KR20220142086A - BLOCKCHAIN-BASED IoT DEVICE FIRMWARE SUPPLY SYSTEM AND FIRMWARE UPDATE METHOD USING THE SAME - Google Patents

Abstract

The present invention is to provide a blockchain-based IoT device firmware supply system in which an Internet of Things (IoT) device is connected through a blockchain node, and only firmware verified by the blockchain node can be updated. A firmware update method according to the present invention comprises: a firmware update contract step of creating a firmware update contract, verifying a firmware file on a blockchain network, and sharing contract details for a new firmware on all blockchain networks; and a firmware update execution step of, after the firmware update contract is stored in all blockchain ledgers, executing firmware binary distribution based on the corresponding contract and updating on the IoT device.

Description

Blockchain-based IoT device firmware supply system and firmware update method using the same

The present invention relates to a blockchain-based IoT device firmware supply system and a firmware update method using the same, and more particularly, to an IoT device connected through a blockchain node, and only firmware verified by the blockchain node. It relates to a blockchain-based IoT device firmware supply system that enables update, and a firmware update method using the same.

Recently, as the Internet of Things (IoT), in which various devices and objects are connected to each other through networks, has spread, various Internet of Things (IoT) devices have been released and the Internet of Things (IoT) technology is rapidly spreading.

However, the number of devices connected to the Internet continues to increase, and if there is no system to efficiently integrate and manage them, it can cause great confusion.

Accordingly, the issue of 'how to manage the exponentially increasing IoT devices' is emerging in the near future of the 'hyper-connected era' based on IoT technology.

In addition, the IoT device is equipped with firmware inside, and the firmware is loaded with the most basic software for device operation. Such firmware needs to be verified for integrity between the same IoT devices and needs to be updated whenever the version is upgraded. In addition, the function to update the firmware in the IoT device should be designed to be safe from failures that may occur during the update. This means that it is required.

Therefore, there is a need to develop a technology that can comprehensively update IoT devices spread throughout society and protect them from security threats in real time.

As a prior art for solving the above problems, Korean Patent Publication No. 10-2010-01201110 (2010.11.12.) provides an apparatus and method for cooperative wireless firmware update in a wireless mesh network.

The prior art relates to a cooperative wireless firmware update apparatus and method in a wireless mesh network, and each node in the wireless mesh network uses binary information such as a kernel, a network stack, and an application protocol in common to a base station. By transmitting the difference script instead of the original image from the node to the target node, the firmware update is performed through cooperation between nodes, thereby saving bandwidth and enabling more stable firmware update and maintenance.

However, in the case of the prior art, the purpose is to reduce the bandwidth of data, and since the IoT devices are performing firmware update by the server-client method, the user must directly manipulate and perform it through the authentication server. There is a cumbersome problem that a firmware update must be performed. In addition, since the integrity verification of the firmware is performed only in the firmware update state in a state of being always connected to the server, there is a disadvantage that the integrity verification cannot be performed between IoT devices and the server is overloaded even during the integrity verification.

The present invention was derived to solve the problems of the prior art described above, and an object of the present invention is to connect an IoT device through a blockchain network through a gateway, and firmware verified by a blockchain node. An object of the present invention is to provide a blockchain-based IoT device firmware supply system that enables only updating, and a firmware update method using the same.

In addition, the present invention uses the consensus protocol of blockchain technology in a blockchain-based environment to safely distribute firmware binaries to the requesting IoT device, and verifies the firmware integrity for the update process to verify the firmware information on the IoT device. to be supplied.

A blockchain-based IoT device firmware supply system according to an aspect of the present invention for solving the above technical problem is related to one or more firmware distribution servers managed and operated by one or more firmware manufacturers, and firmware provided by the firmware distribution server A supplier agent that receives information and generates a firmware update contract block and distributes it to other verification nodes in the blockchain network. The IoT agent that performs the role of connecting with the gateway, collects data of IoT devices connected to the Internet of Things network, and requests information on the firmware update contract of the IoT agent, and contracts with the firmware information of the IoT device and the block chain network It has a characteristic comprising an IoT gateway that requests firmware update of an IoT device by comparing firmware information according to the items, and an IoT device connected to and operated at least one IoT gateway.

In addition, the supplier agent and the IoT agent of the present invention serve as a node in a blockchain network, and one or more of the supplier agents operate as a verification node participating in a mining and verification process on the blockchain network, and the IoT agent does not participate in the mining and verification process, but receives the verified firmware update contract information from the supplier agent in the blockchain network and performs only the role of synchronizing it with the data stored in the IoT agent's local ledger. .

In addition, the firmware update method using the blockchain-based IoT device firmware supply system according to an aspect of the present invention for solving the above technical problem creates a firmware update contract and verifies the firmware file in the blockchain network in all blockchain networks. It is characterized in that it consists of a firmware update contract stage that shares the contract details for new firmware and a firmware update execution stage where the firmware update contract is stored in all blockchain ledgers, then firmware binary distribution is executed based on the contract and updated in IoT devices. .

In this case, the firmware update contract step of the present invention is a new firmware storage step in which new firmware update information is stored in a firmware distribution server, and the firmware distribution server is a contract creation request step in which the firmware update contract is issued to a vendor agent on a block chain network. , contract creation and information recording stage in which the supplier agent creates a new firmware update contract and records the new firmware information in the newly created contract, the supplier agent checks the newly created firmware update contract and verifies it on all blockchain networks Contract request distribution stage, which distributes a work block to request verification to a node, verifying the firmware update contract information using the proof-of-work verification mechanism of the work block at each vendor agent on the blockchain network and contract integrity verification step to verify the integrity of the firmware. When the verification of the new firmware update contract is completed, all verification nodes update the verification status of the newly created contract and share the verification result with all other nodes about the verification result. This can be accomplished including the contract ledger record step in which the working blocks of all blockchain networks are updated by collecting them.

In addition, the firmware update execution step of the present invention is performed after the new firmware update contract is verified on the blockchain network, and a new firmware update notification recorded in the blockchain is transmitted to all IoT gateways that work with the IoT agent. Firmware information notification step, IoT device information verification step in which the IoT gateway, which has received a notification of the new firmware update, checks the information related to the new firmware update as information of all IoT devices managed by the IoT gateway, the new firmware file in the IoT device IoT device request delivery step that requests the IoT agent in a pull method to download New firmware contract confirmation step, new firmware URI transmission step of transmitting the URI information of the requested firmware binary to the IoT gateway, new firmware download request step of sending a request for downloading the requested firmware binary from the IoT gateway to the firmware distribution server , a new firmware download step of transmitting the firmware binary file from the location of the URI stored in the firmware distribution server to the corresponding IoT gateway, a new firmware transmission step of checking the firmware file received from the IoT gateway and delivering it to the IoT device, and the firmware from the IoT device It may be characterized in that it comprises the step of checking and updating the firmware for the.

The present invention described above relates to a blockchain-based IoT device firmware supply system and a firmware update method using the same. The present invention performs a firmware update process using a blockchain network built based on a distributed concept, It has the effect of resolving the shortcomings of the centralized network model.

In addition, the present invention has the effect of safely checking the new firmware distributed by a legitimate IoT device supplier and safely distributing the firmware to the final IoT device to protect it from security threats such as hacking on the IoT device in real time.

1 is an exemplary diagram showing the configuration of a blockchain-based IoT device firmware supply system according to an embodiment of the present invention.
FIG. 2 is an enlarged exemplary view of the block chain-based IoT device firmware supply system of FIG. 1 by blocking the configuration.
3 is a flowchart illustrating a firmware update method of a blockchain-based IoT device according to an embodiment of the present invention.

The terms or words used in the present specification and claims should not be construed as being limited to their ordinary or dictionary meanings, and the inventor may properly define the concept of the term in order to best describe his invention. Based on the principle that there is, it should be interpreted as meaning and concept consistent with the technical idea of the present invention.

Therefore, the configuration shown in the embodiments and drawings described in the present specification is only the most preferred embodiment of the present invention and does not represent all the technical spirit of the present invention, so various equivalents that can replace them at the time of the present application It should be understood that there may be water and variations.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary diagram showing the configuration of a blockchain-based IoT device firmware supply system according to an embodiment of the present invention, and FIG. 2 is a more detailed expansion of the configuration of the blockchain-based IoT device firmware supply system of FIG. It is an example diagram in block form.

The IoT device firmware supply system of the present invention includes one or more firmware distribution servers 100 managed and operated by one or more firmware manufacturers, a supplier agent 200 as a block chain network participating node constituting a node on a block chain network, and It consists of an IoT agent 300, an IoT gateway 400 constituting an Internet of Things network, and a configuration entity including the IoT device 500 .

First, the firmware distribution server (Vendor repositor) 100 includes not only the firmware binary (or firmware image) and related information about the firmware, but also various resources such as programs and data of the information system and resources to manage, including detailed information between resources. It can be viewed as a management database.

At this time, the firmware distribution server 100 provides the firmware-related information by interworking with one or more vendor agents on the block chain network to reveal the firmware to the block chain network in a PUSH method using the supplier agent 200 is a server that The firmware distribution server 100 is connected to the vendor agent 200 through a secure channel.

The supplier agent 200 serves as a node that receives information about the firmware provided by the firmware distribution server 100, creates a firmware update contract, and distributes it to other nodes of the block chain network, and each supplier The vendor agent is a node that also serves as a verification node that verifies and verifies the transaction for the firmware update contract distributed on the blockchain network.

That is, the supplier agent 200 is connected to the firmware distribution server 100, configures nodes on the block chain network, and has the role of miners (miners) participating in consensus. Therefore, each supplier agent 200 can be viewed as a verification node on the blockchain network.

And the IoT agent 300 is a block chain node interworking with the IoT network in which the IoT device 500 operates, and receives contract information of a transaction for firmware update from the supplier agent 200, and updates the new firmware It is a node that checks whether there is a version, and serves to connect with the IoT gateway 400 on the Internet of Things for firmware update. Accordingly, the IoT agent 300 is connected to one or more IoT gateways 400 through a secure channel.

At this time, the IoT agent 300 does not participate in the mining and verification process, and receives the verified firmware update contract information or firmware update information from the supplier agent 200 in the blockchain network, and receives the local ledger of the IoT agent 300 . It only plays the role of synchronizing the data stored in the .

In addition, the IoT gateway 400 in the present invention collects firmware information and related data of the IoT device 500 connected to the IoT network and provides an interface with a connected external network, and the IoT agent 300 of the blockchain network ) is a device that provides firmware update to the IoT device 500 by receiving firmware update information. For example, in the IoT gateway 400, a program interworking with an IoT agent of a blockchain network may be additionally operated in a gateway for IoT devices such as a WiFi router in a smart environment.

The IoT gateway 400 is a device serving as a gateway of the IoT that stores information such as a manufacturer, model, and installed firmware version of the registered IoT device 500, and each IoT gateway is the IoT agent ( 400) is identified by the public address (or wallet address) stored in the wallet address (Wallet) stored in the wallet address (Wallet).

Accordingly, when the IoT gateway 400 finds an IoT device that matches the firmware information of the IoT device 500 and the firmware update requirement of the received contract of the blockchain network recognized by the IoT agent, detailed instructions for downloading the firmware binary file It sends information to the relevant IoT agent.

That is, the IoT gateway 400 requests the information of the firmware update contract from the IoT agent 300 in a pull method, and provides the firmware information of the IoT device 500 and the firmware information according to the contract made on the block chain network. will be compared

Accordingly, the IoT gateway 400 finds the IoT device 500 that matches the firmware information of the IoT device 500 and the new firmware update requirement in the blockchain network recognized by the IoT agent 300, and downloads the firmware file. Detailed information for doing so will be sent to the related IoT agent 300 .

In addition, the IoT device 500 is an embedded device such as a sensor having a communication function built-in and connected to various Internet of Things in an environment.

The present invention is to operate in a blockchain network using a smart contract and consensus mechanism in order to verify the integrity of distributed firmware according to the purpose of the above-described configuration entity for effective distribution of firmware.

3 is a flowchart illustrating a firmware update method of a blockchain-based IoT device according to an embodiment of the present invention, which will be described in detail as follows.

Accordingly, the firmware update method of the blockchain-based IoT device of the present invention creates a firmware update contract and verifies the firmware file in the blockchain network to share the contract details for the new firmware in all blockchain networks (S100) After the firmware update contract is updated and stored in all blockchain ledgers, firmware binary distribution is executed based on the contract, and the firmware update execution step (S200) is performed in which the IoT device is updated.

First, in the firmware update contract step (S100), the new firmware storage step (S110), the contract creation request step (S120), the contract creation and information recording step (S130), the contract request distribution step (S140), the contract integrity verification step (S150) ). The contract verification result sharing step (S160) and the contract ledger recording step (S170) in all blockchains may be included.

In the new firmware storage step (S110), a firmware manufacturer develops a new firmware for a specific IoT device operating in the Internet of Things, and stores the firmware binary (or firmware image) and new firmware update information related to the firmware version in the firmware distribution server. is a step to

In the contract creation request step (S120), when new firmware update information is stored in the firmware distribution server, the firmware distribution server issues the creation of a firmware update contract to the vendor agent on the block chain network.

When the new firmware update information is stored in the firmware distribution server, it requests the vendor agent on the blockchain network to create a contract for firmware update. First, the firmware distribution server signs with a private encryption key and signs using a smart contract. It means adding the binary file by pushing it to the blockchain. These smart contracts only allow firmware updates initiated from the network address of the firmware distribution server.

Thereafter, the contract creation and information recording step ( S130 ) is a step of creating a new firmware update contract in the supplier agent and recording new firmware information in the newly created contract.

Then, in the contract request distribution step (S140), the supplier agent distributes the work block according to the newly created firmware update contract to all blockchain networks in order to confirm and request verification of the newly created firmware update contract.

The contract integrity verification step (S150) is a step of going through a peer verification process through a consensus protocol when the firmware update contract distributed in the contract request distribution step (S140) is distributed and posted on the block chain network. Each supplier on the block chain network This is the step of verifying the firmware update contract information and verifying the integrity of the firmware binary file using the proof-of-work verification mechanism of the work block distributed from the agent. This can be seen as the stage of verifying and verifying the newly created firmware update contract through the verification node, which is all other vendor agents in the blockchain network.

The working block distributed in the blockchain network includes a block size, a new firmware version, a block header having a previous block header hash and a Merkle root, and a verification counter indicating the number of normal verifications (4 bytes). ), a tree structure for calculating the Merkle root that guarantees the integrity of block data, a verification log that stores log information about verification work, a device model name, firmware version, and verifier ( verifier) and may be configured to include a block body including information of verifier (40 bytes).

Thereafter, the contract verification result sharing step ( S160 ) is a step in which, when verification of the new firmware update contract is completed, all verification nodes update the verification state of the newly created contract and share the verification result with all other nodes.

And in the contract ledger recording step (S170) in all the blockchains, the contract details of the old and new firmware are shared on all blockchain networks through the contract verification result sharing step (S160) and the verification status is updated, and the verification node is confirmed This is the stage of collecting all firmware update contracts and storing them on the blockchain ledger.

This can be seen as the stage in which the working blocks of all blockchain networks are updated by collecting all firmware update contracts confirmed by the verification nodes on all blockchain networks.

As described above, firmware update contract details and verification details are stored in all blockchain ledgers, and then firmware update execution step (S200) in which firmware binary distribution is executed based on the contract can be performed.

Accordingly, in the firmware update execution step (S200), the new firmware information notification step (S210), the IoT device information check step (S220), the IoT device request delivery step (S230), the new firmware contract details check step (S240), the new firmware URI A transmission step (S250), a new firmware download request step (S260), a new firmware download step (S270), a new firmware transmission step (S280), and a firmware confirmation and update step (S290) may be included.

The new firmware information notification step S210 is a step in which the IoT agent confirms a new firmware update contract, and transmits a notification about the new firmware update recorded in the block chain to all IoT gateways that interwork with the IoT agent and manage.

In the IoT device information confirmation step (S220), the IoT gateway that has received the notification of the new firmware update recorded in the block chain through the new firmware notification step (S210) manages the information related to the new firmware update by the corresponding IoT gateway. This is the step to check with the information of all IoT devices.

According to the notification of the new firmware update received by the IoT gateway, the IoT agent requests the information of the firmware update contract, and the firmware information of the IoT device corresponding to the new firmware update contract and the contract made on the block chain network It is a step of comparing firmware information according to the following. This can be seen as a process in which the firmware information of the IoT device becomes the old version, and the new firmware information is compared according to a notification of a new firmware update.

Accordingly, the IoT device request delivery step (S230) is to find the IoT device that matches the firmware information of the IoT device in the IoT gateway and the new firmware update requirement in the blockchain network recognized by the IoT agent, and download the firmware file. This is the step of requesting to send detailed information to the relevant IoT agent in a pull method.

Thereafter, in the confirmation of the new firmware contract details ( S240 ), the IoT agent receives a firmware update request from the IoT gateway, and checks the requirements of the firmware update contract that match the firmware update request received from the IoT gateway.

The new firmware URI transmission step ( S250 ) is a step in which the IoT agent, which is a blockchain node, confirms the firmware update contract requirement that matches the firmware update request, and sends URI information of the requested firmware binary to the IoT gateway.

The new firmware download request step S260 is a step in which the IoT gateway sends a request for downloading the firmware binary requested from the IoT gateway to the firmware distribution server after receiving the URI of the firmware binary.

The new firmware download step S270 is a step of receiving a request sent by the corresponding IoT gateway from the location of the URI stored in the firmware distribution server, and sending the requested firmware binary file to the requesting IoT gateway.

Thereafter, the step of confirming and transmitting the new firmware ( S280 ) is a step in which the IoT gateway checks the firmware binary file and transmits it to the related IoT device after the IoT gateway completes downloading the firmware binary file.

The firmware update step S290 is a step of finally checking and updating the firmware in the IoT device.

In conclusion, the present invention is a series of devices in which an IoT device is connected to a blockchain network built based on a distributed concept through an IoT gateway, checks only the firmware verified by the blockchain node, and supplies it to the IoT device. It can be seen that it provides a blockchain-based IoT device firmware supply system based on the framework of , and a firmware update method using the same.

As described above, in the detailed description of the present invention, preferred embodiments have been described, but those of ordinary skill in the art will not depart from the spirit and scope of the present invention as set forth in the following claims. It will be understood that various modifications and variations of the present invention may be made.

100: firmware distribution server 200: firmware distribution server
300: IoT agent 400: IoT gateway
500: IoT device

Claims (5)

In the blockchain-based IoT device firmware supply system,
one or more firmware distribution servers managed and operated by one or more firmware manufacturers;
A vendor agent that receives information about the firmware provided by the firmware distribution server, generates a firmware update contract block, and distributes it to other verification nodes in the blockchain network;
An IoT agent that receives contract information on which a verification process of contract information for firmware update has been performed from the supplier agent and connects with an IoT gateway on the Internet of Things;
By collecting data of IoT devices connected to the Internet of Things network and requesting information on the firmware update contract of the IoT agent, the firmware information of the IoT device and firmware information according to the contract made on the block chain network are compared to the firmware of the IoT device. IoT gateway requesting updates and
A block chain-based IoT device firmware supply system comprising an IoT device operated by being connected to one or more IoT gateways.
The method according to claim 1,
The supplier agent and IoT agent serve as nodes in a blockchain network, and one or more of the supplier agents operate as validation nodes participating in mining and verification processes on the blockchain network,
The IoT agent does not participate in the mining and verification process, but only receives the firmware update contract information verified from the supplier agent in the blockchain network and synchronizes it with the data stored in the IoT agent's local ledger. Blockchain-based IoT device firmware supply system.
In a firmware update method using a blockchain-based IoT device firmware supply system,
The firmware update contract stage, which creates a firmware update contract and verifies the firmware file on the blockchain network, to share the contract details for the new firmware on all blockchain networks;
After the firmware update contract is stored in all blockchain ledgers, the firmware binary distribution is executed based on the contract, and the firmware update execution step of updating the IoT device is a block chain-based IoT device firmware update method.
4. The method of claim 3,
The firmware update contract step is
A new firmware storage step in which the new firmware update information is stored in the firmware distribution server;
A contract creation request step in which the firmware distribution server issues the creation of a firmware update contract to a vendor agent on a blockchain network;
Contract creation and information recording step of creating a new firmware update contract in the vendor agent and recording the new firmware information in the newly created contract;
Contract request distribution stage, in which the vendor agent verifies the newly created firmware update contract and distributes the working block to request verification to all verification nodes on the blockchain network;
Contract integrity verification step in which each vendor agent on the blockchain network verifies the firmware update contract information and verifies the integrity of the firmware using the proof-of-work verification mechanism of the work block.
When the verification of the new firmware update contract is completed, all verification nodes update the verification status of the newly created contract and share the verification result with all other nodes.
A blockchain-based IoT device firmware update method, comprising a contract ledger recording step in which the working blocks of all blockchain networks are updated by collecting all firmware update contracts confirmed by the verification node.
4. The method of claim 3,
The firmware update execution step is performed after the new firmware update contract is verified on the blockchain network,
A new firmware information notification step that sends a notification of a new firmware update recorded in the block chain to all IoT gateways that work with the IoT agent;
IoT device information confirmation step, in which the IoT gateway, which has received the notification of the new firmware update, checks the information related to the new firmware update as information of all IoT devices managed by the IoT gateway;
An IoT device request delivery step of requesting the IoT agent in a pull method to download a new firmware file from the IoT device;
A new firmware contract confirmation step of receiving a firmware update request from the IoT gateway, and checking the requirements of the firmware update contract that match the firmware update request received from the IoT gateway;
A new firmware URI transmission step of transmitting the requested firmware binary URI information to the IoT gateway;
A new firmware download request step of sending a request to download the requested firmware binary from the IoT gateway to the firmware distribution server;
A new firmware download step that sends a firmware binary file from the location of the URI stored in the firmware distribution server to the corresponding IoT gateway;
A block chain-based IoT device firmware update method comprising the steps of checking the firmware file received from the IoT gateway and transmitting the new firmware to the IoT device, and checking and updating the firmware for the firmware in the IoT device .

Images