CN112203149B

CN112203149B - Video networking software updating method and device based on domestic password

Info

Publication number: CN112203149B
Application number: CN202011418360.5A
Authority: CN
Inventors: 王艳辉; 韩杰; 杨春晖; 陆宏成
Original assignee: Visionvera Information Technology Co Ltd
Current assignee: Hainan Shilian Communication Technology Co ltd
Priority date: 2020-12-07
Filing date: 2020-12-07
Publication date: 2021-03-12
Anticipated expiration: 2040-12-07
Also published as: CN112203149A

Abstract

The embodiment of the invention provides a method and a device for updating video networking software based on a domestic password, wherein the method is applied to a video networking terminal and comprises the following steps: the method comprises the steps of decrypting one or more encrypted data packets for version updating, extracting authentication data from corresponding positions of the decrypted data packets respectively, storing data except the authentication data in the data packets as version updating data, generating terminal side signature information according to the version updating data when the authentication data are matched with identification information of a video network terminal, and updating the version by using the version updating data when the terminal side signature information are matched with server side signature information which is received in advance and used for carrying out data security verification on the version updating data. By the embodiment of the invention, the version updating of the video networking terminal is realized, and potential safety hazards of data tampering and falsifying in the data packet are avoided.

Description

Video networking software updating method and device based on domestic password

Technical Field

The invention relates to the technical field of video networking, in particular to a video networking software updating method and device based on domestic passwords.

Background

With the development of the video networking and the continuous expansion of the video networking scale, the devices in the video networking are updated and upgraded for many times.

However, when the devices in the video network are upgraded, the devices in the video network need to obtain the data packet to be upgraded from the video network, and the obtained data packet may have a potential safety hazard, for example, the data packet has a potential safety hazard that data is tampered and falsely used, so that the device in the video network is unsuccessfully upgraded, and the maintenance cost of the devices in the video network is increased.

Disclosure of Invention

In view of the above, it is proposed to provide a method and apparatus for updating domestic password based internet of view software that overcomes or at least partially solves the above problems, comprising:

a video networking software updating method based on domestic passwords is applied to a video networking terminal, and the method comprises the following steps:

obtaining one or more encrypted data packets for version updating;

decrypting the data packets, respectively extracting authentication data from corresponding positions of the decrypted data packets, and storing data in the data packets except the authentication data as version update data;

when the identity verification data is matched with the identification information of the video network terminal, generating terminal side signature information according to the version updating data;

and when the terminal side signature information is matched with the server side signature information which is received in advance and used for carrying out data security verification on the version updating data, adopting the version updating data to carry out version updating.

Optionally, the method further comprises:

receiving server side signature information which is sent by a video network server and used for carrying out data security verification on the version updating data; the server side signature information is acquired from the heartbeat message received by the video network server.

Optionally, the obtaining one or more encrypted data packets for version update includes:

sending a version update request to a video network storage service system so that the video network storage service system sends one or more encrypted data packets for version update to a video network server;

and obtaining the one or more encrypted data packets for version updating from the video network server.

Optionally, before or while the sending the version update request to the video networking storage service system, the method further includes:

and sending the authentication data to the video network server.

Optionally, the version update request carries the authentication data.

Optionally, the generating of the terminal-side signature information according to the version update data includes:

acquiring public key information corresponding to the private key information;

and generating terminal side signature information according to the public key information and the version updating data.

Optionally, before the obtaining one or more encrypted data packets for version update, the method further includes:

receiving first version information for the version update data;

determining current second version information of the video network terminal;

the obtaining one or more encrypted data packets for version updates is performed when the second version information does not match the first version information.

Optionally, the server-side signature information is sent to the internet of view server by an internet of view network management server.

Optionally, the version update data is: and updating data aiming at the version of the application software in the video networking terminal or updating data aiming at the version of the operating system in the video networking terminal.

A video networking software updating device based on domestic passwords is applied to a video networking terminal, and the device comprises:

the data packet acquisition module is used for acquiring one or more encrypted data packets for version updating;

the data packet decryption module is used for decrypting the data packets, respectively extracting the authentication data from the corresponding positions of the decrypted data packets, and storing the data except the authentication data in the data packets as version updating data;

the matching module is used for generating terminal side signature information according to the version updating data when the identity verification data is matched with the identification information of the video network terminal;

and the version updating module is used for adopting the version updating data to update the version when the terminal side signature information is matched with the server side signature information which is received in advance and used for carrying out data security verification on the version updating data.

The embodiment of the invention has the following advantages:

in the embodiment of the invention, one or more encrypted data packets for version updating are obtained, the data packets are decrypted, the authentication data are respectively extracted from the corresponding positions of the decrypted data packets, the data except the authentication data in the data packets are stored as version updating data, when the authentication data are matched with the identification information of the video network terminal, terminal side signature information is generated according to the version updating data, when the terminal side signature information is matched with the server side signature information which is received in advance and used for carrying out data security verification on the version updating data, the version updating is carried out by adopting the version updating data, the version updating of the video network terminal is realized, and the potential safety hazards of tampering and falsifying the data in the data packets are avoided by matching the signature of the data packets, the success rate of upgrading the video network terminal is improved, and the maintenance cost of the video network terminal is reduced.

Drawings

In order to more clearly illustrate the technical solution of the present invention, the drawings needed to be used in the description of the present invention will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.

Fig. 1 is a schematic networking diagram of a video network according to an embodiment of the present invention;

fig. 2 is a schematic hardware structure diagram of a node server according to an embodiment of the present invention;

fig. 3 is a schematic hardware structure diagram of an access switch according to an embodiment of the present invention;

fig. 4 is a schematic hardware structure diagram of an ethernet protocol conversion gateway according to an embodiment of the present invention;

FIG. 5a is a flowchart illustrating steps of a method for updating the software of the video networking based on the domestic password according to an embodiment of the present invention;

FIG. 5b is a diagram illustrating an exemplary architecture of a domestic password-based method for updating the software of the video networking according to an embodiment of the present invention;

FIG. 6 is a flowchart illustrating steps of another method for updating the Internet of things software based on the domestic password according to an embodiment of the present invention;

FIG. 7 is a diagram illustrating an example of a method for updating the Internet of things software based on the domestic password according to an embodiment of the present invention;

fig. 8 is a schematic structural diagram of a video networking software updating apparatus based on a domestic password according to an embodiment of the present invention.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in further detail below. It is to be understood that the embodiments described are only a few embodiments of the present invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

The video networking is an important milestone for network development, is a real-time network, can realize high-definition video real-time transmission, and pushes a plurality of internet applications to high-definition video, and high-definition faces each other.

The video networking adopts a real-time high-definition video exchange technology, can integrate required services such as dozens of services of video, voice, pictures, characters, communication, data and the like on a system platform on a network platform, such as high-definition video conference, video monitoring, intelligent monitoring analysis, emergency command, digital broadcast television, delayed television, network teaching, live broadcast, VOD on demand, television mail, Personal Video Recorder (PVR), intranet (self-office) channels, intelligent video broadcast control, information distribution and the like, and realizes high-definition quality video broadcast through a television or a computer.

To better understand the embodiments of the present invention, the following description refers to the internet of view:

some of the technologies applied in the video networking are as follows:

network Technology (Network Technology)

Network technology innovation in video networking has improved over traditional Ethernet (Ethernet) to face the potentially enormous video traffic on the network. Unlike pure network Packet Switching (Packet Switching) or network Circuit Switching (Circuit Switching), the Packet Switching is adopted by the technology of the video networking to meet the Streaming requirement. The video networking technology has the advantages of flexibility, simplicity and low price of packet switching, and simultaneously has the quality and safety guarantee of circuit switching, thereby realizing the seamless connection of the whole network switching type virtual circuit and the data format.

Switching Technology (Switching Technology)

The video network adopts two advantages of asynchronism and packet switching of the Ethernet, eliminates the defects of the Ethernet on the premise of full compatibility, has end-to-end seamless connection of the whole network, is directly communicated with a user terminal, and directly bears an IP data packet. The user data does not require any format conversion across the entire network. The video networking is a higher-level form of the Ethernet, is a real-time exchange platform, can realize the real-time transmission of the whole-network large-scale high-definition video which cannot be realized by the existing Internet, and pushes a plurality of network video applications to high-definition and unification.

Server Technology (Server Technology)

The server technology on the video networking and unified video platform is different from the traditional server, the streaming media transmission of the video networking and unified video platform is established on the basis of connection orientation, the data processing capacity of the video networking and unified video platform is independent of flow and communication time, and a single network layer can contain signaling and data transmission. For voice and video services, the complexity of video networking and unified video platform streaming media processing is much simpler than that of data processing, and the efficiency is greatly improved by more than one hundred times compared with that of a traditional server.

Storage Technology (Storage Technology)

The super-high speed storage technology of the unified video platform adopts the most advanced real-time operating system in order to adapt to the media content with super-large capacity and super-large flow, the program information in the server instruction is mapped to the specific hard disk space, the media content is not passed through the server any more, and is directly sent to the user terminal instantly, and the general waiting time of the user is less than 0.2 second. The optimized sector distribution greatly reduces the mechanical motion of the magnetic head track seeking of the hard disk, the resource consumption only accounts for 20% of that of the IP internet of the same grade, but concurrent flow which is 3 times larger than that of the traditional hard disk array is generated, and the comprehensive efficiency is improved by more than 10 times.

Network Security Technology (Network Security Technology)

The structural design of the video network completely eliminates the network security problem troubling the internet structurally by the modes of independent service permission control each time, complete isolation of equipment and user data and the like, generally does not need antivirus programs and firewalls, avoids the attack of hackers and viruses, and provides a structural carefree security network for users.

Service Innovation Technology (Service Innovation Technology)

The unified video platform integrates services and transmission, and is not only automatically connected once whether a single user, a private network user or a network aggregate. The user terminal, the set-top box or the PC are directly connected to the unified video platform to obtain various multimedia video services in various forms. The unified video platform adopts a menu type configuration table mode to replace the traditional complex application programming, can realize complex application by using very few codes, and realizes infinite new service innovation.

Networking of the video network is as follows:

the video network is a centralized control network structure, and the network can be a tree network, a star network, a ring network and the like, but on the basis of the centralized control node, the whole network is controlled by the centralized control node in the network.

As shown in fig. 1, the video network is divided into an access network and a metropolitan network.

The devices of the access network part can be mainly classified into 3 types: node server, access switch, terminal (including various set-top boxes, coding boards, memories, etc.). The node server is connected to an access switch, which may be connected to a plurality of terminals and may be connected to an ethernet network.

The node server is a node which plays a centralized control function in the access network and can control the access switch and the terminal. The node server can be directly connected with the access switch or directly connected with the terminal.

Similarly, devices of the metropolitan network portion may also be classified into 3 types: a metropolitan area server, a node switch and a node server. The metro server is connected to a node switch, which may be connected to a plurality of node servers.

The node server is a node server of the access network part, namely the node server belongs to both the access network part and the metropolitan area network part.

The metropolitan area server is a node which plays a centralized control function in the metropolitan area network and can control a node switch and a node server. The metropolitan area server can be directly connected with the node switch or directly connected with the node server.

Therefore, the whole video network is a network structure with layered centralized control, and the network controlled by the node server and the metropolitan area server can be in various structures such as tree, star and ring.

The access network part can form a unified video platform (the part in the dotted circle), and a plurality of unified video platforms can form a video network; each unified video platform may be interconnected via metropolitan area and wide area video networking.

1. Video networking device classification

1.1 devices in the video network of the embodiment of the present invention can be mainly classified into 3 types: server, exchanger (including Ethernet protocol conversion gateway), terminal (including various set-top boxes, code board, memory, etc.). The video network as a whole can be divided into a metropolitan area network (or national network, global network, etc.) and an access network.

1.2 wherein the devices of the access network part can be mainly classified into 3 types: node server, access exchanger (including Ethernet protocol conversion gateway), terminal (including various set-top boxes, coding board, memory, etc.).

The specific hardware structure of each access network device is as follows:

a node server:

as shown in fig. 2, the system mainly includes a network interface module 201, a switching engine module 202, a CPU module 203, and a disk array module 204;

the network interface module 201, the CPU module 203, and the disk array module 204 all enter the switching engine module 202; the switching engine module 202 performs an operation of looking up the address table 205 on the incoming packet, thereby obtaining the direction information of the packet; and stores the packet in a queue of the corresponding packet buffer 206 based on the packet's steering information; if the queue of the packet buffer 206 is nearly full, it is discarded; the switching engine module 202 polls all packet buffer queues for forwarding if the following conditions are met: 1) the port send buffer is not full; 2) the queue packet counter is greater than zero. The disk array module 204 mainly implements control over the hard disk, including initialization, read-write, and other operations on the hard disk; the CPU module 203 is mainly responsible for protocol processing with an access switch and a terminal (not shown in the figure), configuring an address table 205 (including a downlink protocol packet address table, an uplink protocol packet address table, and a data packet address table), and configuring the disk array module 204.

The access switch:

as shown in fig. 3, the network interface module mainly includes a network interface module (a downlink network interface module 301 and an uplink network interface module 302), a switching engine module 303 and a CPU module 304;

wherein, the packet (uplink data) coming from the downlink network interface module 301 enters the packet detection module 305; the packet detection module 305 detects whether the Destination Address (DA), the Source Address (SA), the packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id) and enters the switching engine module 303, otherwise, discards the stream identifier; the packet (downstream data) coming from the upstream network interface module 302 enters the switching engine module 303; the incoming data packet of the CPU module 304 enters the switching engine module 303; the switching engine module 303 performs an operation of looking up the address table 306 on the incoming packet, thereby obtaining the direction information of the packet; if the packet entering the switching engine module 303 is from the downstream network interface to the upstream network interface, the packet is stored in the queue of the corresponding packet buffer 307 in association with the stream-id; if the queue of the packet buffer 307 is nearly full, it is discarded; if the packet entering the switching engine module 303 is not from the downlink network interface to the uplink network interface, the data packet is stored in the queue of the corresponding packet buffer 307 according to the guiding information of the packet; if the queue of the packet buffer 307 is nearly full, it is discarded.

The switching engine module 303 polls all packet buffer queues, which in this embodiment of the present invention is divided into two cases:

if the queue is from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) the port send buffer is not full; 2) the queued packet counter is greater than zero; 3) obtaining a token generated by a code rate control module;

if the queue is not from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) the port send buffer is not full; 2) the queue packet counter is greater than zero.

The rate control module 308 is configured by the CPU module 304, and generates tokens for packet buffer queues from all downstream network interfaces to upstream network interfaces at programmable intervals to control the rate of upstream forwarding.

The CPU module 304 is mainly responsible for protocol processing with the node server, configuration of the address table 306, and configuration of the code rate control module 308.

Ethernet protocol conversion gateway：

As shown in fig. 4, the apparatus mainly includes a network interface module (a downlink network interface module 401 and an uplink network interface module 402), a switching engine module 403, a CPU module 404, a packet detection module 405, a rate control module 408, an address table 406, a packet buffer 407, a MAC adding module 409, and a MAC deleting module 410.

Wherein, the data packet coming from the downlink network interface module 401 enters the packet detection module 405; the packet detection module 405 detects whether the ethernet MAC DA, the ethernet MAC SA, the ethernet length or frame type, the video network destination address DA, the video network source address SA, the video network packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id); then, the MAC deletion module 410 subtracts MAC DA, MAC SA, length or frame type (2 byte) and enters the corresponding receiving buffer, otherwise, discards it;

the downlink network interface module 401 detects the sending buffer of the port, and if there is a packet, obtains the ethernet MAC DA of the corresponding terminal according to the destination address DA of the packet, adds the ethernet MAC DA of the terminal, the MAC SA of the ethernet protocol gateway, and the ethernet length or frame type, and sends the packet.

The other modules in the ethernet protocol gateway function similarly to the access switch.

A terminal:

the system mainly comprises a network interface module, a service processing module and a CPU module; for example, the set-top box mainly comprises a network interface module, a video and audio coding and decoding engine module and a CPU module; the coding board mainly comprises a network interface module, a video and audio coding engine module and a CPU module; the memory mainly comprises a network interface module, a CPU module and a disk array module.

1.3 devices of the metropolitan area network part can be mainly classified into 2 types: node server, node exchanger, metropolitan area server. The node switch mainly comprises a network interface module, a switching engine module and a CPU module; the metropolitan area server mainly comprises a network interface module, a switching engine module and a CPU module.

2. Video networking packet definition

2.1 Access network packet definition

The data packet of the access network mainly comprises the following parts: destination Address (DA), Source Address (SA), reserved bytes, payload (pdu), CRC.

As shown in the following table, the data packet of the access network mainly includes the following parts:

DA

SA

Reserved

Payload

CRC

wherein:

the Destination Address (DA) is composed of 8 bytes (byte), the first byte represents the type of the data packet (such as various protocol packets, multicast data packets, unicast data packets, etc.), there are 256 possibilities at most, the second byte to the sixth byte are metropolitan area network addresses, and the seventh byte and the eighth byte are access network addresses;

the Source Address (SA) is also composed of 8 bytes (byte), defined as the same as the Destination Address (DA);

the reserved byte consists of 2 bytes;

the payload part has different lengths according to the types of different datagrams, and is 64 bytes if the datagram is various protocols, and is 32 + 1024 = 1056 bytes if the datagram is a unicast datagram, and is of course not limited to the above 2 types;

the CRC consists of 4 bytes and is calculated in accordance with the standard ethernet CRC algorithm.

2.2 metropolitan area network packet definition

The topology of a metropolitan area network is a graph and there may be 2, or even more than 2, connections between two devices, i.e., there may be more than 2 connections between a node switch and a node server, a node switch and a node switch, and a node switch and a node server. However, the metro network address of the metro network device is unique, and in order to accurately describe the connection relationship between the metro network devices, parameters are introduced in the embodiment of the present invention: a label to uniquely describe a metropolitan area network device.

In this specification, the definition of the Label is similar to that of the Label of MPLS (Multi-Protocol Label Switch), and assuming that there are two connections between the device a and the device B, there are 2 labels for the packet from the device a to the device B, and 2 labels for the packet from the device B to the device a. The label is classified into an incoming label and an outgoing label, and assuming that the label (incoming label) of the packet entering the device a is 0x0000, the label (outgoing label) of the packet leaving the device a may become 0x 0001. The network access process of the metro network is a network access process under centralized control, that is, address allocation and label allocation of the metro network are both dominated by the metro server, and the node switch and the node server are both passively executed, which is different from label allocation of MPLS, and label allocation of MPLS is a result of mutual negotiation between the switch and the server.

As shown in the following table, the data packet of the metro network mainly includes the following parts:

DA

SA

Reserved

label (R)

Payload

CRC

Namely Destination Address (DA), Source Address (SA), Reserved byte (Reserved), tag, payload (pdu), CRC. The format of the tag may be defined by reference to the following: the tag is 32 bits with the upper 16 bits reserved and only the lower 16 bits used, and its position is between the reserved bytes and payload of the packet.

Referring to fig. 5a, a flowchart illustrating steps of a method for updating video networking software based on a domestic password according to an embodiment of the present invention is shown, where the method is applicable to a video networking terminal, and as shown in fig. 5b, the video networking terminal may be communicatively connected to a video networking server and a video networking storage service system, respectively, and the video networking server may be communicatively connected to a video networking network management server.

The video network server can be a video network controller, integrates video network audio and video forwarding, set top box control, registration and other functions, the video network terminal can be service landing equipment on the video network, and can be an actual participant or a server of the video network service, the video network terminal can comprise various conference set top boxes, video telephone set top boxes, operation trial teaching set top boxes, streaming media gateways, storage gateways and media synthesizers, the video network management server can control the operations of video network server service opening, terminal registration and the like, and can provide UI interfaces at the same time, and the video network storage service system can be a storage and distribution center of non-real-time resources in the video network and is mainly responsible for video recording, video on demand in the video network and providing version upgrading and other services for the terminals and systems in the video network.

In one example, an end-point of the video network may pre-register with a video network server for normal traffic.

Specifically, the method may include the steps of:

step 501, acquiring one or more encrypted data packets for version updating;

the data packet for version update may be a data packet for version update of application software in the video network terminal, or a data packet for version update of an operating system in the video network terminal.

In the process of version upgrading, whether the corresponding application software in the current video network terminal and/or the operating system is the latest version can be determined, whether the version upgrading is needed is further determined, and when the version upgrading is determined to be needed, one or more encrypted data packets for version upgrading distributed by the video network server can be obtained.

In an embodiment of the present invention, before step 501, the following steps may be further included:

receiving first version information for the version update data; determining current second version information of the video network terminal; the obtaining one or more encrypted data packets for version updates is performed when the second version information does not match the first version information.

The version information may be version information of application software or an operating system.

In the process of version upgrading, data packets of different versions, such as the data packet of the latest version, can be stored in the storage service system of the video networking, and then the video networking server can acquire the data packet in the storage service system of the video networking and determine the version information of the data packet, namely the first version information.

After determining the first version information, the video network server may distribute the first version information to all video network terminals in the video network, and then the video network terminals may receive the first version information for the version update data.

After receiving the first version information, the second version information of the application software corresponding to the first version information in the current video networking terminal and/or the second version information of the operating system corresponding to the first version information can be determined, and then whether the first version information is matched with the second version information can be judged.

When the second version information is judged not to be matched with the first version information, the current networking terminal can be determined to need to be subjected to version updating, and then one or more encrypted data packets for version updating can be acquired.

Step 502, decrypting the data packet, respectively extracting authentication data from corresponding positions of the decrypted data packet, and storing data in the data packet except the authentication data as version update data;

the identity verification data may be information for uniquely identifying the identity of the device, the information for uniquely identifying the identity of the device may be fingerprint information corresponding to the device to be upgraded, a label of the device to be upgraded, and the like, the version update data may be data for updating the version, and the version update data may be: and updating data aiming at the version of the application software in the video network terminal or updating data aiming at the version of the operating system in the video network terminal.

After the data packet is obtained, a preset decryption tool can be used for decrypting the data packet, further, the authentication data can be extracted from the corresponding position of the decrypted data packet, and the data except the authentication data in the data packet is stored as version updating data.

In practical application, complete authentication data can be stored in each data packet, and then the complete authentication data is extracted from the corresponding position of the decrypted data packet; partial data in the identity verification data can be stored in each data packet, partial data of the identity verification data can be extracted from each data packet, and the identity verification data in all the data packets are spliced to obtain complete identity verification data.

As an example, the corresponding location in each data packet where the authentication data is stored may be the same or different.

For example, the corresponding position in each data packet where the authentication data is stored may be a specific bit in the data packet, or may be a plurality of continuous or discontinuous bits in the data packet, and the corresponding position may be determined by the video network server negotiating with the video network terminal in advance.

Step 503, when the authentication data matches the identification information of the video network terminal, generating terminal side signature information according to the version update data;

the service side signature information may be signature information generated according to preset private key information and version update data, and the identification information of the video network terminal may be authentication data corresponding to the video network terminal.

After the identity verification data is extracted, whether the identity verification data is matched with the identification information of the video network terminal or not can be judged, when whether the identity verification data is matched with the identification information of the video network terminal or not is judged, the data packet can be determined to be the data packet corresponding to the video network terminal, the version updating data is the data required by the version updating of the current video network terminal, and then the version updating data can be signed to generate terminal side signature information.

In practical application, partial data of the identity verification data in each data packet can be matched with partial data corresponding to the identification information of the terminal of the video network, when partial data of the identity verification data in each data packet is judged to be consistent with partial data corresponding to the identification information of the video network terminal, it may be determined that the partial data of the authentication data matches the partial data in the identification information of the terminal of the video network, further determining the data packet as the data packet corresponding to the video network terminal, or matching the authentication data with the identification information of the video network terminal after obtaining the complete authentication data, when the identity authentication data is judged to be consistent with the identification information of the video network terminal, the identity authentication data can be determined to be matched with the identification information of the video network terminal, and then the data packet can be determined to be the data packet corresponding to the video network terminal.

When the identity verification data is judged not to be matched with the identification information of the video network terminal, the data packet can be determined not to be the data packet corresponding to the video network terminal, the version updating data corresponding to the data packet is not the data required by the current video network terminal version updating, and the step of signing the version updating data is not executed.

Step 504, when the terminal side signature information matches with the server side signature information received in advance for performing data security verification on the version updating data, performing version updating by using the version updating data.

The server side signature information can be signature information generated according to preset private key information and version updating data, and the server side signature information can be sent to the video network server by the video network management server.

After the terminal side signature information is generated, whether the server side signature information received in advance is matched with the terminal side signature information or not can be judged, and when the terminal side signature information is judged to be matched with the server side signature information, the version updating data can be proved to be not tampered or falsely used, and then the version updating data which are not tampered or falsely used can be adopted for version updating, so that the risk of upgrading failure of the video network terminal is reduced.

When the terminal side signature information is judged not to be matched with the server side signature information, the version updating data can be indicated to be falsified or falsely used, the risk of upgrading the video network terminal is existed, and the step of adopting the version updating data to update the version can not be executed.

In practical application, the video network server can distribute the data packet in the video network storage service system to the video network management server, and can adopt a preset signature tool to sign the data packet so as to obtain server side signature information.

For example, asymmetric encryption techniques may be used to sign the data packet, and server-side signature information may be obtained.

In an embodiment of the present invention, after the video network server obtains the server-side signature information, the administrator may select whether to upgrade the video network terminal in the video network, and then the video network server may respond to the operation of the administrator for version update, and distribute the server-side signature information to all the video network terminals in the video network, and the video network terminals may receive and store the server-side signature information.

Referring to fig. 6, a flowchart illustrating steps of another method for updating internet of view software based on a domestic password according to an embodiment of the present invention is shown, and specifically may include the following steps:

601, receiving server side signature information which is sent by a video network server and used for performing data security verification on the version updating data;

the server-side signature information may be acquired from a heartbeat message received by the video network server, and the server-side signature information may be signature information generated according to preset private key information and version update data.

In practical application, the video network terminal can send a heartbeat message to the video network server at regular time to determine that the video network terminal is normally connected with the video network server, and then the video network server can feed back the heartbeat message including server side signature information used for performing data security verification on version updating data to the video network terminal after receiving the heartbeat message sent by the video network terminal, and the video network terminal can receive the heartbeat message sent by the video network server, and then can obtain the server side signature information from the heartbeat message received by the video network server.

In an embodiment of the present invention, the heartbeat message may further include first version information of the version to be updated.

Step 602, sending a version update request to a video network storage service system, so that the video network storage service system sends one or more encrypted data packets for version update to the video network server;

in the process of version updating, whether the first version information and the second version information are matched or not can be judged, and when the second version information is judged not to be matched with the first version information, a data acquisition request aiming at the version updating can be sent to the video network storage service system so as to acquire one or more encrypted data packets for the version updating distributed by the video network server.

In practical application, after receiving a data acquisition request for version update sent by a video network terminal, a video network storage service system can send a data packet for version update stored in the video network storage service system to a video network server, and then the video network server can uniformly forward the data packet for version update to the video network terminal needing version update.

In an embodiment of the present invention, before or at the same time as step 602, the following steps may be further included:

and sending the authentication data to the video network server.

When the second version information is judged not to be matched with the first version information, the authentication data corresponding to the video network terminal can be sent to the video network server, and then the video network server can load the authentication data sent by the video network terminal into one or more data packets used for version updating, or split the authentication data sent by the video network terminal and respectively load the split authentication data into a plurality of data packets used for version updating.

In an embodiment of the present invention, the version update request carries the authentication data.

Step 603, obtaining the one or more encrypted data packets for version updating from the video network server;

after sending the version update request, the video networking server may send one or more encrypted data packets for version update acquired from the video networking storage service system to all video networking terminals in the video networking, and then the video networking terminals may acquire the one or more encrypted data packets for version update.

Step 604, decrypting the data packets, extracting authentication data from corresponding positions of the decrypted data packets, and storing data in the data packets except the authentication data as version update data;

605, when the authentication data is matched with the identification information of the video network terminal, obtaining public key information corresponding to the private key information;

the private key information can be used for the video network server to sign the version updating data so as to obtain server side signature information, the public key information can correspond to the private key information, and the public key information can be used for the video network server to sign the version updating data so as to obtain terminal side signature information.

After the identity authentication data is extracted, whether the identity authentication data is matched with the identification information of the video network terminal or not can be judged, and when the identity authentication data is judged to be matched with the identification information of the video network terminal or not, the public key information preset in the video network terminal can be obtained.

Step 606, generating terminal side signature information according to the public key information and the version updating data;

after the public key information is acquired, the acquired version update data may be signed by using the public key information, and then terminal-side signature information for the version update data may be generated.

And 607, when the terminal side signature information is matched with the server side signature information which is received in advance and used for performing data security verification on the version updating data, performing version updating by using the version updating data.

In an embodiment of the present invention, the method may further include the steps of:

and when the terminal side signature information is not matched with the server side signature information, sending an alarm message to the video network server.

The warning message may include a message that the version update data is tampered, and a message that the version update data is spoofed.

When the terminal side signature information is judged not to be matched with the server side signature information, the version updating data can be indicated to be tampered or falsely used, and then an alarm message can be sent to the video network server to inform that the version updating data is tampered or falsely used.

In an embodiment of the present invention, after receiving the warning message fed back by the video networking terminal, the video networking server may send the data packet for version update in the video networking storage service system to the video networking terminal again, and when receiving at least one warning message, the video networking server may determine that a potential safety hazard exists in the communication connection between the video networking server and the video networking terminal, and may further reestablish the communication connection with the video networking terminal, so as to improve the security of version update of the video networking terminal.

In the embodiment of the invention, a version updating request is sent to a video network storage service system by receiving server side signature information which is sent by a video network server and used for carrying out data security verification on version updating data, so that the video network storage service system sends one or more encrypted data packets for version updating to the video network server, the one or more encrypted data packets for version updating are obtained from the video network server, the data packets are decrypted, authentication data are respectively extracted from corresponding positions of the decrypted data packets, data except the authentication data in the data packets are stored as the version updating data, when the authentication data are matched with identification information of a video network terminal, public key information corresponding to the private key information is obtained, and according to the public key information and the version updating data, and generating terminal side signature information, and when the terminal side signature information is matched with server side signature information which is received in advance and used for carrying out data security verification on the version updating data, adopting the version updating data to carry out version updating, so that the version updating of the video networking terminal is realized, and by matching the signature of the data packet, potential safety hazards that the data in the data packet is falsified and falsely used are avoided, the success rate of upgrading the video networking terminal is improved, and the maintenance cost of the video networking terminal is reduced.

The following describes an embodiment of a domestic password-based internet of view software updating method provided by the present invention with reference to fig. 7:

1. in the process of version updating, a client corresponding to the video network management server can obtain version updating data aiming at the video network terminal, and sends the version updating data to a video network storage service system, a preset signature tool such as private key information can be adopted to sign the version updating data to obtain server side signature information aiming at the version updating data, and then the server side signature information can be uploaded to the video network management server;

2. after uploading the signature information of the server side, a manager can select a video network terminal in the video network to upgrade and trigger version updating;

3. after the version update is triggered, the video network management server can respond to the operation of a manager for the version update and issue first version information and server side signature information corresponding to the version update data to the video network management server;

4. after receiving the first version information and the server side signature information, the video networking server can issue heartbeat messages with the first version information and the server side signature information to all video networking terminals in the video networking;

5. after receiving a heartbeat message which is sent by a video network server and is provided with first version information and server side signature information, the video network terminal can determine application software which corresponds to the first version information in the video network terminal and/or second version information of an operating system, and then can compare the first version information with the second version information, and when the first version information is judged not to be matched with the second version information, a version updating request aiming at version updating data can be sent to a video network storage service system;

wherein the version update request may include authentication data of the terminal of the video network.

6. After receiving the version updating request sent by the video networking terminal, the video networking storage service system can send the version updating data corresponding to the version updating request to the video networking server;

7. after receiving the version update data sent by the video network storage service system, the video network server can directly extract the authentication data from the version update request sent by the video network terminal, and can also perform corresponding processing, such as simplification, encryption and the like, on the information identifying the equipment identity in the version update request sent by the video network terminal to obtain the authentication data.

After the identity verification data is obtained, the version updating data can be split into one or more data packets, the complete identity verification data is inserted into corresponding positions in at least one data packet to generate one or more data packets for version updating, the complete identity verification data can also be split into multiple sections of identity verification subdata, each section of identity verification subdata is respectively inserted into corresponding positions in at least two data packets to generate multiple data packets for version updating, and then after the data packets for version updating are obtained, one or more data packets for version updating can be issued to corresponding video network terminals;

8. after receiving one or more data packets for version updating sent by the video networking server, the video networking terminal can decrypt the data packets, respectively extract the authentication data from the corresponding positions of the decrypted data packets, store the data in the data packets except the authentication data as version updating data, and further judge whether the extracted authentication data is matched with the authentication data in the video networking terminal.

When the extracted authentication data is judged to be matched with the authentication data in the video network terminal, a signature tool preset in the video network terminal, such as public key information, can be adopted to sign the version updating data to obtain terminal side signature information, whether the server side signature information is matched with the terminal side signature information can be further judged, and when the server side signature information is judged to be matched with the terminal side signature information, version updating is carried out.

It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the illustrated order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments of the present invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred and that no particular act is required to implement the invention.

Referring to fig. 8, a schematic structural diagram of a video networking software updating apparatus based on a domestic password according to an embodiment of the present invention is shown, and the apparatus may be applied to a video networking terminal.

Specifically, the device may include the following modules:

a data packet obtaining module 801, configured to obtain one or more encrypted data packets for version updating;

a data packet decryption module 802, configured to decrypt the data packet, extract authentication data from corresponding positions of the decrypted data packet, and store data in the data packet except the authentication data as version update data;

a matching module 803, configured to generate terminal-side signature information according to the version update data when the authentication data matches the identification information of the video network terminal;

and the version updating module 804 is configured to perform version updating by using the version updating data when the terminal-side signature information matches server-side signature information that is received in advance and used for performing data security verification on the version updating data.

In an embodiment of the present invention, the apparatus further includes:

the heartbeat message receiving module is used for receiving server side signature information which is sent by a video networking server and used for carrying out data security verification on the version updating data; the server side signature information is acquired from the heartbeat message received by the video network server.

In an embodiment of the present invention, the data packet obtaining module 801 includes:

the version updating request sending submodule is used for sending a version updating request to the video network storage service system so that the video network storage service system sends one or more encrypted data packets for version updating to a video network server;

and the data packet acquisition submodule in the video network server is used for acquiring the one or more encrypted data packets for version updating from the video network server.

In an embodiment of the present invention, the apparatus further includes:

and the identity authentication data sending module is used for sending the identity authentication data to the video network server.

In an embodiment of the present invention, the service-side signature information is signature information generated according to preset private key information and the version update data, and the matching module 803 includes:

the public key information acquisition submodule is used for acquiring public key information corresponding to the private key information;

and the terminal side signature information generating submodule is used for generating terminal side signature information according to the public key information and the version updating data.

In an embodiment of the present invention, the apparatus further includes:

a first version information receiving module, configured to receive first version information for the version update data;

the second version information determining module is used for determining the current second version information of the video network terminal;

and the execution module is used for executing the acquisition of the one or more encrypted data packets for version updating when the second version information is not matched with the first version information.

In an embodiment of the present invention, the server-side signature information is sent to the internet of view server by an internet of view network management server.

In an embodiment of the present invention, the apparatus further includes:

and the warning message sending module is used for sending a warning message to the video network server when the terminal side signature information is not matched with the server side signature information.

In an embodiment of the present invention, the version update data is: and updating data aiming at the version of the application software in the video networking terminal or updating data aiming at the version of the operating system in the video networking terminal.

An embodiment of the present invention further provides a terminal for video networking, which may include a processor, a memory, and a computer program stored in the memory and capable of running on the processor, where when the computer program is executed by the processor, the above method for updating video networking software based on a domestic password is implemented.

An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the above method for updating the internet of view software based on the domestic password is implemented.

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

Embodiments of the present invention are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing terminal to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing terminal to cause a series of operational steps to be performed on the computer or other programmable terminal to produce a computer implemented process such that the instructions which execute on the computer or other programmable terminal provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present invention have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the embodiments of the invention.

Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or terminal that comprises the element.

The method and the device for updating the video networking software based on the domestic password are introduced in detail, the principle and the implementation mode of the invention are explained by applying a specific example, and the description of the embodiment is only used for helping to understand the method and the core idea of the invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.

Claims

1. A video networking software updating method based on a domestic password is characterized by being applied to a video networking terminal, and the method comprises the following steps:

obtaining one or more encrypted data packets for version updating;

decrypting the data packets, respectively extracting authentication data from corresponding positions of the decrypted data packets, and storing data in the data packets except the authentication data as version update data; wherein the version updating data is data for version updating;

2. The method of claim 1, further comprising:

3. The method of claim 1 or 2, wherein obtaining one or more encrypted packets for version updates comprises:

4. The method of claim 3, prior to or concurrently with said sending the version update request to the video networking storage services system, further comprising:

and sending the authentication data to the video network server.

5. The method of claim 3, wherein the version update request carries the authentication data.

6. The method according to claim 1 or 2, wherein the server-side signature information is signature information generated according to preset private key information and the version update data, and the generating of the terminal-side signature information according to the version update data includes:

acquiring public key information corresponding to the private key information;

7. The method of claim 6, wherein prior to said obtaining one or more encrypted packets for version updates, further comprising:

receiving first version information for the version update data;

determining current second version information of the video network terminal;

8. The method of claim 2, wherein the server-side signature information is sent to the server by a network management server of the internet of view.

9. The method of claim 1, wherein the version update data is: and updating data aiming at the version of the application software in the video networking terminal or updating data aiming at the version of the operating system in the video networking terminal.

10. A video networking software updating device based on domestic passwords is applied to a video networking terminal, and the device comprises:

the data packet decryption module is used for decrypting the data packets, respectively extracting the authentication data from the corresponding positions of the decrypted data packets, and storing the data except the authentication data in the data packets as version updating data; wherein the version updating data is data for version updating;