CN107396188A - The upgrade method and system of a kind of set top box - Google Patents

The upgrade method and system of a kind of set top box Download PDF

Info

Publication number
CN107396188A
CN107396188A CN201710807034.5A CN201710807034A CN107396188A CN 107396188 A CN107396188 A CN 107396188A CN 201710807034 A CN201710807034 A CN 201710807034A CN 107396188 A CN107396188 A CN 107396188A
Authority
CN
China
Prior art keywords
file
erector
upgrading
downloader
data packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710807034.5A
Other languages
Chinese (zh)
Other versions
CN107396188B (en
Inventor
李垚
陈烨
李登彪
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Cycle Century Technoogy Co Ltd
Original Assignee
Beijing Cycle Century Technoogy Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Cycle Century Technoogy Co Ltd filed Critical Beijing Cycle Century Technoogy Co Ltd
Priority to CN201710807034.5A priority Critical patent/CN107396188B/en
Publication of CN107396188A publication Critical patent/CN107396188A/en
Application granted granted Critical
Publication of CN107396188B publication Critical patent/CN107396188B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/443OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/65Updates

Abstract

The present invention provides a kind of upgrade method and system of set top box, wherein, methods described includes:Downloader is downloaded and decompresses upgrading data packet, and the upgrading data packet includes erector, installation script and the upgrade file Jing Guo digital signature;The downloader is digitally signed verification to the upgrading data packet, after by verification, calls the erector for decompressing and obtaining;The erector performs the installation script that decompression obtains, and with the description content in the installation script, performs updating operation to the upgrade file, and implementing result is fed back into the downloader;When the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and the data dump that the upgrading data packet and decompression are obtained.The technical scheme that the application provides, the memory space that can be saved in set top box.

Description

The upgrade method and system of a kind of set top box
Technical field
The present invention relates to technical field of data processing, the upgrade method and system of more particularly to a kind of set top box.
Background technology
With the popularization of DTV, set top box enters huge numbers of families, turns into essential in people's daily life Receiving terminal for digital television.Wherein, set top box is a kind of information equipment that can strengthen or extend functions of television set.With people Set-top box service demand is continuously increased, at the same in set top box software bug repair there is an urgent need to set top box upgrading function Also become more and more important.
At present, the upgrade method of existing general Linux set-top box softwares system is:Upgrade file packing is issued, machine top The upgraded module (Loader) of box downloads upgrading data check, and is installed according to upgrade logic set in Loader, such as will Some upgrading data of upgrade file write some subregion of system.
However, in such upgrading mode, upgraded module itself may be also required to upgrade, in order to ensure upgraded module itself Upgrading will not power off the situation for causing upgraded module not to be again started up during unexpected power-off because of erasable flash processes, One upgraded module of additional copy is generally required, can so take the memory space of more preciousnesses.
The content of the invention
The present invention provides a kind of upgrade method and system of set top box, the memory space that can be saved in set top box.
To achieve the above object, on the one hand the application provides a kind of upgrade method of set top box, and methods described includes:
Downloader is downloaded and decompresses upgrading data packet, the upgrading data packet include erector, installation script and By the upgrade file of digital signature;
The downloader is digitally signed verification to the upgrading data packet, and after by verification, calling decompresses The erector arrived;
The erector performs the installation script that decompression obtains, right with the description content in the installation script The upgrade file performs updating operation, and implementing result is fed back into the downloader;
When the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the upgrading data The data dump that bag and decompression obtain.
Further, the upgrading data packet generates in the following manner:
The cryptographic Hash of erector, installation script and upgrade file is calculated respectively;
A pair of public and private key are generated, wherein, private key is used to be digitally signed each cryptographic Hash, and public key is described Set top box is preset in the downloader module in the set top box when generating;
Upgrade file Jing Guo digital signature, erector and installation script are compressed packing, generation upgrading data Bag.
Further, each file in the upgrading data packet passes through following processing:
The listed files of catalogue to be packed is obtained, the catalogue to be packed includes being used for the first file for depositing signature file Folder, the second file for depositing erector and installation script and the 3rd file for depositing upgrading data;
Signature file is created, the signature file includes initial information, and the initial information includes the signature file Creation time;
The data in first file, the second file and the 3rd file are digitally signed respectively, and Each digital signature value is deposited in corresponding signature file;
Data in three files after completion digital signature are compressed, to generate upgrading data packet.
Further, after upgrading data packet is decompressed, methods described also includes:
The decompression mark for specifying decompression algorithm feedback is received, when the decompression mark, which characterizes, to be decompressed successfully, the download Device reads the public key being preset in the set top box;
Correspondingly, being digitally signed verification to the upgrading data packet includes:
The signature file in first file is read, and based on numeral corresponding to each data in the signature file Signature value, verification is digitally signed to each data.
Further, when the implementing result characterizes upgrading failure, methods described also includes:
The error code fed back in escalation process is received, and the error code is shown to technical staff.
To achieve the above object, on the other hand the application also provides a kind of upgrade-system of set top box, and the system includes Downloader and erector, wherein:
The downloader, for downloading and decompressing upgrading data packet, the upgrading data packet includes erector, installation Script and the upgrade file Jing Guo digital signature;Verification is digitally signed to the upgrading data packet, after by verification, The erector for calling decompression to obtain;
The erector, the installation script obtained for performing decompression, with the description in the installation script Hold, updating operation is performed to the upgrade file, and implementing result is fed back into the downloader;
Wherein, when the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the upgrading The data dump that packet and decompression obtain.
Further, the system also includes upgrading data packet making module, and the upgrading data packet makes module and is used for The cryptographic Hash of erector, installation script and upgrade file is calculated respectively;Generate a pair of public and private key, wherein, private key be used for pair Each cryptographic Hash is digitally signed, and public key is preset in the downloader mould in the set top box when the set top box generates In block;Upgrade file Jing Guo digital signature, erector and installation script are compressed packing, generate upgrading data packet.
Further, the system also includes:
Listed files acquiring unit, for obtaining the listed files of catalogue to be packed, the catalogue to be packed includes being used for Deposit the first file of signature file, the second file for depositing erector and installation script and upgrade for depositing 3rd file of data;
Signature file creating unit, for creating signature file, the signature file includes initial information, described initial Information includes the creation time of the signature file;
Digital signature unit, for respectively to the number in first file, the second file and the 3rd file According to being digitally signed, and by each digital signature value deposit in corresponding in signature file;
Packaged unit is compressed, for the data in three files after completion digital signature to be compressed, with generation Upgrading data packet.
Further, the system also includes:
Decompression mark receiving unit, for receiving the decompression mark of specified decompression algorithm feedback, when the decompression mark table When sign is decompressed successfully, the downloader reads the public key being preset in the set top box;
Verification unit, for reading the signature file in first file, and based on each in the signature file Digital signature value corresponding to data, verification is digitally signed to each data.
Further, the downloader is additionally operable to receive the error code fed back in escalation process, and is shown to technical staff The error code.
Therefore separate downloader and erector when being upgraded in the application, and erector is with upgrading Packet is downloaded in set top box, so as to ensure that erector can be carried out normally to the upgrade file in upgrading data packet Renewal.Further, after upgrading successfully, the upgrading data packet of download and the data of decompression can be removed, so as to save The memory space in set top box is saved.
Other features and advantages of the present invention will be illustrated in the following description, also, partly becomes from specification Obtain it is clear that or being understood by implementing the present invention.The purpose of the present invention and other advantages can be by the explanations write Specifically noted structure is realized and obtained in book, claims and accompanying drawing.
Below by drawings and examples, technical scheme is described in further detail.
Brief description of the drawings
Accompanying drawing is used for providing a further understanding of the present invention, and a part for constitution instruction, the reality with the present invention Apply example to be used to explain the present invention together, be not construed as limiting the invention.In the accompanying drawings:
Fig. 1 is the upgrade method flow chart of set top box in the embodiment of the present invention;
Fig. 2 is the upgrade-system schematic diagram of set top box in the embodiment of the present invention.
Embodiment
The preferred embodiments of the present invention are illustrated below in conjunction with accompanying drawing, it will be appreciated that described herein preferred real Apply example to be merely to illustrate and explain the present invention, be not intended to limit the present invention.
Referring to Fig. 1, the application provides a kind of upgrade method of set top box, methods described includes:
S1:Downloader is downloaded and decompresses upgrading data packet, the upgrading data packet include erector, installation script with And the upgrade file Jing Guo digital signature;
S2:The downloader is digitally signed verification to the upgrading data packet, after by verification, calls decompression Obtained erector;
S3:The erector performs the installation script that decompression obtains, with the description content in the installation script, Updating operation is performed to the upgrade file, and implementing result is fed back into the downloader;
S4:When the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the ascending series The data dump obtained according to bag and decompression.
In the present embodiment, the upgrading data packet generates in the following manner:
The cryptographic Hash of erector, installation script and upgrade file is calculated respectively;
A pair of public and private key are generated, wherein, private key is used to be digitally signed each cryptographic Hash, and public key is described Set top box is preset in the downloader module in the set top box when generating;
Upgrade file Jing Guo digital signature, erector and installation script are compressed packing, generation upgrading data Bag.
In the present embodiment, each file in the upgrading data packet passes through following processing:
The listed files of catalogue to be packed is obtained, the catalogue to be packed includes being used for the first file for depositing signature file Folder, the second file for depositing erector and installation script and the 3rd file for depositing upgrading data;
Signature file is created, the signature file includes initial information, and the initial information includes the signature file Creation time;
The data in first file, the second file and the 3rd file are digitally signed respectively, and Each digital signature value is deposited in corresponding signature file;
Data in three files after completion digital signature are compressed, to generate upgrading data packet.
In the present embodiment, after upgrading data packet is decompressed, methods described also includes:
The decompression mark for specifying decompression algorithm feedback is received, when the decompression mark, which characterizes, to be decompressed successfully, the download Device reads the public key being preset in the set top box;
Correspondingly, being digitally signed verification to the upgrading data packet includes:
The signature file in first file is read, and based on numeral corresponding to each data in the signature file Signature value, verification is digitally signed to each data.
In the present embodiment, when the implementing result characterizes upgrading failure, methods described also includes:
The error code fed back in escalation process is received, and the error code is shown to technical staff.
In practical application scene, in order to solve in existing linux system set top box upgrading method, when upgraded module needs When being upgraded simultaneously, first upgraded module is upgraded, then upgrade-system software, it is final to influence software system updating efficiency The problem of and staging business function it is presetting more inflexible in upgraded module, be unfavorable for flexible design of staging business etc. and ask Topic, the embodiment of the present invention provide a kind of set top box upgrading method and system, more flexibly square to set-top box software system to realize Just upgrading.It should be noted that software system updating method provided in an embodiment of the present invention goes for linux system machine Top box.Upgrade method may comprise steps of:
S101:Erector, installation script and upgrade file are subjected to signature packing;
It should be noted that in order to ensure the integrality of data, instrument calculates the sha-1 values of each file, and can root According to needing to randomly generate a pair of RSA keys, its sha-1 value is encrypted using RSA private keys, in order to save network bandwidth, made With zlib compression algorithms, packing compression is carried out to file.
S102:Downloader downloads upgrading data, and upgrade file is decompressed;
Downloader is decompressed using zlib to AKU, and preliminary completeness check is carried out to AKU.
S103:Downloader decompresses AKU, and file is digitally signed, and ensures that file is not changed.
AKU tools can generate the public and private keys of a pair of RSA at random, and private key is used for carrying out numeral to upgrading APMB package Signature, set top box production link, public key are preset to flash some parameter region by serial ports, and downloader has decompressed AKU Afterwards, using this RSA public key, verification is digitally signed to the file in upgrading data packet, to ensure that file is not tampered with.
S104:After downloader passes through to file digital signature verification, the erector that presses out of solution is called;
Downloader is upgraded module program in set top box, after confirming that file is complete, can be called by system and right of execution is handed over To erector, subsequent installation is carried out by erector.
S105:Erector, which is explained, performs installation script, and installation operation is carried out to upgrade file;
Erector and downloader are all to have the elf programs under the linux system of specific function, are simply emphasized particularly on different fields a little, Downloader is mainly responsible for downloading upgrading data from network or cable lines according to the parameter of parameter block transitive and upgrade file is entered Row decompression and digital signature verification, erector encapsulate some upgrade function interfaces, and such as carry function, flash readings are erasable, and UI enters Bar percentages show etc. is spent, these functions are all that can be called by the sentence of installation script, and it also provides interface in addition Installation script is allowed by calling .sh to be performed come quoting external programs.
Installation script is the script for having specific syntax form, and each step operational motion of upgrading is scheduled in he, and these are dynamic Erector is transferred to perform, it is only responsible for issuing order.
S106:Erector is anti-by returning result is installed after completing upgrading to upgrade file according to the description in installation script Downloader is presented, is downloaded according to feedback result, prompts to upgrade successfully or fails, clear upgrading mark is then decided whether according to result Will, finally carry out restarting action.
The embodiment of the present invention is by the separated way of downloader, erector, installation script three, and erector and installation Script is together downloaded to set top box with upgrade file.It can be seen that in this programme, upgrading mode is very flexible, and for upgrading industry Itself upgrading of business is also to have very much efficiency and very high enforceability.
With reference to specific application example, the linux system method for upgrading software provided the embodiment of the present invention enters Row is introduced.
In actual applications, specific packaging method can include:
S201:Catalogue file list to be packed is obtained, catalogue to be packed is divided into three files:sign、updater、 Data, wherein sign catalogues deposit signature file, updater catalogues storage erector and installation script, and the storage of data catalogues rises DBMS file;
S202:Create a signature file and be only written some headers, such as creation time, optionally can be from configuration pin Imported in this, be that the signing messages for writing each file below is prepared;
S203:According to the catalogue file list got, it is taken up in order of priority to the erector under updater catalogues, installation foot This is digitally signed with the upgrade file under data catalogues, and the RSA private keys that digital signature uses are used with being preset in set top box It is a pair of secret keys in the public key of verification, digital signature is that the sha-1 values of file are encrypted using RSA private keys, and according to mesh Record+filename is placed in signature file with the one-to-one relation of digital signature value.
S204:Complete to the All Files under these three catalogues, and catalogue is used into zlib offers after the signature of file Compression algorithm is compressed, and generation upgrading APMB package, the purpose of compression is decompressing except that can reduce the occupancy to network bandwidth When also can utilize compression algorithm in itself it is existing to file integrality verification mechanism, the integrality of file is done at the beginning of one Step verification;
The AKU strapping tool module of the present invention can be very good to ensure the security of upgrading data, and less account for With Internet resources, bandwidth is saved.
AKU has completed, and further, broadcasts download part this patent and does not repeat, either pass through tradition Cable TV network AKU is further packaged into the ts stream format of mepg standards, by the table parameter for comparing specific pid Information determines whether version has a renewal, and then by way of cable lines unilateral network downloads upgrading data, still passes through TCP/IP bilateral networks download the mode of upgrading data, are all compatible with the present invention.In addition, the liter of linux system set top box Level method can include:
S301:The decompression algorithm provided using zlib decompresses AKU;
S302:Judge whether to decompress successfully by return value;
If it is, perform step S303;If it is not, then perform step S314;
S303:Downloader reads the RSA public keys that some subregion of flash is preset to when production after decompressing successfully;
S304:Read the signature file under sign catalogues, and listed files information and label in signature file Name data are digitally signed verification to file one by one.
S305:Digital signature verification success
If it is, perform step S306;If it is not, then perform step S314;
S306:File verification is all temporarily being come to an end by the action of rear downloader, following downloader, which passes through, is System calls, and calls the erector pressed out from installation kit solution;
S307:Erector reads installation script.
Erector reads the installation script under catalogue at the same level.
S308:Erector, which is explained, performs installation script;
The abstract processing of each functional interface of erector, is called, installation script is according to peace by the explanation execution unit inside device The function of device offer is filled according to set syntax rule, organizes installation operation operation flow.
Its functional interface is roughly divided into following a few classes, and can be expanded and be expanded according to project demands:
File operation interface, there is provided the operation such as the deletion of file, replacement, decompression, such as can be by one in AKU It is inferior that compressed package unzips to fixed catalogue.
Flash operate interfaces, there is provided reading to system flash subarea, wipe, write interface.
OSD shows operate interface, there is provided upgrading progress bar display control, or the operate interface that upgrade information is aobvious.
Partition format operate interface, there is provided, can be by system partitioning form to the format manipulation interface of system partitioning Be melted into the various file system formats supported, such as UBI, ext4, cramfs etc., can also according in AKU it is a certain Ready-made system partitioning file is formatted operation.
Carry operate interface, there is provided the carry operate interface of subregion or peripheral hardware.
System call interfaces, interface the most flexible, performed by interface interchange sh existing in other systems Other instruments, such as " systemcall ("/bin/sh ", "/bin/chmod ", " 777 ", "/cache/test ");", pass through this Sentence can realize by system/cache below test file permissions modification turn into all users all have it is readable can Write executable authority.
The function of erector can constantly expand upgrading, and the sentence in script is also that can expand upgrading, as long as The sentence for ensureing installation script in AKU is that erector is supported, is that can be mounted device to explain execution.
S309:After the completion of erector operates according to the instruction in installation script to upgrade file, the result of execution is returned To downloader.
S310:The installation results that downloader returns according to erector go to judge whether installation process succeeds, if be mounted to Work(, step S311 is performed, if abnormal, execution step S314 occurs in escalation process, and return to error code simultaneously.
S311:Prompting upgrades successfully, and continues executing with S312;
S312:Upgrading mark is removed, in order to avoid being again introduced into upgraded module, while AKU is emptied and conciliates the text pressed out Part.
S313:Restart, complete this upgrading.
S314:Lifting upgrading failure, while the error code that preceding step returns is shown, so that technical staff determines that upgrading is lost Lose reason.
The present invention implements three downloader, erector, installation script modules and independently separated, and erector and installation script It is to download to set top box with upgrade file.It can be seen that in this programme, on the premise of ensureing securely and reliably, this programme realizes It is a kind of more flexibly more convenient layout staging business logic its be beneficial to the upgrade method of upgraded module itself upgrading.
Corresponding to above method embodiment, the embodiment of the present invention also provides a kind of software system updating device, the device It can include with lower module:
AKU tools module, it is single comprising RSA asymmetric encryption unit, sha-1 hash algorithm units, zlib compressions Member, for being digitally signed packaging operation to erector, installation script, upgrade file.
Downloader module, be one has the kernel units of cutting independently of the subsystem outside set-top-box system, outside The file system elements made with busybox, itself are a Linux programs, and inside is mono- containing tuner units, demux Member, osd units, NE, zlib decompression units, sha-1 cryptographic Hash computing unit, RSA decryption units, if supported manual Front panel/remote control unit is also included if download.
Erector module, mainly contain Interpretation unit, execution unit and functional interface unit, wherein functional interface unit again It is different according to function, can be divided into file operation interface unit, flash operate interfaces unit, OSD show operate interface unit, Formatting interface unit, carry interface unit, system call interfaces unit.These functional units can be carried out according to business demand Expand, erector is mainly used to explain the updating operation step instruction performed in installation script, completes installation core operation.
Installation script module, it is according to the syntax rule both set with erector Interpretation unit, calls mounted device The script file that the function interface of support is realized, it is that can be mounted device line by line to explain the function interface performed and parameter, such as it Premise arrive " systemcall ("/bin/sh ", " and/bin/chmod ", " 777 ", "/cache/test ");", wherein Systemcall is exactly that can be mounted the function being supported that device identifies, in braces is exactly to pass to its parameter.
Referring to Fig. 2, the application also provides a kind of upgrade-system of set top box, the system includes downloader and installation Device, wherein:
The downloader 100, for downloading and decompressing upgrading data packet, the upgrading data packet include erector, Installation script and the upgrade file Jing Guo digital signature;Verification is digitally signed to the upgrading data packet, is passing through school After testing, the erector for decompressing and obtaining is called;
The erector 200, the installation script obtained for performing decompression, with the description in the installation script Content, updating operation is performed to the upgrade file, and implementing result is fed back into the downloader;
Wherein, when the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the upgrading The data dump that packet and decompression obtain.
In the present embodiment, the system also includes upgrading data packet making module, and the upgrading data packet makes mould Block is used for the cryptographic Hash for calculating erector, installation script and upgrade file respectively;A pair of public and private key are generated, wherein, private key For being digitally signed to each cryptographic Hash, under public key is preset in when the set top box generates in the set top box Carry in device module;Upgrade file Jing Guo digital signature, erector and installation script are compressed packing, generate ascending series According to bag.
In the present embodiment, the system also includes:
Listed files acquiring unit, for obtaining the listed files of catalogue to be packed, the catalogue to be packed includes being used for Deposit the first file of signature file, the second file for depositing erector and installation script and upgrade for depositing 3rd file of data;
Signature file creating unit, for creating signature file, the signature file includes initial information, described initial Information includes the creation time of the signature file;
Digital signature unit, for respectively to the number in first file, the second file and the 3rd file According to being digitally signed, and by each digital signature value deposit in corresponding in signature file;
Packaged unit is compressed, for the data in three files after completion digital signature to be compressed, with generation Upgrading data packet.
In the present embodiment, the system also includes:
Decompression mark receiving unit, for receiving the decompression mark of specified decompression algorithm feedback, when the decompression mark table When sign is decompressed successfully, the downloader reads the public key being preset in the set top box;
Verification unit, for reading the signature file in first file, and based on each in the signature file Digital signature value corresponding to data, verification is digitally signed to each data.
In the present embodiment, the downloader is additionally operable to receive the error code that feeds back in escalation process, and to technology people Member shows the error code.
Therefore separate downloader and erector when being upgraded in the application, and erector is with upgrading Packet is downloaded in set top box, so as to ensure that erector can be carried out normally to the upgrade file in upgrading data packet Renewal.Further, after upgrading successfully, the upgrading data packet of download and the data of decompression can be removed, so as to save The memory space in set top box is saved.
Obviously, those skilled in the art can carry out the essence of various changes and modification without departing from the present invention to the present invention God and scope.So, if these modifications and variations of the present invention belong to the scope of the claims in the present invention and its equivalent technologies Within, then the present invention is also intended to comprising including these changes and modification.

Claims (10)

1. a kind of upgrade method of set top box, it is characterised in that methods described includes:
Downloader is downloaded and decompresses upgrading data packet, and the upgrading data packet includes erector, installation script and process The upgrade file of digital signature;
The downloader is digitally signed verification to the upgrading data packet, after by verification, calls what decompression obtained Erector;
The erector performs the installation script that decompression obtains, with the description content in the installation script, to described Upgrade file performs updating operation, and implementing result is fed back into the downloader;
When the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the upgrading data packet with And the data dump that decompression obtains.
2. according to the method for claim 1, it is characterised in that the upgrading data packet generates in the following manner:
The cryptographic Hash of erector, installation script and upgrade file is calculated respectively;
A pair of public and private key are generated, wherein, private key is used to be digitally signed each cryptographic Hash, and public key is on the machine top Box is preset in the downloader module in the set top box when generating;
Upgrade file Jing Guo digital signature, erector and installation script are compressed packing, generate upgrading data packet.
3. according to the method for claim 1, it is characterised in that each file in the upgrading data packet passes through following places Reason:
Obtain the listed files of catalogue to be packed, the first file that the catalogue to be packed includes being used for depositing signature file, For depositing the second file of erector and installation script and upgrading the 3rd file of data for depositing;
Signature file is created, the signature file includes initial information, and the initial information includes the wound of the signature file Build the time;
The data in first file, the second file and the 3rd file are digitally signed respectively, and will be each Individual digital signature value is deposited in corresponding signature file;
Data in three files after completion digital signature are compressed, to generate upgrading data packet.
4. according to the method for claim 3, it is characterised in that after upgrading data packet is decompressed, methods described is also wrapped Include:
The decompression mark for specifying decompression algorithm feedback is received, when the decompression mark, which characterizes, to be decompressed successfully, the downloader is read Take the public key being preset in the set top box;
Correspondingly, being digitally signed verification to the upgrading data packet includes:
The signature file in first file is read, and based on digital signature corresponding to each data in the signature file Each data are digitally signed verification by value.
5. according to the method for claim 1, it is characterised in that when the implementing result characterizes upgrading failure, the side Method also includes:
The error code fed back in escalation process is received, and the error code is shown to technical staff.
A kind of 6. upgrade-system of set top box, it is characterised in that the system includes downloader and erector, wherein:
The downloader, for downloading and decompressing upgrading data packet, the upgrading data packet includes erector, installation script And the upgrade file Jing Guo digital signature;Verification is digitally signed to the upgrading data packet, after by verification, called Decompress obtained erector;
The erector, the installation script obtained for performing decompression are right with the description content in the installation script The upgrade file performs updating operation, and implementing result is fed back into the downloader;
Wherein, when the implementing result, which characterizes, to be upgraded successfully, the downloader removes upgrading mark, and by the upgrading data The data dump that bag and decompression obtain.
7. system according to claim 6, it is characterised in that the system also includes upgrading data packet and makes module, institute State upgrading data packet and make the cryptographic Hash that module is used to calculate erector, installation script and upgrade file respectively;A pair of generation Public and private key, wherein, private key is used to be digitally signed each cryptographic Hash, and public key is preset when the set top box generates In the downloader module in the set top box;Upgrade file Jing Guo digital signature, erector and installation script are carried out Compression packing, generates upgrading data packet.
8. system according to claim 6, it is characterised in that the system also includes:
Listed files acquiring unit, for obtaining the listed files of catalogue to be packed, the catalogue to be packed includes being used to deposit First file of signature file, the second file for depositing erector and installation script and for deposit upgrade data The 3rd file;
Signature file creating unit, for creating signature file, the signature file includes initial information, the initial information Include the creation time of the signature file;
Digital signature unit, for entering respectively to the data in first file, the second file and the 3rd file Row digital signature, and each digital signature value is deposited in corresponding signature file;
Packaged unit is compressed, for the data in three files after completion digital signature to be compressed, to generate upgrading Packet.
9. system according to claim 8, it is characterised in that the system also includes:
Decompression mark receiving unit, for receiving the decompression mark of specified decompression algorithm feedback, when the decompression mark characterizes solution When being pressed into work(, the downloader reads the public key being preset in the set top box;
Verification unit, for reading the signature file in first file, and based on each data in the signature file Corresponding digital signature value, verification is digitally signed to each data.
10. system according to claim 6, it is characterised in that the downloader is additionally operable to receive to be fed back in escalation process Error code, and show the error code to technical staff.
CN201710807034.5A 2017-09-08 2017-09-08 A kind of upgrade method and system of set-top box Active CN107396188B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710807034.5A CN107396188B (en) 2017-09-08 2017-09-08 A kind of upgrade method and system of set-top box

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710807034.5A CN107396188B (en) 2017-09-08 2017-09-08 A kind of upgrade method and system of set-top box

Publications (2)

Publication Number Publication Date
CN107396188A true CN107396188A (en) 2017-11-24
CN107396188B CN107396188B (en) 2019-08-02

Family

ID=60351980

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710807034.5A Active CN107396188B (en) 2017-09-08 2017-09-08 A kind of upgrade method and system of set-top box

Country Status (1)

Country Link
CN (1) CN107396188B (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109787774A (en) * 2019-01-15 2019-05-21 浙江吉利汽车研究院有限公司 Upgrading method for down loading, device, server and terminal based on digital signature verification
CN109857433A (en) * 2019-01-15 2019-06-07 四川虹美智能科技有限公司 A kind of scm software upgrading tool and method
CN110990037A (en) * 2019-11-26 2020-04-10 武汉船舶通信研究所(中国船舶重工集团公司第七二二研究所) Board card software upgrading method and device
CN111813436A (en) * 2020-06-17 2020-10-23 中车株洲电力机车研究所有限公司 Method and system for updating configuration files in batch
CN113721952A (en) * 2021-08-09 2021-11-30 青岛鼎信通讯股份有限公司 Embedded software upgrading method applied to acquisition terminal
CN115442665A (en) * 2022-08-29 2022-12-06 四川长虹电器股份有限公司 Method, device and equipment for checking program data compatibility after upgrading of smart television

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101567962A (en) * 2009-04-24 2009-10-28 福建新大陆通信科技有限公司 Double-Loader updating method for set-top box
CN102427552A (en) * 2011-09-26 2012-04-25 山东泰信电子有限公司 Code stream broadcast system, code stream broadcast method and software over the air upgrade method
US20150058909A1 (en) * 2013-06-21 2015-02-26 Enseo, Inc. Set-top Box with Technical Configuration and System and Method for Use of Same
US9661362B1 (en) * 2015-09-23 2017-05-23 Google Inc. Testing set top appliance boxes
CN106878813A (en) * 2017-03-17 2017-06-20 山东浪潮商用系统有限公司 A kind of application program updating method and system in Set Top Box, Set Top Box

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101567962A (en) * 2009-04-24 2009-10-28 福建新大陆通信科技有限公司 Double-Loader updating method for set-top box
CN102427552A (en) * 2011-09-26 2012-04-25 山东泰信电子有限公司 Code stream broadcast system, code stream broadcast method and software over the air upgrade method
US20150058909A1 (en) * 2013-06-21 2015-02-26 Enseo, Inc. Set-top Box with Technical Configuration and System and Method for Use of Same
US9661362B1 (en) * 2015-09-23 2017-05-23 Google Inc. Testing set top appliance boxes
CN106878813A (en) * 2017-03-17 2017-06-20 山东浪潮商用系统有限公司 A kind of application program updating method and system in Set Top Box, Set Top Box

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109787774A (en) * 2019-01-15 2019-05-21 浙江吉利汽车研究院有限公司 Upgrading method for down loading, device, server and terminal based on digital signature verification
CN109857433A (en) * 2019-01-15 2019-06-07 四川虹美智能科技有限公司 A kind of scm software upgrading tool and method
CN109787774B (en) * 2019-01-15 2021-08-13 浙江吉利汽车研究院有限公司 Upgrade downloading method and device based on digital signature verification, server and terminal
CN109857433B (en) * 2019-01-15 2022-08-19 四川虹美智能科技有限公司 Single chip microcomputer software upgrading tool and method
CN110990037A (en) * 2019-11-26 2020-04-10 武汉船舶通信研究所(中国船舶重工集团公司第七二二研究所) Board card software upgrading method and device
CN111813436A (en) * 2020-06-17 2020-10-23 中车株洲电力机车研究所有限公司 Method and system for updating configuration files in batch
CN113721952A (en) * 2021-08-09 2021-11-30 青岛鼎信通讯股份有限公司 Embedded software upgrading method applied to acquisition terminal
CN115442665A (en) * 2022-08-29 2022-12-06 四川长虹电器股份有限公司 Method, device and equipment for checking program data compatibility after upgrading of smart television
CN115442665B (en) * 2022-08-29 2023-10-20 四川长虹电器股份有限公司 Method, device and equipment for checking program data compatibility after intelligent television upgrading

Also Published As

Publication number Publication date
CN107396188B (en) 2019-08-02

Similar Documents

Publication Publication Date Title
CN107396188B (en) A kind of upgrade method and system of set-top box
CN102523268B (en) Client side upgrading method and system
CN106815370B (en) Method, device and system for updating resource file
CN101436141B (en) Firmware upgrading and encapsulating method and device based on digital signing
CN105573780B (en) A kind of mobile terminal operating system upgrade method and device based on container
CN107770622B (en) method for updating files in Linux system
CN100463491C (en) Software staging management method and system of set-top box
CN106648766B (en) Method and device for generating patch upgrade patch based on folder and differentially upgrading patch based on folder
CN105391717A (en) APK signature authentication method and APK signature authentication system
CA2548546A1 (en) Method for storing, authenticalting and executing an application program
CN106572372A (en) Set-top box upgrading method and set-top box
CN101355434B (en) Method and apparatus for upgrading software of multimedia remote terminal
CN101827126A (en) Software upgrade method of television terminal, television terminal and software upgrade system
CN102118640A (en) Digital television as well as software upgrading method and system thereof
CN104714819A (en) File system upgrading package making method, upgrading method and device and terminal
CN103677877A (en) Method and device for updating local advertisement software development kit
CN105224874B (en) Plug-in security control method and client based on middleware card cage
CN107231490A (en) Dynamic updates method, client and the server of IOS system applications
CN103761329A (en) Method and device for flashing mobile device
CN105897461A (en) Multi-system OTA upgrading method and multi-system device
CN104090946A (en) Method and device for adding information to application installation package
WO2022142153A1 (en) Electricity meter upgrading method and system, smart meter, and storage medium
CN108322540A (en) Customized data lead-in method, terminal and computer readable storage medium
CN101212554B (en) Method for upgrading set-top box system
CN105242910A (en) Middleware plug-in frame based plug-in state control method and client

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant