WO2022252330A1 - Patch-based update method and system for embedded operating system - Google Patents

Abstract

A patch-based update method and system for an embedded operating system, which method and system relate to the field of smart terminals and smart cards. The method comprises: creating a BOOT area, an OS area, a user data area, a patch information area, a patch code area and a variable area in a storage space of an embedded operating system (S1); generating a key on the basis of the version number of the embedded operating system and a random number generated by the embedded operating system (S2); encrypting a patch for the embedded operating system on the basis of the key, and a FOTA server sending the encrypted patch to a smart terminal to which the embedded operating system belongs (S3); and the smart terminal receiving the patch, decrypting same on the basis of the key, and completing the upgrading and updating of the embedded operating system on the basis of the decrypted patch (S4). By means of the method, the upgrade costs of an embedded operating system can be effectively reduced, and the normal use thereof by a user is ensured.

Description

A patch update method and system for an embedded operating system technical field

The invention relates to the field of smart terminals and smart cards, in particular to a patch update method and system for an embedded operating system.

Background technique

With the popularity of smart terminals and smart cards, smart terminals and smart cards have been widely used in various fields of life, providing great convenience for daily life. However, after the smart terminal device or smart card is sold to the customer, if it is found that the smart terminal device or smart card has a functional bug (loophole), or needs to be expanded, it is difficult to upgrade the smart terminal device or smart card by means of a recall; , if the recall is upgraded, the operating cost will be very high, and the recall process may also cause irreparable losses to customers.

Contents of the invention

Aiming at the defects existing in the prior art, the object of the present invention is to provide a patch update method and system for an embedded operating system, which can effectively reduce the upgrade cost of the embedded operating system and ensure the normal use of the user.

In order to achieve the above object, the patch update method of a kind of embedded operating system provided by the present invention specifically comprises the following steps:

Create BOOT area, OS area, user data area, patch information area, patch code area and variable area in the storage space of the embedded operating system;

Generate a key based on the version number of the embedded operating system and the random number generated by the embedded operating system;

The patch of the embedded operating system is encrypted based on the key, and the FOTA server sends the encrypted patch to the intelligent terminal to which the embedded operating system belongs;

The smart terminal receives the patch and decrypts it based on the key, and completes the upgrade of the embedded operating system based on the decrypted patch.

On the basis of the above technical solutions,

The BOOT area is used to save interrupt vector tables, communication codes, encryption and decryption codes and FLASH/EEPROM read and write codes;

The OS area is used to store OS codes;

The user data area is used to store data to be saved during OS operation;

The patch information area is used to store the patch effective flag, patch version information and patch length;

The patch code area is used to store patches;

The variable area is used to store temporary scalars generated by the operating process of the OS.

On the basis of the above technical solution, before generating the key based on the version number of the embedded operating system and the random number generated by the embedded operating system, it also includes:

Based on the network communication method, the FOTA server queries the version number of the embedded operating system;

The smart terminal sends the version number of the embedded operating system to the FOTA server;

The FOTA server judges whether the embedded operating system needs to be upgraded based on the version number of the embedded operating system:

If so, generate a key based on the version number of the embedded operating system and the random number generated by the embedded operating system;

If not, end.

On the basis of the above technical solution, the random number generated based on the version number of the embedded operating system and the embedded operating system is used to generate a key, and the specific steps include:

The embedded operating system generates random numbers and sends the generated random numbers to the FOTA server;

The FOTA server fills the random number and the version number of the embedded operating system as a dispersion factor, and disperses the encryption and decryption keys for patch download to obtain the key for encrypting the patch;

The embedded operating system fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the encryption and decryption keys for downloading the patch, and obtains the key for decrypting the patch.

On the basis of the above technical solution, before encrypting the patch of the embedded operating system based on the key, it also includes:

Smart terminal manufacturers develop and generate patches for embedded operating systems, and convert the patches into HEX or BIN files;

The FOTA server obtains the HEX or BIN file and packs the HEX or BIN file.

On the basis of the above technical solution, the patch of the embedded operating system is encrypted based on the key, and the FOTA server sends the encrypted patch to the intelligent terminal to which the embedded operating system belongs. The specific steps include:

The FOTA server uses the key used to encrypt the patch to encrypt the packaged HEX or BIN file to obtain the patch frame;

The FOTA server sends the patch frame to the intelligent terminal to which the embedded operating system belongs.

On the basis of the above technical solution, the smart terminal receives the patch and decrypts it based on the key, and the specific steps include:

The smart terminal receives the patch frame sent by the FOTA server;

The smart terminal uses the temporary patch download decryption key to decrypt the patch frame to obtain the patch until all the patch frames are received and decrypted;

Among them, the generation process of the temporary patch download decryption key is as follows: the smart terminal fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the patch download encryption and decryption keys stored by itself, and obtains the temporary patch download decryption key .

On the basis of the above technical solution, after all the patch frames are received and decrypted, it also includes: activating the patch program, saving the patch effective flag, patch version information and patch length.

On the basis of the above-mentioned technical solution, the upgrade update of the embedded operating system is completed based on the decrypted patch, and the specific steps include:

The FOTA server sends a patch activation command to the smart terminal, and the patch activation command includes a CRC32 check code;

The smart terminal receives the patch activation command and judges whether the patch CRC32 check code stored by itself is consistent with the CRC32 check code in the patch activation command:

If so, modify the activation flag of the patch to be activated, and enable the patch, and then complete the upgrade of the embedded operating system based on the patch;

If not, end.

A kind of patch updating system of embedded operating system provided by the present invention comprises:

Divide modules, which are used to create BOOT area, OS area, user data area, patch information area, patch code area and variable area in the storage space of the embedded operating system;

A generation module, which is used to generate a key based on the embedded operating system version number and the random number generated by the embedded operating system;

A sending module, which is used to encrypt the patch of the embedded operating system based on the key, and drives the FOTA server to send the encrypted patch to the smart terminal to which the embedded operating system belongs;

The update module is used to drive the smart terminal to receive the patch and decrypt it based on the key, and complete the upgrade and update of the embedded operating system based on the decrypted patch.

Compared with the prior art, the present invention has the advantages that: after encrypting the patch of the embedded operating system, the FOTA server sends the encrypted patch to the smart terminal to which the embedded operating system belongs, and the smart terminal receives and decrypts the patch, based on The decrypted patch completes the upgrade and update of the embedded operating system, that is, the upgrade and update of the embedded operating system is realized through the network, without recalling the smart terminal, which effectively reduces the upgrade cost of the embedded operating system and ensures the normal use of the user.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is a flow chart of a patch update method for an embedded operating system in an embodiment of the present invention.

Detailed ways

An embodiment of the present invention provides a patch update method for an embedded operating system. After encrypting the patch of the embedded operating system, the FOTA server sends the encrypted patch to the smart terminal to which the embedded operating system belongs, and the smart terminal receives the patch and Decryption, the upgrade of the embedded operating system is completed based on the decrypted patch, that is, the upgrade and update of the embedded operating system is realized through the network, without recalling the smart terminal, which effectively reduces the upgrade cost of the embedded operating system and guarantees the user's safety. Normal use. Correspondingly, the embodiment of the present invention also provides a patch update system for an embedded operating system.

In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments It is a part of the embodiments of this application, but not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

Referring to Fig. 1, an embodiment of the present invention provides a patch update method for an embedded operating system, which is used to perform FOTA (Firmware Over-the-Air, software upgrade over the air for intelligent terminals) to smart devices or smart cards that meet the following characteristics ) operation: 1. The smart device or smart card is already in normal use; 2. There is a functional bug that needs to be modified; 3. There is a function expansion that needs to be supported, and the system function needs to be updated; 4. The operating system update supports FOTA; 5. The operating system is updated The process does not affect user data. The embedded operating system described in the embodiment of the present invention includes a smart card COS (China Operating System, autonomous operating system).

Specifically, a patch update method for an embedded operating system in an embodiment of the present invention includes the following steps:

S1: Create a BOOT (boot) area, an OS (operation system, operating system) area, a user data area, a patch information area, a patch code area, and a variable area in the storage space of the embedded operating system.

In the embodiment of the present invention, the BOOT area is used to save the interrupt vector table, communication codes, encryption and decryption codes, and FLASH (flash memory)/EEPROM (Electrically Erasable Programmable Read-Only Memory, Electrically Erasable Programmable Read-Only Memory) read and write codes, BOOT The area can be ROM (Read-Only Memory, read-only memory); the OS area is used to save the OS code, and the OS area also includes ECASD (Embedded-Controlling Authority Security Domain, embedded control authorization security domain), download patches for the entire system The function is completed by ECASD, the OS area can be ROM; the user data area is used to store the data that needs to be saved during the operation of the OS, and the user data area is a non-volatile storage area that will not lose the power-off information; the patch information area is used to store the patch The patch information area is a non-volatile storage area; the patch code area is used to store patches, that is, the patch code is stored, and the patch code area is a non-volatile storage area; the variable area is used To store temporary scalars generated during OS operation, the variable area is RAM (Random Access Memory, random access memory) area, and the power-off information is lost.

S2: Generate a key based on the version number of the embedded operating system and the random number generated by the embedded operating system;

S3: Encrypt the patch of the embedded operating system based on the key, and the FOTA server sends the encrypted patch to the smart terminal to which the embedded operating system belongs;

S4: The smart terminal receives the patch and decrypts it based on the key, and completes the upgrade of the embedded operating system based on the decrypted patch.

In the embodiment of the present invention, before generating the key based on the embedded operating system version number and the random number generated by the embedded operating system, it also includes:

S201: Based on the network communication method, the FOTA server queries the version number of the embedded operating system;

S202: The smart terminal sends the version number of the embedded operating system to the FOTA server;

Specifically, the FOTA server queries the version number, OS checksum, patch activation status and checksum of the embedded operating system through the network, and the query commands are shown in Table 1 below:

Table 1

value	length	illustrate
80	1	CLA
CA	1	INS
2A	1	P1
05	1	P2
0E	1	Le

In Table 1, CLA indicates the instruction category, INS indicates the instruction code, P1 indicates parameter 1, P2 indicates parameter 2, and Le indicates the expected return data length of the instruction.

The smart terminal returns data to the query command, and the data format is: OS version number (2 bytes) + OS checksum (4 bytes) + patch activation status (4 bytes) + patch checksum (4 bytes ).

S203: The FOTA server judges whether the embedded operating system needs to be upgraded based on the version number of the embedded operating system: if so, generates a key based on the version number of the embedded operating system and the random number generated by the embedded operating system; if not, ends .

In the embodiment of the present invention, the key is generated based on the version number of the embedded operating system and the random number generated by the embedded operating system, and the specific steps include:

S211: The embedded operating system generates a random number, and sends the generated random number to the FOTA server; the generated random number is 8 bytes.

The FOTA server sends a random number generation command to the embedded operating system, and the embedded operating system generates a random number based on the random number generation command. The random number generation command is shown in Table 2 below:

Table 2

value	length	illustrate
80	1	CLA
E2	1	INS
88	1	P1
00	1	P2
4	1	Lc
Length	4	Total patch code length
8	1	Le, take an 8-byte random number

S212: The FOTA server fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the encryption and decryption keys for downloading the patch, and obtains the key for encrypting the patch;

Specifically, the FOTA server fills the 8-byte random number and the version number of the embedded operating system into a 16-byte dispersal factor, disperses the encryption and decryption keys for downloading the patch, and obtains the key for encrypting the patch.

S213: The embedded operating system fills the random number and the version number of the embedded operating system as a dispersion factor, and disperses the encryption and decryption keys for downloading the patch to obtain a key for decrypting the patch.

Specifically, the embedded operating system fills the 8-byte random number and the version number of the embedded operating system into a 16-byte dispersion factor, disperses the encryption and decryption keys for downloading the patch, and obtains the key for decrypting the patch .

In the embodiment of the present invention: before encrypting the patch of the embedded operating system based on the key, it also includes:

S311: The smart terminal manufacturer develops and generates a patch for the embedded operating system, and converts the patch into a HEX or BIN file; both HEX and BIN are file formats.

S312: The FOTA server obtains the HEX or BIN file, and packs the HEX or BIN file.

In the embodiment of the present invention: the patch of the embedded operating system is encrypted based on the key, and the FOTA server sends the encrypted patch to the smart terminal to which the embedded operating system belongs. The specific steps include:

S321: the FOTA server encrypts the packaged HEX or BIN file using the key used to encrypt the patch to obtain a patch frame;

The format of the patch frame is shown in Table 3 below:

table 3

value	length	illustrate
80	1	CLA
E2	1	INS
88	1	P1
00	1	P2
xxx	1	Lc
offset	4	Current frame patch data offset
the code	xx-4	Current frame patch code (ciphertext)

S322: The FOTA server sends the patch frame to the smart terminal to which the embedded operating system belongs.

In the embodiment of the present invention, the smart terminal receives the patch and decrypts it based on the key, and the specific steps include:

S401: The smart terminal receives the patch frame sent by the FOTA server;

S402: The smart terminal decrypts the patch frame by using the temporary patch download decryption key pair to obtain the patch, until all the patch frames are received and decrypted.

Among them, the generation process of the temporary patch download decryption key is as follows: the smart terminal fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the patch download encryption and decryption keys stored by itself, and obtains the temporary patch download decryption key .

The FOTA server encrypts the packaged HEX or BIN file with the key used to encrypt the patch, and obtains multiple patch frames. Only one patch frame is sent to the smart terminal each time, and the smart terminal receives the patch frame and decrypts it. , verify the correctness and integrity of the patch frame, store the patch frame if the verification is passed, then the FOTA server sends the next patch frame to the smart terminal, until all the patch frames are sent and stored, after the patch frame is downloaded, verify the checksum .

In the embodiment of the present invention, after all the patch frames are received and decrypted, it further includes: activating the patch program, saving the patch effective flag, patch version information and patch length.

In the embodiment of the present invention, the upgrade update of the embedded operating system is completed based on the decrypted patch, and the specific steps include:

S411: The FOTA server sends a patch activation instruction to the smart terminal, and the patch activation instruction includes a CRC32 check code;

The patch activation instructions are shown in Table 4 below:

Table 4

value	length	illustrate
80	1	CLA
E2	1	INS
88	1	P1
00	1	P2
04	1	Lc
CRC32	4	CRC32 checksum of all patches

S412: The smart terminal receives the patch activation instruction, and judges whether the patch CRC32 check code stored by itself is consistent with the CRC32 check code in the patch activation instruction: if yes, then modify the activation flag of the patch to be activated, and enable the patch, and then Complete the upgrade and update of the embedded operating system based on the patch; if not, end.

For the activation of the patch, the embedded operating system runs related functions to check the activation flag of the patch. If the activation flag of the patch is invalid, continue to run the function. If the activation flag of the patch is valid, it jumps to the entry of the patch function and runs the patch function. .

In the patch update method of the embedded operating system in the embodiment of the present invention, after encrypting the patch of the embedded operating system, the FOTA server sends the encrypted patch to the smart terminal to which the embedded operating system belongs, and the smart terminal receives the patch and decrypts it. Complete the upgrade and update of the embedded operating system based on the decrypted patch, that is, realize the upgrade and update of the embedded operating system through the network, without recalling the smart terminal, effectively reduce the upgrade cost of the embedded operating system, and ensure the normal use of users .

A patch update system for an embedded operating system provided by an embodiment of the present invention includes a division module, a generation module, a sending module and an update module.

The division module is used to create BOOT area, OS area, user data area, patch information area, patch code area and variable area in the storage space of the embedded operating system; the generation module is used to base on the embedded operating system version number and embedded operation The random number generated by the system generates a key; the sending module is used to encrypt the patch of the embedded operating system based on the key, and drives the FOTA server to send the encrypted patch to the smart terminal to which the embedded operating system belongs; the update module uses To drive the smart terminal to receive the patch and decrypt it based on the key, and complete the upgrade of the embedded operating system based on the decrypted patch.

The above descriptions are only specific implementation manners of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the application. Therefore, the present application will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features claimed herein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

Claims (10)

1. A patch updating method for an embedded operating system is characterized in that it specifically comprises the following steps:

   Create BOOT area, OS area, user data area, patch information area, patch code area and variable area in the storage space of the embedded operating system;

   Generate a key based on the version number of the embedded operating system and the random number generated by the embedded operating system;

   The patch of the embedded operating system is encrypted based on the key, and the FOTA server sends the encrypted patch to the intelligent terminal to which the embedded operating system belongs;

   The smart terminal receives the patch and decrypts it based on the key, and completes the upgrade of the embedded operating system based on the decrypted patch.
2. A kind of patch updating method of embedded operating system as claimed in claim 1, is characterized in that:

   The BOOT area is used to save interrupt vector tables, communication codes, encryption and decryption codes and FLASH/EEPROM read and write codes;

   The OS area is used to store OS codes;

   The user data area is used to store data to be saved during OS operation;

   The patch information area is used to store the patch effective flag, patch version information and patch length;

   The patch code area is used to store patches;

   The variable area is used to store temporary scalars generated by the operating process of the OS.
3. The patch updating method of a kind of embedded operating system as claimed in claim 1, is characterized in that, before generating the random number based on embedded operating system version number and embedded operating system, generating key, also includes:

   Based on the network communication method, the FOTA server queries the version number of the embedded operating system;

   The smart terminal sends the version number of the embedded operating system to the FOTA server;

   The FOTA server judges whether the embedded operating system needs to be upgraded based on the version number of the embedded operating system:

   If so, generate a key based on the version number of the embedded operating system and the random number generated by the embedded operating system;

   If not, end.
4. The patch update method of a kind of embedded operating system as claimed in claim 1, is characterized in that, described based on the random number that embedded operating system version number and embedded operating system generate, generate key, concrete steps comprise:

   The embedded operating system generates random numbers and sends the generated random numbers to the FOTA server;

   The FOTA server fills the random number and the version number of the embedded operating system as a dispersion factor, and disperses the encryption and decryption keys for patch download to obtain the key for encrypting the patch;

   The embedded operating system fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the encryption and decryption keys for downloading the patch, and obtains the key for decrypting the patch.
5. The patch update method of a kind of embedded operating system as claimed in claim 4, is characterized in that, before encrypting the patch of embedded operating system based on said key, also comprises:

   Smart terminal manufacturers develop and generate patches for embedded operating systems, and convert the patches into HEX or BIN files;

   The FOTA server obtains the HEX or BIN file and packs the HEX or BIN file.
6. A patch update method for an embedded operating system according to claim 5, wherein the patch of the embedded operating system is encrypted based on the key, and the FOTA server sends the encrypted patch to the embedded The smart terminal to which the operating system belongs, the specific steps include:

   The FOTA server uses the key used to encrypt the patch to encrypt the packaged HEX or BIN file to obtain the patch frame;

   The FOTA server sends the patch frame to the intelligent terminal to which the embedded operating system belongs.
7. A patch update method for an embedded operating system according to claim 6, wherein the smart terminal receives the patch and decrypts it based on the key, and the specific steps include:

   The smart terminal receives the patch frame sent by the FOTA server;

   The smart terminal uses the temporary patch download decryption key to decrypt the patch frame to obtain the patch until all the patch frames are received and decrypted;

   Among them, the generation process of the temporary patch download decryption key is as follows: the smart terminal fills the random number and the version number of the embedded operating system as a dispersion factor, disperses the patch download encryption and decryption keys stored by itself, and obtains the temporary patch download decryption key .
8. The patch update method of a kind of embedded operating system as claimed in claim 7, it is characterized in that, after all patch frames are all received and deciphered, also include: activating the patch program, saving the patch effective sign, patch version information and Patch length.
9. The patch update method of a kind of embedded operating system as claimed in claim 1, is characterized in that, described based on the patch after deciphering completes the upgrading update of embedded operating system, concrete steps comprise:

   The FOTA server sends a patch activation instruction to the smart terminal, and the patch activation instruction includes a CRC32 check code;

   The smart terminal receives the patch activation command and judges whether the patch CRC32 check code stored by itself is consistent with the CRC32 check code in the patch activation command:

   If so, modify the activation flag of the patch to be activated, and enable the patch, and then complete the upgrade of the embedded operating system based on the patch;

   If not, end.
10. A patch update system for an embedded operating system, characterized in that it comprises:

    Divide modules, which are used to create BOOT area, OS area, user data area, patch information area, patch code area and variable area in the storage space of the embedded operating system;

    A generation module, which is used to generate a key based on the embedded operating system version number and the random number generated by the embedded operating system;

    A sending module, which is used to encrypt the patch of the embedded operating system based on the key, and drives the FOTA server to send the encrypted patch to the smart terminal to which the embedded operating system belongs;

    The update module is used to drive the smart terminal to receive the patch and decrypt it based on the key, and complete the upgrade and update of the embedded operating system based on the decrypted patch.

Images