CN1311341C - Method for conducting digital signature when downloading computer data to mobile phone - Google Patents
Method for conducting digital signature when downloading computer data to mobile phone Download PDFInfo
- Publication number
- CN1311341C CN1311341C CNB2004100182059A CN200410018205A CN1311341C CN 1311341 C CN1311341 C CN 1311341C CN B2004100182059 A CNB2004100182059 A CN B2004100182059A CN 200410018205 A CN200410018205 A CN 200410018205A CN 1311341 C CN1311341 C CN 1311341C
- Authority
- CN
- China
- Prior art keywords
- mobile phone
- version
- digital signature
- version information
- digital
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The present invention relates to a method for downloading computer data to a mobile phone, which comprises the following steps: firstly, a computer transmits a handshake signal to a mobile phone, and the mobile phone transmits a response signal to the computer after receiving the handshake signal, thereby establishing communication between the computer and the mobile phone; then the computer transmits the version information of a program to be downloaded to the mobile phone, wherein the mobile phone determines whether the version information can be downloaded according to the predetermined version regulations, if the version information can be downloaded, then the computer starts to transmit data packets to the mobile phone, the mobile phone stores the received data in the memory of the mobile phone, and key code doesn't stop being encrypted in the process of downloading the version information until all the data is transmitted to the mobile phone; after the downloading is finished, the digital signature is updated according to new version information; finally, the communication is ended. The falsification of mobile phone code can be prevented by using the present invention so as to guarantee the safety of the mobile phone.
Description
Patented claim of the present invention is relevant for the application for a patent for invention of " with the method for computer data downloading to mobile phone " with the denomination of invention that same applicant filed an application on April 29th, 2004, and number of patent application is 200410018031.6.
Technical field
The present invention relates to communication field, relate in particular to a kind of the method for computer data downloading to mobile phone.
Background technology
Along with the continuous development of communications industry, the demand of mobile phone (as the PHS mobile phone, CDMA mobile phone, GSM mobile handset) is also increasing.But exist many illegal retailers ordered about by interests now on the market code of mobile phone is distorted the back illegal download in mobile phone, the mobile phone internal code is carried out malicious attack and destruction, or producer downloaded in the mobile phone by back door than the code of lowest version (not having some new function), make businessman of producer all sustain a great loss.
Present mobile phone-downloaded program just can will directly reach mobile phone by the downloaded files packet by data line without any restriction as long as know the order of mobile phone and computing machine (PC) communication.Disclosed a kind of similar method No. 01118379 as Chinese patent application, a kind of distributed PHS base station system local program download apparatus comprises PC side man-machine interface, PC side data processor, serial ports and base station side core processor; Its method is to set up data channel, assigns the program download command by man-machine interface to the base station, PC side data processor processing should order and by serial ports to base station router download request, and handle, transmit data.Such method causes the program after the arbitrarily change also can download to easily in the mobile phone, makes that the original function of our mobile phone is destroyed, and can also carry out the hardware copy.
Mobile phone early has boot section (Boot district), and new mobile phone does not much have Boot district (the hardware decision of new cell-phone) now.In the past the protection of mobile phone all is based on the boot section, and did not have efficient and simple method.Can be sent to mobile phone by the handset program (a binary literature kit) that serial ports will be stored on computers during data download, realize renewal handset program.The lawless person can guarantee the repair free of charge and changes handset program by revising this binary file.The program of revising downloads to mobile phone, and mobile phone will have the lawless person and want the characteristic that has, to reach their purpose.
The downloading mode of original technology can not prevent the hardware copy of sky sheet (never carried out the read only memory ROM chip downloaded, among the ROM without any data), can not well protect the program code of mobile phone, the interests loss that can bring each side:
1. producer's interests loss: producer increases some new functions for tapping new markets, but these functions can be destroyed by illegal retailer by former downloading mode, make effect, the especially prestige of not playing newly developed of producer be subjected to great infringement.
2. businessman's interests loss: businessman is because take a fancy to some new functions of the new research and development of producer, and these new functions often can increase the interests of businessman, if these functions are destroyed, the interests of businessman are also damaged greatly.
3. consumer's interests loss: the consumer uses the mobile phone of back door, and the quality of these mobile phones can't guarantee that in a single day this mobile phone has problem, has been difficult in time, has served accurately, and consumer's interests can't ensure fully.
By above explanation as seen, former handset program method for down loading all can cause damage to producer, businessman and consumer.So, be necessary to provide a kind of really effectively safeguard procedures, make mobile phone can not caused the loss of each side by the attack of malice and destruction.
Summary of the invention
The objective of the invention is at above-mentioned the deficiencies in the prior art; provide a kind of with the method for computer data downloading to mobile phone; make downloading process can carry out the key code protection, the comparison of program version rule and digital signature identification etc. make the mobile phone code be difficult for being distorted arbitrarily.
The objective of the invention is to realize by following technical method: computer data downloading to the method for mobile phone comprises the steps: at first to send handshake by computing machine to mobile phone, mobile phone sends answer signal to computing machine after receiving above-mentioned handshake, thereby set up communicating by letter between computing machine and the mobile phone, send version information then to mobile phone, judge whether and to download according to default revision scheme by mobile phone, can download if be judged as, then computing machine begins to send packet to mobile phone, mobile phone can be with the data storage that receives to the storer of mobile phone, in the downloading process key code is encrypted, all be sent to mobile phone until total data, the new version information of downloading after finishing of basis upgrades digital signature, finishes communication at last.Can prevent that by above process other people from distorting handset program, distort code to guarantee the safety of mobile phone.
Because each mobile phone all can the experience program be downloaded this process before dispatching from the factory, so can carrying out rule before downloading, method of the present invention judges to see whether allow to download this program, if can download normally after judgement meets rule, and in process of downloading, the part key code is encrypted, after downloading, can upgrade digital signature to mobile phone.The illegal download that is considered as that does not meet rule can't be proceeded it, reduces the chance of illegal download.Do last assurance by digital signature, even illegal download success under minimum possible situation also can make it can't replace certified products because there not being digital signature.Better protection producer, businessman and consumer's interests.And easy to use, safe, there is no different with former using for user's the downloaded instrument of feeling.
Description of drawings
Fig. 1 is downloaded to the program flow diagram of mobile phone for computer data in the prior art.
Fig. 2 is that the present invention is with the overall flow figure of computer data downloading to mobile phone.
Fig. 3 carries out revision scheme process flow diagram relatively for method of the present invention before download.
Fig. 4 carries out the process flow diagram that key code is encrypted for method of the present invention.
Fig. 5 carries out the process flow diagram of digital signature for method of the present invention.
Fig. 6 is after adopting method of the present invention, the process flow diagram that mobile phone power-on detects.
Embodiment
The present invention is by computer data downloading is embodied jointly to process and mobile phone power-on test section on the mobile phone.In the flow process of mobile phone, add the version comparison module in computer data downloading, thereby make the program that only meets predetermined revision scheme can be downloaded on the mobile phone; Add the key code encrypting module, one section code that frequency of utilization is high is encrypted, thereby make code be difficult for being distorted; After downloading, can upgrade digital signature, as last assurance to mobile phone.The mobile phone power-on measuring ability can carry out the process integrity verification when mobile phone power-on, prevent that further the mobile phone code from suffering illegally to distort.
See also Fig. 1, the flow process of communicating by letter between existing downloaded instrument and the mobile phone is: a kind of communication mode of setting up by serial ports between computing machine (PC) and the mobile phone, earlier send handshake to mobile phone by computing machine, mobile phone sends answer signal to computing machine after receiving above-mentioned handshake, thereby set up communicating by letter between computing machine and the mobile phone, computing machine begins to send packet to mobile phone then, mobile phone can be with the data storage that receives to the storer of mobile phone, all be sent to mobile phone until total data, finish communication.
See also Fig. 2, the flow process of communicating by letter between downloaded instrument of the present invention and the mobile phone is relatively existing to be downloaded flow process and has added revision scheme comparison module before downloading, in the downloading process to the encrypting module of key code and in the digital signature module of downloading after finishing.
The executing rule comparison module at first will carry out the definition of revision scheme, in version information, increased basic version information (Base Version), in order to distinguish original version information in the mobile phone is called current version information (Current Version), regulation current version information must be more than or equal to basic version information in version information.As basic version information is 2.0, and then to be defined as 2.4 be correct to current version, and if be defined as 1.3 just not right.
Revision scheme relatively than be exactly current version and basic version.Comparison rule is that two versions of striding basic version can be raised to highest version from lowest version, but highest version cannot be dropped to lowest version, the lifting arbitrarily of the version between the same foundation version.Specifically, if the basic version of original version is than the basic version height of desiring download version in the mobile phone, then the program of desiring download version can not be downloaded in the mobile phone, if the basic version of original version is lower than the basic version of desiring download version in the mobile phone, then the program of desiring download version can be downloaded in the mobile phone.If the basic version of original version is identical with the basic version of desiring download version in the mobile phone, then no matter which height current version is, the program of desiring download version can be downloaded in the mobile phone.
For example, two version liftings mutually of version (1.0,1.3) and version (1.0,2.3), and version (1.0,1.4) and version (1.5,1.5) can only be upgraded to version (1.5,1.5) from version (1.0,1.4).(the previous numeral basic version of above example, a back numeral current version).Like this, will there be the version of new function to be set at high basic version, realize that mobile phone does not allow the program of lowest version is downloaded in the mobile phone of highest version.Above revision scheme only is a kind of embodiment, also can do some changes as required, is set up on their own by producer, is used for protecting the function of some new research and development.
Can not demote or can only demote and to upgrade because direct relatively current version can cause version to upgrade, the present invention increases basic version information, purpose is that the promotion and demotion of version are controlled, the version maker can allow lifting mutually between some version, and some version is not allow mutual lifting.And the demand of upgrading is normal, and the demand of degradation is controlled, so with basic version control degradation.
The flow process that the revision scheme comparison module of mobile phone carries out the revision scheme comparison before downloading please refer to Fig. 3:
1. after setting up communicating to connect between computing machine and the mobile phone, send the version information of wanting downloaded files by the downloaded instrument to mobile phone by data line, the version information that the revision scheme comparison module of mobile phone can send original version information and computing machine in the mobile phone compares according to the version comparison rule, and comparative result is returned to computing machine;
2. if comparative result is to allow to download, then computing machine is proceeded the file download according to the comparative result information of mobile phone transmission, sends the file data bag by computing machine to mobile phone;
3. if comparative result is not allow to download, mobile phone begins to reject follow-up file data bag; Computing machine then can not be downloaded according to the comparative result prompting that mobile phone sends, thereby stops downloading, and the program that does not meet the version comparison rule can't be downloaded on the mobile phone.Even this computer-chronograph still continues to send the file data bag, mobile phone can be refused to accept, and returns non-affirmation packet to computing machine.Downloading control power is located at the mobile phone side,, also can't walks around revision scheme relatively even the downloaded instrument is distorted.
See also Fig. 4, the flow process of in the downloading process key code being encrypted is:
1. the downloaded instrument is by the packet of data line to mobile phone transmission file, and mobile phone side monitoring facilities can judge whether the packet that receives is the key code packet;
2. if key code is stored and continuation reception data after then it being used data encryption standards (DES) algorithm for encryption, it is relevant with the hardware sequence number of mobile phone to encrypt used key; Mobile phone can be deciphered voluntarily when mobile phone power-on was carried out this section code, if can not correctly encrypt when downloading, when start ran to the key code of that core dumped deciphering, the code that program is carried out was unpredictable, made the mobile phone can't operate as normal.Detailed process sees also the start testing process of Fig. 6.
3. then directly be stored to the follow-up continued access of mobile phone if not key code and receive data.
Key code is chosen and should be followed following principle:
1. key code is owing to deciphering, so code can not be too big.Usually size is controlled at tens on bytes up to a hundred.
2. key code is to carry out the very high code of frequency, the code that preferably any operation all can be carried out, if key code is incorrect like this, system just is difficult to operation.
Judge whether for key code be position judgment according to code storage, usually the storage address and the length that can provide code behind the key code have been defined, as to leave in 0x10FD00 be initial, length is the position of 200 bytes, the form of data download bag is exactly: address+data, so can judge whether key code according to the address.
It is relevant with the hardware sequence number of mobile phone to encrypt used key, can represent with following formula:
Key=F (hardware sequence number)
F represents a simple function of a single variable.
After increasing the key code encrypting module, what can prevent to download is imitated, prevents that also the hardware of storer on the mobile phone (ROM) from duplicating simultaneously.The concrete definition of key code does not need to force, and is if by the above principle of being carried definition, comparatively effective to protection.
See also Fig. 5, the digital signature module is to be in the flow process of downloading laggard line number word signature renewal:
1. the downloaded instrument sends to mobile phone by data line and downloads the order that finishes;
2. mobile phone checks that at first original digital signature is not effectively in the mobile phone after receiving order;
3. if effectively, then utilize the new and old digital signature of version information of newly downloaded file;
4., then do not upgrade if invalid; User's mobile phone when start monitors the nonsignificant digit signature and just has similar miscues such as " forbidding selling without the UT authentication ", and this mobile phone of warning user has suffered unauthorised broken.Detailed process sees also the start testing process of Fig. 6.
Digital signature is to confirm a string data of mobile phone legal identity, in order to prevent the information of forging a signature, requires for different mobile phones, and this signing messages of different versions is unique.Digital signature can be used formula:
E=e (H, V) expression, wherein E: digital signature, e: signature algorithm, H: mobile phone hardware sequence number, V: mobile phone version information.Digital signature information can be stored among the mobile phone ROM, and during digital signature checked, mobile phone can be according to above formula compute signature information, result of calculation with the digital signature information of storage relatively, if unanimity then think signature effectively otherwise thinks invalid.If still must make mistakes after downloading new version with original signature.So mobile phone covers original digital signature with new digital signature then judging under the effective prerequisite of original signature and can recomputating digital signature according to new version information.
The effect of digital signature module is to guarantee that the download of empty sheet is controlled.
The end reaction of key code encrypting module of the present invention and digital signature module shows the start detection module of mobile phone, this module does not belong to downloading process, be a kind of improvement after mobile phone side program adopts the present invention, do not have this start detection module in the prior art.The operating process that start detects sees also Fig. 6:
1. mobile phone power-on, can just be encrypted key code when downloading if usefulness is legal download tool as previously mentioned at first to the key code deciphering, so start is deciphered this section code accordingly, mobile phone normally moves then; If usefulness is illegal download tool, not encrypted when then downloading but deciphering has still been done in start, this section code just is called mess code so, and the mobile phone operation is undesired.Ensured the download tool download that necessary usefulness is legal like this.
2. mobile phone can be made self code CRC (CRC) calculating, compares with real result.If identical then enter next step, otherwise wrong prompting.Suppose that the true code of mobile phone is C1, C2, C3, ..., Cn, we produce output K with its input as the CRC algorithm, we with K and code storage in mobile phone memory, at first read mobile phone code c1 when delivering for a check, c2 ..., cn (noting it being the C of small letter here), the CRC that calculates is k as a result, deliver for a check if k equals K by, otherwise deliver for a check failure.The situation of delivering for a check failure mostly is c1, c2 ..., discord C1 is arranged among the cn, C2 ..., Cn equates.
The binary file of cell phone software each (Bit) all is correct, and relative therewith is exactly that binary file has the data of at least one Bit incorrect, and this incorrect meeting causes mobile phone running to wrong place, has the mistake that can not estimate.Therefore it correctly is necessary delivering for a check code.Consider that from security standpoint the code of production firm's consideration mobile phone is that the design of basis oneself produces, and does not wish that the someone rewrites code, so can deliver for a check code, delivers for a check coupling and thinks that code (being binary file) is not modified.Based on above 2 points, we deliver for a check the mobile phone code integrity.
3. mobile phone can calculate correct signature, and and the signature of current phone relatively.The normal boot-strap if signature detection comes to the same thing.If different, then start has similar miscue information such as " forbidding selling without the UT authentication ", and this mobile phone of warning user has suffered unauthorised broken.
After adopting method of the present invention, finally can realize following four big functions:
(1) downloads with the downloaded instrument that has an encrypting module, prevent that the illegal download instrument from downloading.It is relevant with the hardware sequence number of mobile phone to encrypt used key.So the code that each mobile phone is stored on the ROM (read-only memory) (ROM) is incomplete same.Mobile phone can be decrypted this section code in start, moves this section code then.So just can prevent illegal batch duplicating, must download on the ROM of mobile phone with the corresponding download program and just can normally use.Increase deciphering module in the mobile phone power-on process, make in downloading process, must add encrypting module.And that encrypting module is not easy is imitated, thereby has reduced the approach of a lot of illegal download.Simultaneously,, make that the enciphered message of each mobile phone all is unique, can prevent the hardware copy thus greatly because we adopt distinctive hardware information as a part of encrypting.
(2) method of the present invention can be carried out rule and judged to see whether allow to download this program before downloading, and the illegal download that is considered as that does not meet rule can't be proceeded it, the chance of minimizing illegal download.The comparison rule control (relatively realizing) that edition upgrading or degradation are stipulated by the rule in the downloading process.Can prevent that like this retailer arbitrarily is downgraded to lowest version mobile phone (mobile phone that does not contain function newly developed) with highest version mobile phone (mobile phone that contains function newly developed), the lifting version must meet certain rule can.
(3) empty sheet (never carried out the rom chip downloaded, among the ROM without any the data) program of having downloaded does not comprise digital signature, and the special flow process that need pass through handset production line just have digital signature.Do not make the mobile phone of digital signature, start can give warning prompt.Digital signature is for each mobile phone, and each version of cell phone software all is unique.Through special flow process count word signature mobile phone after each downloading process in all can be upgraded automatically.Do last assurance by digital signature, even illegal download is success under minimum possible situation, also can make it can't replace certified products because there not being digital signature, the user still buys this mobile phone after seeing similar promptings such as " forbidding selling without the UT authentication " quantity can significantly reduce, and the user's of businessman of producer interests have all obtained good improvement like this.
(4) last, the mobile phone power-on measuring ability can carry out the process integrity verification when mobile phone power-on, prevent that the mobile phone code from suffering illegally to distort.
Method of the present invention is encrypted the security performance that strengthens mobile phone by software and hardware, effectively controls malicious attack and the destruction of illegal retailer to the mobile phone code.Better protection producer, businessman and consumer's interests.And easy to use, there is no different with former using for user's the download tool of feeling.Safe, the ability that the outpost of the tax office, a few road has strengthened mobile phone self-protection greatly is set.And after self suffers malicious attack, send alarm prompt and inform the user.
Regular comparison module before the download of the present invention, there is no positive connection to the encrypting module of key code and between the digital signature module of downloading after finishing in the downloading process, but all be in order to increase the safeguard function of mobile phone itself, so three modules can be used separately, also can combination in any use.
Apparently and easy to know be, design of the present invention is not limited only to mobile phone, also can be used for the digital device of other routine data that can download from computing machine, as PDA(Personal Digital Assistant), and digital camera etc.
Claims (16)
1. a method of computer data downloading being carried out digital signature during to mobile phone stores digital signature in the mobile phone, and it comprises the steps:
Establish a communications link between computing machine and the mobile phone;
Computing machine is sent out institute's handshake to mobile phone;
Mobile phone sends answer signal to computing machine;
Computing machine router packet is to mobile phone, the version information that has program in this routine data bag;
Mobile phone storage packet, after total data all was sent to mobile phone, mobile phone sent answer signal to computing machine;
The digital signature module of mobile phone finishes to download according to the version information of the newly downloaded program digital signature that has of new cell-phone Central Plains more.
2. method of computer data downloading being carried out digital signature during to mobile phone as claimed in claim 1 is characterized in that: carrying out the flow process that digital signature upgrades is:
1) computing machine sends to mobile phone by data line and downloads the order that finishes;
2) mobile phone checks at first whether original digital signature is effective in the mobile phone after receiving order;
3) if effectively, then utilize the new and old digital signature of version information of newly downloaded program;
4) if invalid, then do not upgrade.
3. method of computer data downloading being carried out digital signature during to mobile phone as claimed in claim 2 is characterized in that: the digital signature formula:
E=e (H, V) expression, E wherein: digital signature, e: signature algorithm, H: the mobile phone hardware sequence number, V: the mobile phone version information, mobile phone is judging that meeting is according to new version information under the effective prerequisite of original signature, recomputate digital signature, then new digital signature is covered original digital signature.
4. as one of any described method of computer data downloading being carried out digital signature during to mobile phone of claim 1 to 3, it is characterized in that: add program version rule comparison module in the handset program, at computing machine before mobile phone sends packet, this module is original program version information in the version information downloaded of desire and the mobile phone relatively, make the program that only meets predetermined revision scheme can be downloaded to mobile phone, and the routine data bag that does not meet predetermined revision scheme can not be downloaded to mobile phone, described revision scheme is: comprise basic version information and current version information in the version information, current version information is the version information of existing program in the mobile phone, basic version information is with reference to version information, and current version information must be more than or equal to basic version information.
5. method of computer data downloading being carried out digital signature during to mobile phone as claimed in claim 4 is characterized in that: the revision scheme comparison module of mobile phone carries out the flow process of version comparison and is before the data download:
1) set up communicating to connect between computing machine and the mobile phone after, send the version information of wanting downloaded files by computing machine to mobile phone by data line, the version information that the revision scheme comparison module of mobile phone can send original version information and computing machine in the mobile phone compares according to the version comparison rule, and comparative result returned to computing machine, described version comparison rule is that two versions of striding basic version can be raised to highest version from lowest version, but highest version cannot be dropped to lowest version, the lifting arbitrarily of the version between the same foundation version;
2) if comparative result is to allow to download, then computing machine is proceeded the file download according to the comparative result information of mobile phone transmission; Send the file data bag by computing machine to mobile phone;
3) if comparative result is not allow to download, mobile phone begins to reject follow-up file data bag; Computing machine then can not be downloaded according to the comparative result prompting that mobile phone sends, thereby stops downloading process, and the program that does not meet the version comparison rule can't be downloaded on the mobile phone.
6. method of computer data downloading being carried out digital signature during to mobile phone as claimed in claim 5, it is characterized in that: the revision scheme of regular comparison module is defined as: comprise basic version information and current version information in the version information, current version information is the information of the version of existing program in the mobile phone, basic version information be one with reference to version information, and current version information must be more than or equal to basic version information; The rule of version comparison is that two versions of striding basic version can be raised to highest version from lowest version, but highest version cannot be dropped to lowest version, the lifting arbitrarily of the version between the same foundation version.
7. the start-up detection method of a mobile phone, store digital signature in the mobile phone, during from the downloaded program, mobile phone checks that at first original digital signature is not effectively in the mobile phone, if effectively, then utilize the new and old digital signature of the version information of newly downloaded file and be stored in the mobile phone; If digital signature is invalid, then do not upgrade digital signature; During mobile phone power-on, calculate correct digital signature, and and current phone in the digital signature of storing relatively, if the normal boot-strap if the digital signature testing result is identical different, then has miscue information.
8. the start-up detection method of mobile phone as claimed in claim 7 is characterized in that: the digital signature formula:
E=e (H, V) expression, E wherein: digital signature, e: signature algorithm, H: the mobile phone hardware sequence number, V: the mobile phone version information, mobile phone is judging that meeting is according to new version information under the effective prerequisite of original signature, recomputate digital signature, then new digital signature is covered original digital signature.
9. a method of computer data downloading being carried out digital signature during to digital device stores digital signature in the digital device, and it comprises the steps:
Establish a communications link between computing machine and the digital device;
Computing machine is sent out institute's handshake to digital device;
Digital device sends answer signal to computing machine;
Computing machine router packet is to digital device, the version information that has program in this routine data bag;
The digital device stores packet, after total data all was sent to digital device, digital device sent answer signal to computing machine;
The digital signature module of digital device is upgraded original digital signature in the digital device according to the version information of newly downloaded program, finishes to download.
10. method of computer data downloading being carried out digital signature during to digital device as claimed in claim 9 is characterized in that: carrying out the flow process that digital signature upgrades is:
1) computing machine sends to digital device by data line and downloads the order that finishes;
2) digital device checks at first whether original digital signature is effective in the digital device after receiving order;
3) if effectively, then utilize the new and old digital signature of version information of newly downloaded program;
4) if invalid, then do not upgrade.
11. method of computer data downloading being carried out digital signature during to digital device as claimed in claim 10 is characterized in that: the digital signature formula:
E=e (H, V) expression, E wherein: digital signature, e: signature algorithm, H: the digital device hardware sequence number, V: the digital device version information, digital device is judging that meeting is according to new version information under the effective prerequisite of original signature, recomputate digital signature, then new digital signature is covered original digital signature.
12. as one of any described method of computer data downloading being carried out digital signature during to digital device of claim 9 to 11, it is characterized in that: add program version rule comparison module in the digital device program, at computing machine before digital device sends packet, this module is original program version information in the version information downloaded of desire and the digital device relatively, make the program that only meets predetermined revision scheme can be downloaded to digital device, and the routine data bag that does not meet predetermined revision scheme can not be downloaded to digital device, described revision scheme is: comprise basic version information and current version information in the version information, current version information is the version information of existing program in the mobile phone, basic version information is with reference to version information, and current version information must be more than or equal to basic version information.
13. method of computer data downloading being carried out digital signature during to digital device as claimed in claim 12 is characterized in that: the revision scheme comparison module of digital device carries out the flow process of version comparison and is before the data download:
1) set up communicating to connect between computing machine and the digital device after, send the version information of wanting downloaded files by computing machine to digital device by data line, the version information that the revision scheme comparison module of digital device can send original version information and computing machine in the digital device compares according to the version comparison rule, and comparative result is returned to computing machine; Described version comparison rule is that two versions of striding basic version can be raised to highest version from lowest version, but highest version cannot be dropped to lowest version, the lifting arbitrarily of the version between the same foundation version;
2) if comparative result is to allow to download, then computing machine is proceeded the file download according to the comparative result information of digital device transmission; Send the file data bag by computing machine to digital device;
3) if comparative result is not allow to download, digital device begins to reject follow-up file data bag; Computing machine then can not be downloaded according to the comparative result prompting that digital device sends, thereby stops downloading process, and the program that does not meet the version comparison rule can't be downloaded on the digital device.
14. method of computer data downloading being carried out digital signature during to digital device as claimed in claim 13, it is characterized in that: the revision scheme of regular comparison module is defined as: comprise basic version information and current version information in the version information, current version information is the information of the version of existing program in the digital device, basic version information be one with reference to version information, and current version information must be more than or equal to basic version information; The rule of version comparison is that two versions of striding basic version can be raised to highest version from lowest version, but highest version cannot be dropped to lowest version, the lifting arbitrarily of the version between the same foundation version;
15. terminal device, comprise central processing unit and storer, it is characterized in that having the digital signature module in the storer: store digital signature in the terminal device, during from the downloaded program, terminal device checks that at first original digital signature is not effectively in the terminal device, if effectively, then utilize the new and old digital signature of the version information of newly downloaded file and be stored in the terminal device; If digital signature is invalid, then do not upgrade digital signature.
16. terminal device as claimed in claim 15 is characterized in that: the digital signature formula:
E=e (H, V) expression, E wherein: digital signature, e: signature algorithm, H: the digital device hardware sequence number, V: the digital device version information, digital device is judging that meeting is according to new version information under the effective prerequisite of original signature, recomputate digital signature, then new digital signature is covered original digital signature.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNB2004100182059A CN1311341C (en) | 2004-05-10 | 2004-05-10 | Method for conducting digital signature when downloading computer data to mobile phone |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNB2004100182059A CN1311341C (en) | 2004-05-10 | 2004-05-10 | Method for conducting digital signature when downloading computer data to mobile phone |
Publications (2)
Publication Number | Publication Date |
---|---|
CN1570867A CN1570867A (en) | 2005-01-26 |
CN1311341C true CN1311341C (en) | 2007-04-18 |
Family
ID=34479404
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CNB2004100182059A Expired - Fee Related CN1311341C (en) | 2004-05-10 | 2004-05-10 | Method for conducting digital signature when downloading computer data to mobile phone |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN1311341C (en) |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4727278B2 (en) * | 2005-04-05 | 2011-07-20 | 株式会社エヌ・ティ・ティ・ドコモ | Application program verification system, application program verification method, and computer program |
CN101203000B (en) * | 2007-05-24 | 2012-05-23 | 深圳市德诺通讯技术有限公司 | Method and system for downloading mobile terminal applied software |
CN102254122A (en) * | 2010-05-21 | 2011-11-23 | 深圳市合信自动化技术有限公司 | Programmable logic controller and management method of user programs thereof |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1322312A (en) * | 1998-10-07 | 2001-11-14 | 因芬尼昂技术股份公司 | Copy protection system and method |
CN1343931A (en) * | 2000-09-18 | 2002-04-10 | 游月娥 | Updating method and device for personalized products |
WO2002097620A2 (en) * | 2001-05-31 | 2002-12-05 | Qualcomm Incorporated | Safe application distribution and execution in a wireless environment |
CN1388722A (en) * | 2001-05-28 | 2003-01-01 | 深圳市中兴通讯股份有限公司上海第二研究所 | Local program downloading method and device for distributed PHS base station system |
US6546492B1 (en) * | 1999-03-26 | 2003-04-08 | Ericsson Inc. | System for secure controlled electronic memory updates via networks |
CN1437831A (en) * | 2000-07-03 | 2003-08-20 | 移动拓普株式会社 | Methods of transmitting and executing contents of program for hand-held terminal |
CN1472970A (en) * | 2002-07-29 | 2004-02-04 | 联想(北京)有限公司 | Method for upgrading solid device of wireless communiation modules in use |
-
2004
- 2004-05-10 CN CNB2004100182059A patent/CN1311341C/en not_active Expired - Fee Related
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1322312A (en) * | 1998-10-07 | 2001-11-14 | 因芬尼昂技术股份公司 | Copy protection system and method |
US6546492B1 (en) * | 1999-03-26 | 2003-04-08 | Ericsson Inc. | System for secure controlled electronic memory updates via networks |
CN1437831A (en) * | 2000-07-03 | 2003-08-20 | 移动拓普株式会社 | Methods of transmitting and executing contents of program for hand-held terminal |
CN1343931A (en) * | 2000-09-18 | 2002-04-10 | 游月娥 | Updating method and device for personalized products |
CN1388722A (en) * | 2001-05-28 | 2003-01-01 | 深圳市中兴通讯股份有限公司上海第二研究所 | Local program downloading method and device for distributed PHS base station system |
WO2002097620A2 (en) * | 2001-05-31 | 2002-12-05 | Qualcomm Incorporated | Safe application distribution and execution in a wireless environment |
CN1472970A (en) * | 2002-07-29 | 2004-02-04 | 联想(北京)有限公司 | Method for upgrading solid device of wireless communiation modules in use |
Also Published As
Publication number | Publication date |
---|---|
CN1570867A (en) | 2005-01-26 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN112699342B (en) | Authorization control method, authorization device and computing equipment | |
CN1302407C (en) | Equipment identifying system | |
CN1126398C (en) | System for preventing electronic memory tampering | |
CN102414689B (en) | For improvement of the method and apparatus of code and data signing | |
CN101557308B (en) | File upgrading method and terminal device | |
CN1285235C (en) | Method and system of preventing handset from theft by using international id code of mobile facilities | |
US7707409B2 (en) | Method and system for authenticating software | |
KR100919536B1 (en) | System and method for using a dynamic credential to identify a cloned device | |
CN100574189C (en) | Protection of mobile terminal security lock network pintle hook lock and unlock method based on asymmetric arithmetic | |
WO2008106848A1 (en) | A wireless terminal security network and card locking method based on the ellipse curve public key cipher | |
CN1993921A (en) | Enhanced security using service provider authentication | |
CN101064604A (en) | Remote access process, system and equipment | |
CN1691812A (en) | Mobile station and communication control method | |
CN102981881A (en) | Method and system for preventing mobile terminal from being updated to illegal firmware version | |
CN101034991A (en) | Secure guiding system, method, code signature construction method and authentication method | |
CN1955971A (en) | Safety installation method suitable for Java application program | |
US8751805B2 (en) | Service providing client, wireless terminal and method for implementing binding | |
CN1340940A (en) | Method for dealing inserted-requested message of business in groups | |
CN1941697A (en) | Security method and system and computer-readable medium storing computer program for executing the security method | |
CN1570865A (en) | Method for downloading computer data to mobile phone | |
EP1368737A2 (en) | Software secure authenticated channel | |
CN1238092A (en) | Method and system for ensuring security of service supplies broadcast on computer network of internet type | |
CN1311340C (en) | Method for comparing versions when downloading computer data to mobile phone | |
CN1311341C (en) | Method for conducting digital signature when downloading computer data to mobile phone | |
US8621191B2 (en) | Methods, apparatuses, and computer program products for providing a secure predefined boot sequence |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
C17 | Cessation of patent right | ||
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20070418 Termination date: 20110510 |