorithm.

In step 304, the second firmware file is acquired according to the download address of the second firmware file.

In the embodiment of this specification, the legality of the download address of the firmware file is verified by means of HTTPS certificate authentication, so as to ensure that the download address and check value of the firmware file in the firmware upgrade instruction are not tampered with. Correspondingly, the above step 304 is specifically The following steps can be included:

Obtain the digital certificate corresponding to the download address of the second firmware file;

Determine whether the digital certificate is in the preset whitelist, and if the digital certificate is in the preset whitelist, obtain the second firmware file from the download address of the second firmware file, wherein the digital certificate in the preset whitelist is a legal digital certificate .

In the embodiment of this specification, the certificate corresponding to the download address of the second firmware file can be obtained, and the obtained certificate can be verified by using the pre-stored root certificate of the legal download address; Get the second firmware file. Specifically, the root certificate of the legal download address is pre-embedded in the terminal device. When the firmware file needs to be obtained from the download address (that is, it needs to communicate with the server), the host (ie the server needs to be communicated) is obtained through the host domain name included in the download address. ) certificate, use the preset verification algorithm and the pre-embedded root certificate to verify the host's certificate, if the verification is passed, it means that the host is legal, then download the corresponding firmware file from the download address, if the verification fails , it indicates that the host is illegal, and the corresponding firmware file will not be downloaded from the download address at this time.

In step 306, a preset verification algorithm is used to verify the second firmware file to obtain a second verification value.

In the embodiment of this specification, in order to ensure the legality of the firmware file, the terminal device will check the downloaded firmware file to obtain a check value, and compare the check value with the check value carried in the firmware upgrade instruction , determine the legitimacy of the firmware file; if the two match (that is, the same), it indicates that the firmware file is legal and has not been tampered with; if the two do not match (that is, not the same), it indicates that the firmware file is Illegal, it has been tampered with, in this case, the subsequent upgrade operation of the firmware file is no longer performed.

In step 308, if the second check value matches the first check value, the second firmware file is decrypted using the second key to obtain the first firmware file. .

In the embodiment of this specification, the downloaded firmware file is decrypted using the key carried in the firmware upgrade instruction to obtain a decrypted firmware file, which can be used to upgrade the firmware of the terminal device.

In step 310, a firmware upgrade is performed on the terminal device based on the first firmware file.

In some embodiments, the first firmware file may be the source firmware file directly, so the terminal device may be upgraded with firmware directly by using the first firmware file.

In some other embodiments, since the firmware file obtained by decryption using the key carried in the firmware upgrade instruction may still be an encrypted firmware file, it is necessary to further decrypt the first firmware file to obtain the source firmware file in order to realize the process of the terminal device. Firmware upgrade.

For example, before the server uses the second key to encrypt the first firmware file and obtains the second firmware file, the first firmware file has been obtained by encrypting the source firmware file with the first key, and the first key is used to encrypt the source firmware file. The key is the private key. Correspondingly, before performing this step, the following steps can be specifically performed:

The source firmware file is obtained by decrypting the first firmware file with a pre-stored third key, where the third key is a public key corresponding to the first key.

Specifically, the terminal device will pre-store the public key (ie the third key) and the private key (ie the first key) for signing the firmware file. When the firmware file decrypted by the terminal device using the key carried in the firmware upgrade instruction is an encrypted firmware file and a firmware file encrypted with a private key, and the terminal device locally maintains the public key corresponding to the private key , the terminal device can use the corresponding public key to decrypt the aforementioned firmware file. If the decryption fails, it means that the firmware file is illegal and has been tampered with. In this case, the subsequent upgrade operation of the firmware file is no longer performed; If the decryption is successful, the firmware of the terminal device is upgraded according to the decrypted firmware file (ie, the source firmware file).

Based on this, when this step is performed, the source firmware file obtained by decryption can be directly used to upgrade the firmware of the terminal device.

In the embodiment of this specification, the source firmware file may be written into the flash memory of the terminal device. After the source firmware file is written into the flash memory of the terminal device, the terminal device can be restarted immediately to complete the firmware upgrade; it is also possible to restart the terminal device to complete the firmware upgrade after setting a preset time period or when the preset time point is reached.

In the embodiment of this specification, the flash memory of the terminal device may be encrypted to ensure the security of data stored in the flash memory. Specifically, if the flash memory of the terminal device is encrypted, when writing data into the flash memory, the flash memory needs to be decrypted first, and then the data is written; and when reading data from the flash memory, the flash memory needs to be decrypted first, and then Read data.

In the embodiment of this specification, in order to ensure that the BootLoader of the terminal device is not tampered with, a fourth key can be used to encrypt the BootLoader of the terminal device, and the encrypted BootLoader is verified to obtain a third check value; The third check value is stored in the flash memory of the terminal device, so that when the terminal device starts up again, the BootLoader needs to be checked, and it can be started only after the check is passed; in this case, the third key can be stored in advance In BootLoader to ensure the security of the third key. The fourth key can be a 256-bit character string generated after Security Boot is turned on, the character string can be used as an AES key to encrypt BootLoader, and the third check value can be stored in the position starting from 0x0 of the flash memory.

In the embodiment of this specification, the terminal device may report status information to the server, wherein the status information includes at least one of the following: firmware version information and firmware installation progress information, and the firmware version information is used to determine whether the terminal device needs to perform Firmware upgrade, the firmware installation progress information is used by the server to locate firmware upgrade errors.

It can be seen from the above embodiment that in this embodiment, the new firmware file developed by the developer is encrypted and verified to ensure that the content of the firmware file is not cracked and tampered with during the firmware upgrade process, and the security is high.

4 is a schematic structural diagram of a firmware upgrade apparatus according to an embodiment of the present specification. The firmware upgrade apparatus is applied to a server. In a software implementation, the firmware upgrade apparatus 400 may include: an encryption module 402, a first checksum module 403 and sending module 404, wherein,

an encryption module 402, configured to encrypt the first firmware file with a second key to obtain a second firmware file;

A first verification module 403, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value;

The sending module 404 is configured to send a firmware upgrade instruction to the terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the The second key and the first check value.

It can be seen from the above embodiment that in this embodiment, the new firmware file developed by the developer is encrypted and verified to ensure that the content of the firmware file is not cracked and tampered with during the firmware upgrade process, and the security is high.

Optionally, as an embodiment, the sending module 404 may include:

The instruction sending sub-module is configured to send a firmware upgrade instruction to the terminal device through a lightweight transmission protocol.

Optionally, as an embodiment, the second key includes: an AES key.

Optionally, as an embodiment, the preset verification algorithm includes: SHA256 verification algorithm, SHA128 verification algorithm or MD5 verification algorithm.

Optionally, as an embodiment, the firmware upgrade apparatus 400 may further include:

Status information reported by the terminal device is received, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

Optionally, as an embodiment, the firmware upgrade apparatus 400 may further include:

an obtaining module, configured to obtain the first firmware file, where the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key.

5 is a schematic structural diagram of a firmware upgrade apparatus according to another embodiment of the present specification. The firmware upgrade apparatus is applied to a terminal device. In a software implementation, the firmware upgrade apparatus 500 may include: an instruction receiving module 501, a download module 502, the second verification module 503, the decryption module 504 and the upgrade module 505, wherein,

The instruction receiving module 501 is configured to receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key and the first check value of the second firmware file. The second key is obtained by encrypting the first firmware file, and the first check value is obtained by verifying the second firmware file by using a preset check algorithm;

A download module 502, configured to acquire the second firmware file according to the download address of the second firmware file;

The second verification module 503 is configured to use the preset verification algorithm to verify the second firmware file to obtain a second verification value;

A decryption module 504, configured to decrypt the second firmware file by using the second key to obtain the first firmware file when the second check value matches the first check value ;

An upgrade module 505, configured to upgrade the firmware of the terminal device based on the source firmware file.

As can be seen from the above-mentioned embodiment, in this embodiment, the new firmware file (namely the source firmware file) developed by the developer is encrypted and verified multiple times to ensure that the content of the firmware file is not cracked and tampered with during the firmware upgrade process. , higher security.

Optionally, as an embodiment, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key;

Correspondingly, the decryption module 504 is configured to decrypt the first firmware file by using a pre-stored third key to obtain the source firmware file, and the third key is the corresponding value of the first key. public key; the upgrade module 505 is configured to use the source firmware file to upgrade the firmware of the terminal device.

Optionally, as an embodiment, the downloading module 502 may include:

a certificate obtaining submodule, configured to obtain a certificate corresponding to the download address of the second firmware file;

The verification sub-module is used to verify the obtained certificate through the root certificate of the pre-stored legal download address;

The firmware file download submodule is configured to acquire the second firmware file from the download address of the second firmware file when the verification is passed.

Optionally, as an embodiment, the firmware upgrade apparatus 500 may further include:

an encryption submodule, used for encrypting the BootLoader of the terminal device with a fourth key, and verifying the encrypted BootLoader to obtain a third check value;

A storage submodule, configured to store the third check value in the flash memory of the terminal device.

Optionally, as an embodiment, the third key is pre-stored in the BootLoader.

Optionally, as an embodiment, the upgrade module 505 may include:

The upgrade submodule is used for writing the source firmware file into the flash memory of the terminal device.

Optionally, as an embodiment, the firmware upgrade apparatus 500 may further include:

A reporting module, configured to report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

FIG. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present specification. The electronic device may be a server. As shown in FIG. 6 , at the hardware level, the electronic device includes a processor, optionally an internal bus, a network interface, memory. The memory may include memory, such as high-speed random-access memory (Random-Access Memory, RAM), or may also include non-volatile memory (non-volatile memory), such as at least one disk memory. Of course, the electronic equipment may also include hardware required for other services.

The processor, the network interface, and the memory can be connected to each other through an internal bus, which can be an ISA (Industry Standard Architecture, industry standard architecture) bus, a PCI (Peripheral Component Interconnect, peripheral component interconnect standard) bus or an EISA (Extended Industry Standard) bus. StandardArchitecture, extended industry standard structure) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one bidirectional arrow is shown in FIG. 6, but it does not mean that there is only one bus or one type of bus.

memory for storing programs. Specifically, the program may include program code, and the program code includes computer operation instructions. The memory may include memory and non-volatile memory and provide instructions and data to the processor.

The processor reads the corresponding computer program from the non-volatile memory into the memory and runs it, forming a firmware upgrade device on a logical level. The processor executes the program stored in the memory, and is specifically used to perform the following operations:

Encrypt the first firmware file with the second key to obtain the second firmware file;

The second firmware file is verified by using a preset verification algorithm to obtain a first verification value;

Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value.

Optionally, as an embodiment, the sending a firmware upgrade instruction to the terminal device includes:

A firmware upgrade instruction is sent to the terminal device through a lightweight transmission protocol.

Optionally, as an embodiment, the second key includes: an AES key.

Optionally, as an embodiment, the preset verification algorithm includes: SHA256 verification algorithm, SHA128 verification algorithm or MD5 verification algorithm.

Optionally, as an embodiment, the method further includes:

Status information reported by the terminal device is received, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

Optionally, as an embodiment, the method further includes:

Obtain the first firmware file, where the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key.

The above-mentioned method performed by the firmware upgrade apparatus disclosed in the embodiment shown in FIG. 6 of this specification may be applied to a processor, or implemented by a processor. A processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above-mentioned method can be completed by a hardware integrated logic circuit in a processor or an instruction in the form of software. The above-mentioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of this specification can be implemented or executed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the methods disclosed in conjunction with the embodiments of this specification may be directly embodied as being executed by a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules may be located in random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, registers and other storage media mature in the art. The storage medium is located in the memory, and the processor reads the information in the memory, and completes the steps of the above method in combination with its hardware.

The electronic device can also execute the method shown in FIG. 2 , and implement the functions of the firmware upgrade apparatus in the embodiment shown in FIG. 2 , which will not be repeated in the embodiments of this specification.

FIG. 7 is a schematic structural diagram of an electronic device according to another embodiment of the present specification. The electronic device may be a terminal device. As shown in FIG. 7 , at the hardware level, the electronic device includes a processor, and optionally an internal bus, network interface, storage. The memory may include memory, such as high-speed random-access memory (Random-Access Memory, RAM), or may also include non-volatile memory (non-volatile memory), such as at least one disk memory. Of course, the electronic equipment may also include hardware required for other services.

The processor, the network interface, and the memory can be connected to each other through an internal bus, which can be an ISA (Industry Standard Architecture, industry standard architecture) bus, a PCI (Peripheral Component Interconnect, peripheral component interconnect standard) bus or an EISA (Extended Industry Standard) bus. StandardArchitecture, extended industry standard structure) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one bidirectional arrow is used in FIG. 7, but it does not mean that there is only one bus or one type of bus.

memory for storing programs. Specifically, the program may include program code, and the program code includes computer operation instructions. The memory may include memory and non-volatile memory and provide instructions and data to the processor.

The processor reads the corresponding computer program from the non-volatile memory into the memory and runs it, forming a firmware upgrade device on a logical level. The processor executes the program stored in the memory, and is specifically used to perform the following operations:

Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate;

Verifying the digital certificate corresponding to the download address of the second firmware file;

If the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

The second firmware file is verified by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file;

Perform firmware upgrade on the terminal device based on the first firmware file.

Optionally, as an embodiment, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key;

The method further includes: decrypting the first firmware file with a pre-stored third key to obtain the source firmware file, where the third key is a public key corresponding to the first key;

The performing firmware upgrade on the terminal device based on the first firmware file includes:

Perform firmware upgrade on the terminal device using the source firmware file.

Optionally, as an embodiment, the obtaining the second firmware file according to the download address of the second firmware file includes:

Obtain the certificate corresponding to the download address of the second firmware file;

Verify the obtained certificate through the root certificate of the pre-stored legal download address;

If the verification is passed, the second firmware file is obtained from the download address of the second firmware file.

Optionally, as an embodiment, the method further includes:

Using the fourth key to encrypt the BootLoader of the terminal device, and verifying the encrypted BootLoader to obtain a third check value;

The third check value is stored in the flash memory of the terminal device.

Optionally, as an embodiment, the third key is pre-stored in the BootLoader.

Optionally, as an embodiment, the use of the source firmware file to perform firmware upgrade on the terminal device includes:

Write the source firmware file into the flash memory of the terminal device.

Optionally, as an embodiment, the method further includes:

Report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

The above-mentioned method performed by the firmware upgrade apparatus disclosed in the embodiment shown in FIG. 7 of this specification may be applied to a processor, or implemented by a processor. A processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above-mentioned method can be completed by a hardware integrated logic circuit in a processor or an instruction in the form of software. The above-mentioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of this specification can be implemented or executed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the methods disclosed in conjunction with the embodiments of this specification may be directly embodied as being executed by a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules may be located in random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, registers and other storage media mature in the art. The storage medium is located in the memory, and the processor reads the information in the memory, and completes the steps of the above method in combination with its hardware.

The electronic device can also execute the method shown in FIG. 3 , and implement the functions of the firmware upgrade apparatus in the embodiment shown in FIG. 3 , which will not be repeated in the embodiments of this specification.

Embodiments of the present specification also provide a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, and the one or more programs include instructions, and the instructions, when used by a portable electronic device including a plurality of application programs When executed, the portable electronic device can be made to execute the method of the embodiment shown in FIG. 2 , and is specifically used to execute the following method:

Encrypt the first firmware file with the second key to obtain the second firmware file;

The second firmware file is verified by using a preset verification algorithm to obtain a first verification value;

Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file.

Embodiments of the present specification also provide a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, and the one or more programs include instructions, and the instructions, when used by a portable electronic device including a plurality of application programs When executed, the portable electronic device can be made to execute the method of the embodiment shown in FIG. 3, and is specifically used to execute the following method:

Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate;

Verifying the digital certificate corresponding to the download address of the second firmware file;

If the verification is passed, obtain the second firmware file according to the download address of the second firmware file;

The second firmware file is verified by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file;

Perform firmware upgrade on the terminal device based on the first firmware file.

In a word, the above descriptions are only preferred embodiments of the present specification, and are not intended to limit the protection scope of the present specification. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included within the protection scope of this specification.

The systems, devices, modules or units described in the above embodiments may be specifically implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer can be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or A combination of any of these devices.

Computer-readable media includes both persistent and non-permanent, removable and non-removable media, and storage of information may be implemented by any method or technology. Information may be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Flash Memory or other memory technology, Compact Disc Read Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device. Computer-readable media, as defined herein, excludes transitory computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements, but also Other elements not expressly listed or inherent to such a process, method, article of manufacture or apparatus are also included. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, article of manufacture or device that includes the element.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to the partial descriptions of the method embodiments.

Claims (19)

1. A firmware upgrade method, applied to a server, the method comprising: Encrypt the first firmware file with the second key to obtain the second firmware file; The second firmware file is verified by using a preset verification algorithm to obtain a first verification value; Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file. 2. The method according to claim 1, wherein the sending a firmware upgrade instruction to the terminal device comprises: A firmware upgrade instruction is sent to the terminal device through a lightweight transmission protocol. 3. The method of claim 1, the second key comprising: an AES key. 4. The method according to claim 1, wherein the preset verification algorithm comprises: SHA256 verification algorithm, SHA128 verification algorithm or MD5 verification algorithm. 5. The method of claim 1, further comprising: Status information reported by the terminal device is received, where the status information includes at least one of the following: firmware version information and firmware installation progress information. 6. The method of claim 1, further comprising: Obtain the first firmware file, where the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key. 7. A firmware upgrade method, applied to a terminal device, the method comprising: Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate; Verifying the digital certificate corresponding to the download address of the second firmware file; If the verification is passed, obtain the second firmware file according to the download address of the second firmware file; The second firmware file is verified by using the preset verification algorithm to obtain a second verification value; If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file; Perform firmware upgrade on the terminal device based on the first firmware file. 8. The method according to claim 7, wherein the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key; The method further includes: decrypting the first firmware file with a pre-stored third key to obtain the source firmware file, where the third key is a public key corresponding to the first key; The performing firmware upgrade on the terminal device based on the first firmware file includes: Perform firmware upgrade on the terminal device using the source firmware file. 9. The method according to claim 7, wherein the digital certificate corresponding to the download address of the second firmware file is verified; if the verification is passed, then the download address of the second firmware file is obtained. Second firmware file, including: Obtain the digital certificate corresponding to the download address of the second firmware file; Verify the obtained digital certificate through the root certificate of the pre-stored legal download address; If the verification is passed, the second firmware file is obtained from the download address of the second firmware file. 10. The method of claim 8, further comprising: Encrypt the boot-loading BootLoader of the terminal device with a fourth key, and verify the encrypted BootLoader to obtain a third check value; The third check value is stored in the flash memory of the terminal device. 11. The method of claim 10, wherein the third key is pre-stored in the BootLoader. 12. The method according to claim 8, wherein using the source firmware file to perform firmware upgrade on the terminal device, comprising: Write the source firmware file into the flash memory of the terminal device. 13. The method of claim 8, further comprising: Report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information. 14. A firmware upgrade device, applied to a server, the device comprising: an encryption module for encrypting the first firmware file with a second key to obtain a second firmware file; a first verification module, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value; A sending module, configured to send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second firmware file The key and the first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the validity of the download address of the second firmware file. 15. A firmware upgrade apparatus, applied to a terminal device, the apparatus comprising: The instruction receiving module is used to receive the firmware upgrade instruction sent by the server, and the firmware upgrade instruction carries the download address, the second key and the first check value of the second firmware file, and the second firmware file adopts the first check value. Obtained by encrypting the first firmware file with the second key, and the first check value is obtained by verifying the second firmware file by using a preset check algorithm; the download address of the second firmware file corresponds to Set up with a digital certificate; a download module, configured to verify the digital certificate corresponding to the download address of the second firmware file; if the verification is passed, obtain the second firmware file according to the download address of the second firmware file; a second verification module, configured to perform verification on the second firmware file by using the preset verification algorithm to obtain a second verification value; a decryption module, configured to decrypt the second firmware file by using the second key to obtain the first firmware file when the second check value matches the first check value; An upgrade module, configured to upgrade the firmware of the terminal device based on the first firmware file. 16. An electronic device comprising: processor; and memory arranged to store computer-executable instructions which, when executed, cause the processor to: Encrypt the first firmware file with the second key to obtain the second firmware file; The second firmware file is verified by using a preset verification algorithm to obtain a first verification value; Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file. 17. An electronic device comprising: processor; and memory arranged to store computer-executable instructions which, when executed, cause the processor to: Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate; Verifying the digital certificate corresponding to the download address of the second firmware file; If the verification is passed, obtain the second firmware file according to the download address of the second firmware file; The second firmware file is verified by using the preset verification algorithm to obtain a second verification value; If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file; The firmware of the terminal device is upgraded based on the first firmware file. 18. A computer-readable storage medium storing one or more programs that, when executed by an electronic device comprising a plurality of application programs, cause the electronic device to execute Do the following: Encrypt the first firmware file with the second key to obtain the second firmware file; The second firmware file is verified by using a preset verification algorithm to obtain a first verification value; Send a firmware upgrade instruction to the terminal device, the firmware upgrade instruction is used to instruct the terminal device to perform firmware upgrade, and the firmware upgrade instruction carries the download address of the second firmware file, the second key and the The first check value; the download address of the second firmware file is correspondingly provided with a digital certificate, which is used by the terminal device to verify the legitimacy of the download address of the second firmware file. 19. A computer-readable storage medium storing one or more programs that, when executed by an electronic device including a plurality of application programs, cause the electronic device to execute Do the following: Receive a firmware upgrade instruction sent by the server, where the firmware upgrade instruction carries the download address, the second key, and the first check value of the second firmware file, and the second firmware file uses the second key to pair the first The firmware file is encrypted, and the first check value is obtained by using a preset verification algorithm to verify the second firmware file; the download address of the second firmware file is correspondingly provided with a digital certificate; Verifying the digital certificate corresponding to the download address of the second firmware file; If the verification is passed, obtain the second firmware file according to the download address of the second firmware file; The second firmware file is verified by using the preset verification algorithm to obtain a second verification value; If the second check value matches the first check value, decrypt the second firmware file by using the second key to obtain the first firmware file; Perform firmware upgrade on the terminal device based on the first firmware file.

Images