TWI637322B - Method of updating firmware of closed storage device - Google Patents

Abstract

The method for updating firmware according to the present invention comprises the steps of: connecting an electronic device to a closed storage device having two memories and a boot loader, and wherein one of the memories is provided with a first preset as a startup program. The electronic device loads a second application, and when the closed storage device detects the second application, the memory storing the first application is converted into a locked state; the electronic device uses the second application The program is transferred to another memory, and the second application is written to another memory for updating. Then, the boot loader sets the second application as a startup program for subsequent closed storage operation, whereby There are two different versions of the application in the closed storage device to replace the update in turn. When the new application fails to update, the boot loader still runs as the launcher with the original application.

Description

Firmware update method for closed storage device

The invention relates to a firmware update method, in particular to detecting a different application, switching one of the memories to a lock mode that cannot be updated, and then writing the new application to another memory for updating. Firmware update method.

With the advancement of technology, many transactions and payment methods have been gradually replaced by integrated circuit (IC) cards. For example, credit cards, financial cards, telephone cards, and stored value cards are common. IC cards, and generally used IC cards can be roughly classified into three types: contact interface, non-contact interface, and composite interface depending on how they are stored and read.

The so-called contact interface IC card uses metal contacts to access data, such as a general wafer financial card, and the so-called non-contact interface IC card uses sensing to access data, for example, The value-added card of the mass transit vehicle or the e-wallet, etc. Later, due to the emergence of many different types of cards on the market, the so-called composite interface IC card was developed, and all credit cards, financial cards, and electronic wallets were The functions of various needs such as stored value cards are integrated into a single IC card, allowing users to enjoy a wide range of services with only a single card.

At present, an IC card generally used has a microprocessor and a memory, and the memory has an application program executable by the microprocessor, and when the IC card is used to generate a bug or an improved program. For the performance requirements, the firmware update operation of the above application is required, and when the firmware update is usually performed, the new firmware image (Image) is usually transmitted through the physical transmission medium (for example, a flash drive, CDs, memory cards, etc.) are transmitted to the above via Internet Protocol (Hype Text Transport Protocol (HTTP), Trivial File Transfer Protocol (TFTP), etc.) The memory causes the last memory to update the application according to the new firmware image, and the application is converted into an updated application.

However, when the above-mentioned memory updates the firmware image of the new version and the update fails, the updated application may lack part of the code, so that the microprocessor cannot execute the updated application, thereby making the above The IC card cannot operate smoothly, so that in order to enable the above-mentioned IC card to operate smoothly, the memory can be updated again according to the new firmware image file. However, in the case of serious cases, the above IC card must be restored and set. The application is restored to its original state and then re-updated, which makes it inconvenient to use.

The main purpose of the present invention is to have two different versions of the application in the closed storage device to replace the update in turn, so that when the new version of the application runs with a program error and cannot be traded, the boot loader can set the old application. In order to start the program to trade, it can avoid the situation that the closed storage device cannot be traded.

The secondary objective of the present invention is that when one of the application updates fails and cannot be operated, the boot loader executes another application, so that the closed storage device can still perform the transaction action, thereby avoiding the closure due to the update failure. The storage device cannot be traded or the application is returned to its original state, resulting in the convenience of using a closed storage device.

In order to achieve the foregoing object, the present invention relates to a method for updating a firmware of a closed storage device, comprising the steps of: providing an electronic device network connection to a closed storage device, the closed storage device having a boot loader a first memory and a second memory, the boot loader sets a first application stored in the first memory as a boot program, and can execute the first application, however, the electronic The device loads a second application different from the first application, so that the electronic device detects that the version of the first application is different from the second application, so that the electronic device uses the first memory. Switch to a lock mode where program updates are not possible.

The electronic device transmits the second application and an electronic signature to the boot loader, the boot loader transfers the second application to the second memory, and transmits the electronic signature to the a security chip inside the closed storage device, wherein when the first application and the second memory both have the first application, the electronic device uses the first memory and the second One of the memories is switched to the above-described locked state, so that the boot loader transfers the second application to the other.

Finally, the second application is written in the second memory for updating, so that the boot loader sets the second application as a startup program, and executes the second application, wherein, when the second application is After the program is written in the second memory and the update is completed, the second memory forms a feature value information transmitted to the boot loader, and the boot loader stores the feature value information and the feature value The information is transmitted to the security chip, so that the boot loader calculates the electronic signature transmitted from the electronic device to the closed storage device through the feature value information, and the security chip transmits the electronic signature after the calculation The feature value information is verified. Further, when the second memory fails to update the second application, the boot loader sets the first application as a startup program, and executes the first application, and implements the first application. In the example, when the security chip stores the feature value information and the electronic signature, the booting The second is the application program is set to start.

The invention is characterized in that before the updating operation, the electronic device detects that the version of the first application is different from the second application, so that the electronic device switches the memory with the first application to the locking mode that cannot be updated. In turn, the boot loader writes the second application to another memory for updating, and the boot loader specifies that the second application is set as the launcher, whereby the closed storage device has two different versions. The application (first and second applications), and the two applications are updated in turn, so that when the second application runs with a program error and cannot be traded, the boot loader can set the first application to Start the program to trade, which in turn prevents the closed storage device from being able to trade.

In addition, when the update of the second application fails and cannot be run, the boot loader can specify that the first application is set as the launcher to conduct the transaction, thereby avoiding the fact that the closed storage device cannot be traded due to the update failure or Reverting the application to its original state allows the closed storage device to be easily traded.

In order to further clarify and understand the structure, the use and the features of the present invention, the preferred embodiment is described in detail with reference to the following drawings:

Referring to FIG. 1 and FIG. 2, the firmware updating method 1 of the closed storage device of the present invention is used in conjunction with a firmware updating device 2 having an electronic device 20 and a closed storage device 21, and an electronic device. The device 20 is provided with an application software 201, wherein the electronic device 20 can be set as a mobile phone, a computer or a tablet.

The closed storage device 21 can be selectively connected or disconnected to the electronic device 20 through the network, the Bluetooth or the infrared, so that the closed storage device 21 can be connected or disconnected from the application software 201 through the electronic device 20, and is closed. The storage device 21 has a microprocessor 211 and a security chip 212. The microprocessor 211 is provided with a first memory 211a, a second memory 211b and a boot loader 211c. The microprocessor 211 is electrically connected. On the security chip 212, the first memory 211a stores a first application. In addition, the security chip 212 has a processing unit 212a. The boot loader 211c sets the first application as a startup program and can execute The first application is used to perform the transaction. In addition, when the application software 201 is installed on the electronic device 20, the application software 201 displays an electronic signature on the contact screen of the electronic device 20, and when the application software 201 is initially connected. When the storage device 21 is closed, the application software 201 of the electronic device 20 stores the electronic signature on the security chip 212, wherein the electronic signature stored in the security chip 212 As a check to determine whether the transaction can be information or software updates.

Referring to FIG. 1 , FIG. 3 and FIG. 4 , when the closed storage device 21 is to be updated, the electronic device 20 is connected to an internet network 22 and simultaneously connected to the closed storage device 21 . The electronic device 20 downloads a second application different from the first application from the Internet 22. When the electronic device 20 stores the second application, a preliminary update step S1 is completed. In this embodiment, The version of the second application is newer than the first application.

Referring to FIG. 1 , FIG. 3 and FIG. 5 , after the preliminary update step S1 is completed, a locking step S2 is performed. When the electronic device 20 stores the second application, the application software 201 of the electronic device 20 is configured according to the first The application and the second application obtain a first version number and a second version number that is different from the first version number, so that the application software 201 detects that the first application version is older than The second application program further causes the application software 201 to form a lock information transmitted to the first memory 211a, causing the first memory 211a to switch to a locked state in which the program update cannot be performed, and then the user is in the electronic device 20 The touch screen is performed to form an electronic signature. At this time, the electronic signature is used to authorize the update.

Referring to FIG. 1 , FIG. 3 and FIG. 6 , a transmission step S3 is performed, and the electronic device 20 transmits the second application and the electronic signature for authorizing the update to the startup of the closed storage device 21 . The loader 211c, and because the first memory 211a assumes the above locked state, the boot loader 211c can transfer the second application to the second memory 211b, and then transfer the electronic signature to the secure chip. 212.

In this embodiment, since the first application is stored in the first memory 211a and is not stored in the second memory 211b, after the electronic device 20 is loaded into the second application by the Internet 22, The electronic device 20 switches the first memory 211a to the locked state, and further transfers the second application to the second memory 211b. However, if both the first and second memory 211a, 211b are stored with the first In the case of the application, when the electronic device 20 loads the second application by the Internet 22, the application software 201 of the electronic device 20 can selectively select both the first memory 211a and the second memory 211b. One of the switches is switched to the locked state, and the second application is transferred to the other of the first memory 211a and the second memory 211b.

As shown, after the second memory 211b receives the second application, when the security chip 212 receives the electronic signature to authorize the update, the security chip 212 will use the above electronic device to authorize the update. The signature is compared with the electronic signature stored in the security chip 212, and when the electronic signature is authorized to update the electronic signature and the electronic signature stored in the security chip 212, the second application Will be written in the second memory 211b, so that the second memory 211b stores the second application program, thereby completing an update step S4, and vice versa, when authorized to update the electronic signature and the memory security chip When the two electronic signatures of 212 do not match each other, the second application cannot be written in the second memory 211b, so that the second application 211b cannot store the second application, and the update step S4 cannot be completed. .

When the updating step S4 is completed, the second memory 211b forms a feature value information transmitted to the boot loader 211c, and the boot loader stores the feature value information and transmits the feature value information to the secure chip 212. The security chip 212 stores the feature value information. At this time, the security chip 212 stores the feature value information and the electronic signature, and the boot loader 211c sets the second application as a startup program. The feature value information is an arithmetic method capable of calculating and verifying information. In this embodiment, the feature value information is set as a hash function.

After the update step S4 is completed, an execution step S5 is performed. When the transaction is to be performed, the user inputs a transaction information (for example, a buyer and a seller transaction account, a buyer purchase amount, a seller sale amount) through the electronic device 20, and the electronic device 20 The input screen is input to form the electronic signature. At this time, the electronic signature is used to authorize the transaction, and the electronic signature stored in the security chip 212 is verified, and then the electronic device 20 transmitting the transaction information and the electronic signature for authorizing the transaction to the closed storage device 21, and the microprocessor 211 executes the second application, so that the boot loader 211c of the microprocessor 211 is used. The electronic signature signed by the authorized transaction is calculated by the feature value information, and is transmitted to the security chip 212 after the calculation. At this time, the processing unit 212a of the security chip 212 transmits the calculated electronic signature through the feature value information. The verification is performed, wherein the security chip 212 verifies that the above-mentioned electronic signature stored inside is the same as that authorized for authorization. When the above electronic signature is traded, a number of assets will be transferred to complete the transaction.

However, when the second application cannot write to the second memory 211b, the boot loader 211c sets the first application as the startup program, so that the microprocessor 211 executes the first application to perform the transaction. .

The above embodiments are intended to be illustrative only, and are not intended to limit the scope of the present invention. It is included in the scope of the following patent application.

1‧‧‧ firmware update method

2‧‧‧ Firmware update device

20‧‧‧Electronic devices

201‧‧‧Application software

21‧‧‧Closed storage device

211‧‧‧Microprocessor

211a‧‧‧First memory

211b‧‧‧Second memory

211c‧‧‧ boot loader

212‧‧‧Safety Wafer

212a‧‧‧Processing unit

22‧‧‧Internet

S1‧‧‧Preparation update steps

S2‧‧‧ Locking step

S3‧‧‧Transfer steps

S4‧‧‧ update steps

S5‧‧‧Execution steps

1 is a schematic flow chart of steps of a firmware updating method for a closed storage device of the present invention; FIG. 2 is a schematic diagram of a module of a firmware updating device; FIG. 3 is a schematic flow chart of a forecast updating step to an executing step; FIG. 5 is a schematic diagram of the preparatory verification step in FIG. 1; and FIG. 6 is a schematic diagram of the comparison transmission step in FIG.

Claims (4)

A method for updating a firmware of a closed storage device includes: providing an electronic device network connection to a closed storage device, the closed storage device having a boot loader, a first memory, and a second memory The boot loader sets a first application stored in the first memory as an activation program and can execute the first application, and the electronic device has a version different from the first application. a second application; the electronic device detects that the version of the first application is different from the second application, and further switches the first memory to a lock mode in which the program update cannot be performed; the electronic device a second application and an electronic signature for authorizing the update are passed to the boot loader, the boot loader transferring the second application to the second memory, and transmitting the electronic signature to a security chip inside the enclosed storage device; the electronic signature and a memory used to authorize the update When the electronic signatures of the security chips are mutually consistent, the second application is written in the second memory for updating, so that the boot loader sets the second application as a startup program and executes the second application. Program. The method for updating firmware of a closed storage device according to claim 1, wherein when the first application and the second memory are both stored in the first application, the electronic device One of the memory and the second memory is switched to the locked state, such that the boot loader transfers the second application to the other. The method for updating firmware of a closed storage device according to claim 1, wherein when the second application is written in the second memory and the update is completed, the second memory is formed into the above Starting the feature value information of the loader, and the boot loader stores the feature value information and transmitting the feature value information to the security chip, so that the boot loader will The electronic signature transmitted from the electronic device to the closed storage device is calculated by the feature value information, and the security chip verifies the electronic signature after the calculation through the feature value information. The firmware update method of the closed storage device of claim 1, wherein the boot loader sets the first application to start when the second memory fails to update the second application Program and execute the first application above.