TWI815263B - Processing system and method for online firmware update - Google Patents

Abstract

A processing system and method for updating firmware online. The processing system performs the following steps: The electronic device sends a download request to a firmware security update server; the firmware security update server searches for whether there is a new version of firmware information based on the download request; if the firmware security update server has the corresponding electronic device's For the new version of firmware information, the firmware security update server decrypts an encrypted new version of firmware file corresponding to the electronic device into a new version of firmware file, and encrypts the new version of firmware file with a unique characteristic to generate an exclusive encrypted new version of firmware. body file, and generates a load point path information based on the exclusive encrypted new version of the firmware file; the electronic device receives the load point path information, and then links the load point path information to the firmware security update server, and in the firmware The security update server downloads the exclusive encrypted new version firmware file, and the electronic device decrypts the exclusive encrypted new version firmware file with a unique characteristic to obtain the new version firmware file.

Description

Processing system and method for online firmware update

It relates to an online update system and method, in particular to an online firmware update processing system and method.

For electronic products, hardware design and software design are equally important topics. In order to effectively control the related operations of hardware components, it also needs to rely on the cooperation of software and firmware. Firmware is the communication medium between software and hardware, so once there is a problem with the firmware, it will inevitably affect all aspects of the use of electronic products.

In addition, electronic products can also provide more powerful functions through firmware upgrades. Due to the unique status of firmware, firmware updates will directly affect electronic products. Especially for information security considerations, if an electronic device loads a firmware file with malicious code, it may cause damage to the electronic product or leak the user's confidential information.

For the firmware provider, the firmware provider cannot verify the identity of the initiator who makes the download request. Therefore, it is unavoidable that malicious third parties disguise themselves as legitimate electronic products and request the corresponding firmware from the firmware provider.

In view of this, in one embodiment, an online firmware update processing system is provided to create exclusive firmware and download resources for electronic devices to ensure that the firmware update process will not be forged or attacked by malicious third parties.

To achieve the above objectives, the present invention provides an online firmware update processing system, which includes: a firmware source that can generate at least one encrypted new version of firmware file and a new version of firmware information; and a firmware security update server. , connected to the firmware source, the firmware security update server receives and stores the new version of firmware information and the encrypted new version of firmware file, and decrypts the encrypted new version of firmware file into a new version of firmware file, and the The firmware security update server encrypts the new version of the firmware file with a unique characteristic to generate a unique encrypted new version of the firmware file, and generates a load point path information based on the unique encrypted new version of the firmware file. At least one electronic device is connected to the firmware security update server, and the electronic device receives the download point path information, and then connects to the firmware security update server through the download point path information, and downloads the exclusive encrypted new version. Firmware file. And the electronic device decrypts the exclusive encrypted new version firmware file based on the unique characteristic to obtain the new version firmware file.

According to an embodiment of the online firmware update processing system of the present invention, the firmware security update server further includes: a firmware storage terminal connected to the firmware source terminal to receive and store the new version of firmware information and the encryption A new version of the firmware file; at least one firmware production server, connected to the firmware storage terminal, receives the encrypted new version of the firmware file; a secure computing terminal, connected to the firmware production server, and the secure computing terminal receives all After encrypting the new version of the firmware file and decrypting the encrypted new version of the firmware file to generate the new version of the firmware file, and encrypting the new version of the firmware file with the unique characteristics to generate an exclusive encrypted new version of the firmware file, the exclusive encrypted new version of the firmware file is The firmware production server generates load point path information from the exclusive encrypted new version of the firmware file; an update management terminal is connected to the firmware storage terminal and receives the new version of the firmware. information, connected to the firmware production server and receiving the load point path information; a firmware provider, connected to the firmware production server and receiving the exclusive encrypted new version of the firmware file. An electronic device connects the update management terminal and the firmware provider, and the electronic device receives the download point path information, and then connects to the firmware provider through the download point path information and downloads the exclusive encryption at the firmware provider A new version of the firmware file, and the electronic device decrypts the exclusive encrypted new version of the firmware file using the unique characteristics to obtain the new version of the firmware file.

According to an embodiment of the online firmware update processing system of the present invention, the firmware source uses a signature private key to generate signature information for the encrypted new version of the firmware file, and uses an encrypted public key for the signature. The signature information and an encrypted new version of the firmware key are encrypted to generate an encrypted signature information and an encrypted key, and the encrypted new version of the firmware file, the encrypted signature information and the encrypted key are passed through the firmware The storage terminal and the dedicated firmware production server are sent to the secure computing terminal. The secure computing terminal uses a decryption private key to decrypt the encrypted signature information and the encrypted key to obtain the signature information and the encrypted new version of firmware. The secure computing end uses the encrypted new version firmware key to decrypt the encrypted new version firmware file to obtain the new version firmware file. The firmware source end uses a signature verification public key to verify the signature information. And to confirm that the encrypted new version of the firmware file comes from the source of the firmware.

According to an embodiment of the online firmware update processing system of the present invention, a Transport Layer Security (TLS) connection is established between the firmware source and the firmware storage.

According to an embodiment of the online firmware update processing system of the present invention, it further includes a message sequence manager and a load server. The message sequence manager connects the update management terminal and the firmware production server, and the load The server connects to the message sequence manager and the message sequence manager connects the update management terminal and the firmware production server, and the load server obtains data from the firmware production servers based on a current load of the firmware production servers. The one with the smallest current load among the institutional servers is selected as the target server.

The present invention also provides a method for updating firmware online, which includes the following steps: An electronic device sends a download request to a firmware security update server; The firmware security update server searches for information about a new version of firmware based on the download request; If the firmware security update server has the new version of the firmware information corresponding to the electronic device, the firmware security update server decrypts an encrypted new version of the firmware file of the corresponding electronic device into a new version of the firmware file, and uses a The unique characteristic is to encrypt the new version of firmware file to generate a unique encrypted new version of firmware file, and generate a load point path information based on the unique encrypted new version of firmware file; The electronic device receives the download point path information, and then connects to the firmware security update server through the download point path information, and downloads the exclusive encrypted new version of the firmware file on the firmware security update server, and the electronic device Decrypt the exclusive encrypted new version firmware file using the unique feature to obtain the new version firmware file.

According to one embodiment of the online firmware update processing method of the present invention, the firmware security update server includes: The update management terminal searches whether there is a new version of firmware information based on the download request; If the update management terminal has the new version firmware information corresponding to the electronic device, the update management terminal causes a firmware storage terminal to send an encrypted new version firmware file corresponding to the electronic device to a firmware production server; The firmware production server sends the encrypted new version firmware file to a secure computing terminal; The secure computing terminal decrypts the encrypted new firmware file into a new firmware file, encrypts the new firmware file with a unique characteristic to generate an exclusive encrypted new firmware file, and sends the exclusive encrypted new firmware file to The firmware production server; The firmware production server generates a load point path information based on the exclusive encrypted new version firmware file, and sends its exclusive encrypted new version firmware file to the firmware provider, and sends the load point path information to the update management side; and The electronic device receives the loading point path information, and then links the loading point path information to the firmware provider and downloads the exclusive encrypted new version of the firmware file at the firmware provider, and the electronic device decrypts the said unique feature. Exclusively encrypt the new version of the firmware file to obtain the new version of the firmware file.

According to one embodiment of the online firmware update processing method of the present invention, the step of instructing a firmware storage terminal to send an encrypted new version of the firmware file corresponding to the electronic device to a firmware production server at the update management terminal includes : The update management terminal sends a production command to a load server through a message sequence manager, so that the load server selects the one with the smallest current load as the target server according to a current load of the firmware production servers.

According to one embodiment of the method for online firmware update of the present invention, it includes a security mechanism: a firmware source that transmits the encrypted new version of the firmware file and the new version of the firmware information to the firmware storage end; Use a signing private key for the firmware source to sign the encrypted new version of the firmware file to generate a signature information, and use an encrypted public key to encrypt the signature information and an encrypted new version of the firmware key to generate a signature. Encrypt the signature information and an encrypted key, and send the encrypted new version file firmware file, the encrypted signature information and the encrypted key to the firmware storage end; The firmware storage terminal sends the encrypted new version file firmware file, the encrypted signature information and the encrypted key to the firmware production server; The firmware production server transmits the encrypted new version file firmware file, the encrypted signature information and the encrypted key to the secure computing terminal; The secure computing end uses a decryption private key to decrypt the encrypted signature information and the encrypted key to obtain the signature information and the encrypted new version of the firmware key. The secure computing end uses the encrypted new version of the firmware key to Encrypt the new version of the firmware file and decrypt it to obtain the new version of the firmware file. The secure computing terminal uses a signature verification public key to verify the signature information and confirm that the encrypted new version of the firmware file comes from the firmware source;

According to one embodiment of the method for online firmware update of the present invention, a security mechanism is included: a firmware source transmits the encrypted new version of the firmware file and the new version of the firmware information to the firmware storage end, and the firmware source Establish a TLS secure connection between the client and the firmware storage client.

The above objects and structural and functional characteristics of the present invention will be explained based on the preferred embodiments of the accompanying drawings.

Please refer to Figure 1, which is a schematic diagram of the system architecture of the online firmware update processing system of the present invention. It can be clearly seen from the figure that the online firmware update processing system 1 includes a firmware source end 110 and A firmware security update server 12. The firmware security update server 12 includes a firmware storage terminal 120 and at least one firmware production server 130, a security computing terminal 140, an update management terminal 150 and a firmware provider. Terminal 160 and at least one electronic device 170.

The firmware source 110 can generate at least one encrypted new version of firmware file 111 and a new version of firmware information 112, and the firmware storage end 120 is electrically connected to the firmware source end 110, and the firmware storage end 120 receives and stores the encrypted new version firmware file 111 and the new version firmware information 112, and the firmware production server 130 is connected to the firmware storage terminal 120, and the firmware production server 130 receives The new version of the firmware file 111 is encrypted, and the secure computing terminal 140 is connected to the firmware production server 130, and the secure computing terminal 140 is provided with at least one unique feature 141, and the update management terminal 150 and the firmware The provider 160 is connected to the firmware production server 130 respectively, the electronic device 170 is connected to the update management end 150 and the firmware provider 160, and the electronic device 170 includes the unique feature 141, wherein the security The unique characteristics 142 of the computing terminal 140 and the electronic device 170 may be a universally unique identifier (UUID), device model or certificate of the electronic device 170 .

When the firmware source 110 generates the encrypted new firmware file 111 and the new firmware information 112, the firmware source 110 will generate the encrypted new firmware file 111 and the new firmware. The firmware storage 112 is sent to the firmware storage 120, and the firmware storage 120 receives and stores the encrypted new firmware file 111 and the new firmware information 112. The firmware storage 120 also sends the new firmware information. 112 to the update management terminal 150.

When the electronic device 170 sends an update firmware download request to the update management terminal 150, the update management terminal 150 will first confirm the identity of the electronic device 170. The electronic device 170 and the update management terminal 150 are established through an identity authentication mechanism. Online, the identity authentication mechanism can perform Public Key Infrastructure (PKI) identity authentication on the electronic device for the update management end or establish a Transport Layer Security (TLS) connection between the electronic device and the update management end. After the update management terminal 150 and the electronic device 170 pass identity authentication and the new version of firmware information 112, the update management terminal 150 can know whether the new version of the firmware file used by the electronic device 170 has been generated. If the firmware source When 110 does not generate the new version firmware file required by its electronic device 170, the update management terminal 150 sends a response message to the electronic device 170 to inform the electronic device 170 that the new version firmware file it requires is not available at this time.

On the contrary, if the update management terminal 150 learns that the new version of the firmware file used by the electronic device 170 has been generated, the update management terminal 150 then determines whether the exclusive encrypted new version of the firmware file 142 corresponding to the electronic device 170 has been generated. If not, the update management terminal 150 will inform the electronic device 170 that its new version of the firmware file has been released by the firmware source 110 but is not available for download, and at the same time, the update management terminal 150 will generate a production for its firmware production server 130 command, the firmware production server 130 receives the encrypted new firmware file 111 of its firmware storage 120, and the firmware production server 130 transmits the encrypted new firmware file 111 to the secure computing terminal 140, The secure computing end 140 receives the encrypted new version firmware file 111 and decrypts the encrypted new version firmware file 111 into a new version firmware file. This decryption method can be a pairing between the firmware source end 110 and the secure computing end 140 Decrypt the public, private and golden keys, and then the secure computing end 140 encrypts the new version of the firmware file with the unique characteristics 141 of the electronic device 171 to generate an exclusive encrypted new version of the firmware file 142, and the secure computing end 140 generates After the exclusive encryption of the new version of the firmware file 142, the secure computing terminal 140 returns the exclusive encryption of the new version of the firmware file 142 to the firmware production server 130. The firmware production server 130 receives the exclusive encryption. After the new version of the firmware file 142, the firmware production server 130 generates the download point path information 131 corresponding to the unique encrypted new version of the firmware file 142, wherein the download point path information 131 can be a File Transfer Protocol (FTP) space or a unified Resource locator path information space (Uniform Resource Locator, URL), etc., and the firmware production server 130 sends the exclusive encrypted new version firmware file 142 to the firmware provider after the load point path information 131 is generated. The terminal 160 further transmits the download point path information 131 to the update management terminal 150, so that the update management terminal 150 has the download point path information 131, and the firmware provider 160 has the exclusive encrypted new version firmware file 142. , and then if the electronic device 170 sends the update firmware download request to the update management terminal 150 again, the update management terminal 150 sends the download point path information 131 to the electronic device 170, and the electronic device 170 can pass Connect the load point path information 131 to the firmware provider 160 to download the exclusive encrypted new version firmware file 142, and after the electronic device 170 downloads the exclusive encrypted new version firmware file 142, the electronic device 170 The exclusive encrypted new version firmware file 142 is decrypted using the unique characteristics 141 of the electronic device to obtain the new version firmware file.

The electronic device 170 may be, but is not limited to, a personal computer, a notebook computer, a mobile communication device, a tablet computer, a chip, or other computer equipment with communication capabilities.

In order to clearly explain the overall operation process of the online firmware update processing system, please refer to Figure 2, which is a flow chart of the online firmware update processing method of the present invention.

Step S210: The electronic device sends a download request to the update management terminal;

Step S220: The firmware security update server searches whether there is a new version of firmware information according to the download request; if the firmware security update server does not have the new version of firmware information corresponding to the electronic device, then enter step S230: The firmware security update server sends a response message to the electronic device to inform that the electronic device does not have the new version of the firmware file it requires at this time; conversely, if the firmware security update server has the new version of the corresponding electronic device When the firmware information is received, step S240 is entered.

Step S240: If the firmware security update server has the new version firmware information corresponding to the electronic device, the firmware security update server decrypts an encrypted new version firmware file corresponding to the electronic device into a new version firmware file, And encrypt the new version firmware file with a unique characteristic to generate a unique encrypted new version firmware file, and generate a load path information based on the unique encrypted new version firmware file;

Step S250: The electronic device receives the loading point path information, and then connects to the firmware security update server through the loading point path information and downloads the exclusive encrypted new version of the firmware file on the firmware security update server, and the electronic device Decrypt the exclusive encrypted new version firmware file using the unique feature to obtain the new version firmware file.

Please refer to Figure 3 again, which is a flow chart of an online firmware update processing method according to an embodiment of the present invention.

Step S310: The electronic device sends a download request to the update management terminal;

Step S320: The update management terminal searches whether there is a new version of firmware information according to the download request; if the update management terminal does not have the new version of firmware information corresponding to the electronic device, then enter step S330: The update management terminal provides the electronic device with A response message is sent to inform that the electronic device does not have the new version of firmware file it requires at this time; on the contrary, if the update management terminal has the new version of firmware information corresponding to the electronic device 170, step S340 is entered.

Step S340: The update management terminal causes a firmware storage terminal to send the encrypted new version of the firmware file corresponding to the electronic device to the firmware production server;

Step S350: The firmware production server sends the encrypted new version of the firmware file to the secure computing terminal;

Step S360: The secure computing terminal decrypts the encrypted new firmware file into a new firmware file, encrypts the new firmware file with a unique characteristic to generate an exclusive encrypted new firmware file, and encrypts the exclusive encrypted new firmware file. Sent to the firmware production server;

Step S370: The firmware production server generates a load point path information based on the exclusive encrypted new version firmware file, and sends its exclusive encrypted new version firmware file to the firmware provider, and sends the load point path information. to the update manager; and

Step S380: The electronic device receives the loading point path information, and then connects to the firmware provider through the loading point path information and downloads the exclusive encrypted new version of the firmware file at the firmware provider, and the electronic device uses the unique characteristic Decrypt the exclusive encrypted new version firmware file to obtain the encrypted new version firmware file.

Please refer to Figure 4 again, which is a schematic diagram of the system architecture of adding a message sequence manager and a load server to the online firmware update processing system of the present invention. The online firmware update processing system 1 further includes a message sequence manager 151 and a load server 190, the message sequence manager 151 connects the update management terminal 150 and the firmware production server 130, and the load server 190 connects the message sequence manager 151 and is connected by the message sequence manager 151 The update management terminal 150 and the firmware production server 130, and the load server 190 selects the minimum current load from the firmware production servers 130 according to a current load of the firmware production servers 130. is the target server.

The current load may be, but is not limited to, the operating load of the CPU, network throughput load or storage space load, etc. When the load server 190 receives the encrypted new version of the firmware file 111, the load server 190 will evaluate the current loads of all firmware production servers 130. The load server 190 selects the one with the smallest current load from the firmware production servers 130 as the target server.

Please refer to Figure 5 again, which is a schematic diagram of the secure transmission system of the online firmware update processing system of the present invention. The firmware source 110 uses a signature private key 1101 to sign the encrypted new version of the firmware 111 file. Generate a signature information, and use an encrypted public key 1102 to encrypt the signature information and an encrypted new version firmware key to generate an encrypted signature information 1103 and an encrypted key 1104, and encrypt the new version of the firmware The file 111, the encrypted signature information 1103 and the encrypted key 1104 are transmitted to the secure computing terminal 140 via the firmware storage 120 and the firmware production server 130. The secure computing terminal 140 uses a decryption private key 1402 The encrypted signature information 1103 and the encrypted key 1104 are decrypted to obtain the signature information and the encrypted new firmware key, and the secure computing terminal 140 uses the encrypted new firmware key to encrypt the new firmware file 111 Decryption is performed to obtain the new version of the firmware file. The firmware source uses a signature verification public key 1401 to verify the signature information and confirm that the encrypted new version of the firmware file comes from the firmware source. This ensures that the encrypted new firmware 111 is sent to the correct firmware security update server 12 and prevents the encrypted new firmware 111 from being cracked and used when it is lost.

The present invention has been described in detail above. However, the above is only a preferred embodiment of the present invention. It cannot limit the scope of the present invention, that is, all equivalent changes and modifications can be made according to the scope of the present invention. etc., should still fall within the scope of the patent of the present invention.

Online firmware update processing system. ． ． 1 Firmware source. ． ． 110 Encrypt new version firmware files. ． ． 111 New version of firmware information． ． ． 112 Firmware security update server... ． ． 12 Firmware storage terminal. ． ． 120 Firmware production server. ． ． 130 Load point path information. ． ． 131 Safe computing terminal. ． ． 140 The only characteristic. ． ． 141 Exclusive encrypted new version firmware file. ． ． 142 Update management terminal. ． ． 150 Message sequence manager. ． ． 151 Firmware provider. ． ． 160 Electronic equipment. ． ． 170 Load server. ． ． 190 Signing private key. ． ． 1101 Encryption public key. ． ． 1102 Encrypted signature information. ． ． 1103 The encrypted key. ． ． 1104 Verification public key. ． ． 1401 Decrypt the private key. ． ． 1402

Figure 1 is a schematic diagram of the system architecture of the online firmware update processing system of the present invention. . Figure 2 is a flow chart of the online firmware update processing method of the present invention. Figure 3 is an embodiment of a flow chart of the online firmware update processing method of the present invention. Figure 4 is a schematic diagram of the system architecture in which a message sequence manager and a load server are added to the online firmware update processing system of the present invention. Figure 5 is a schematic diagram of the secure transmission system of the online firmware update processing system of the present invention.

Online firmware update processing system. ． ． 1 Firmware source. ． ． 110 Encrypt new version firmware files. ． ． 111 New version of firmware information． ． ． 112 Firmware security update server... ． ． 12 Firmware storage terminal. ． ． 120 Firmware production server. ． ． 130 Load point path information. ． ． 131 Safe computing terminal. ． ． 140 The only characteristic. ． ． 141 Exclusive encrypted new version firmware file. ． ． 142 Update management terminal. ． ． 150 Firmware provider. ． ． 160 Electronic equipment. ． ． 170

Claims (8)

A processing system for online firmware update, including: a firmware source that can generate at least one encrypted new version of firmware file and one new version of firmware information; a firmware security update server that includes a firmware storage terminal, at least A firmware production server, a secure computing terminal, an update management terminal and a firmware provider. The firmware storage terminal is connected to the firmware source terminal to receive and store the new version of firmware information and the encrypted new version of firmware file. , the firmware production server is connected to the firmware storage terminal and receives the encrypted new version of the firmware file, the secure computing terminal is connected to the firmware production server, and the secure computing terminal receives the encrypted new version of the firmware file and Decrypt the encrypted new version firmware file to generate the new version firmware file, encrypt the new version firmware file with a unique characteristic to generate an exclusive encrypted new version firmware file, and then transmit the exclusive encrypted new version firmware file to the firmware product. The firmware production server generates load point path information from the exclusive encrypted new version of the firmware file. The update management terminal is connected to the firmware storage terminal and receives the new version of the firmware information. It is connected to the firmware production server. The server receives the download point path information; and at least one electronic device is connected to the update management end and the firmware provider of the firmware security update server, and the electronic device receives the download point path information, and then uses the download point path information to The path information is linked to the firmware security update server and the exclusive encrypted new version of the firmware file is downloaded from the firmware provider, and the exclusive encrypted new version of the firmware file is downloaded, and the electronic device decrypts the exclusive encrypted new version of the firmware file based on the unique characteristic. The new version of the firmware file is encrypted to obtain the new version of the firmware file, in which the unique characteristics 142 of the secure computing terminal 140 and the electronic device 170 may be a universally unique identifier (Universally Unique Identifier, UUID), device model or certificate of the electronic device 170 . For example, the online firmware update processing system of request item 1, wherein the firmware source uses a signature private key to generate a signature information for the encrypted new version of the firmware file, and uses an encrypted The public key encrypts the signature information and an encrypted new version of the firmware key to generate an encrypted signature information and an encrypted key, and the encrypted new version of the firmware file, the encrypted signature information and the encrypted key are It is transmitted to the secure computing terminal through the firmware storage terminal and the firmware production server. The secure computing terminal uses a decryption private key to decrypt the encrypted signature information and the encrypted key to obtain the signature information and the encryption. The new version of the firmware key is used by the secure computing end to decrypt the encrypted new version of the firmware file and the new version of the firmware file is obtained. The firmware source end uses a verification public key for the signature information. Perform seal verification to confirm that the encrypted new version of the firmware file comes from the source of the firmware. For example, in the online firmware update processing system of claim 1, a Transport Layer Security (TLS) connection is established between the firmware source and the firmware storage, and the connection is secure. The online firmware update processing system of claim 1 further includes a message sequence manager and a load server, the message sequence manager connects the update management terminal and the firmware production server, and the load server connects The message sequence manager connects the update management terminal and the firmware production server by the message sequence manager, and the load server obtains the information from the firmware production servers according to a current load of the firmware production servers. Select the one with the smallest current load among the target servers as the target server. A method for updating firmware online, including: an electronic device sends a download request to a firmware security update server; the update management end of the firmware security update server searches whether there is a new version of firmware information based on the download request ; If the update management end of the firmware security update server has the new version of firmware information corresponding to the electronic device, the update management end of the firmware security update server causes a firmware storage end to store an encrypted new version of the firmware of the corresponding electronic device. Send the body file to a firmware production server; The firmware production server sends the encrypted new firmware file to a secure computing terminal; the secure computing terminal decrypts the encrypted new firmware file into a new firmware file, and encrypts the new firmware file with a unique characteristic Generate an exclusive encrypted new version of the firmware file, and send the exclusive encrypted new version of the firmware file to the firmware production server; the firmware production server generates a load point path information based on the exclusive encrypted new version of the firmware file, and sends the The exclusive encrypted new version of the firmware file is sent to a firmware provider, and the download point path information is sent to an update management terminal; and the electronic device receives the download point path information, and then links the download point path information to the The firmware provider of the firmware security update server downloads the exclusive encrypted new firmware file from the firmware provider, and the electronic device decrypts the exclusive encrypted new firmware file using the unique characteristic to obtain the new firmware. File, in which the unique characteristics 142 of the secure computing terminal 140 and the electronic device 170 may be a universally unique identifier (UUID), device model or certificate of the electronic device 170 . For example, the method for online firmware update in claim 5, wherein the step of causing a firmware storage terminal to send an encrypted new version of the firmware file corresponding to the electronic device to a firmware production server at the update management terminal includes: The update management terminal sends a production command to a load server through a message sequence manager, so that the load server selects the one with the smallest current load as the target server according to a current load of the firmware production servers. For example, the processing method of online firmware update in request item 5 includes a security mechanism: a firmware source that transmits the encrypted new version of the firmware file and the new version of the firmware information to the firmware storage end; The firmware source uses a signature private key to sign the encrypted new version of the firmware file to generate a signature information, and uses an encrypted public key to encrypt the signature information and an encrypted new version of the firmware key to generate an encrypted signature. Signature information and an encrypted key, and send the encrypted new version firmware file, the encrypted signature information and the encrypted key to the firmware storage end; the firmware storage end sends the encrypted new version firmware file The file, the encrypted signature information and the encrypted key are sent to the firmware production server; the firmware production server sends the encrypted new version file firmware file, the encrypted signature information and the encrypted key to The secure computing end; and the secure computing end uses a decryption private key to decrypt the encrypted signature information and the encrypted key to obtain the signature information and the encrypted new version of the firmware key, and the secure computing end uses the encrypted new version The firmware key decrypts the encrypted new version of the firmware file to obtain the new version of the firmware file. The secure computing terminal uses a verification public key to verify the signature information and confirm that the encrypted new version of the firmware file comes from the firmware. Body source end. For example, the method of requesting online firmware update in item 5 includes a security mechanism: a firmware source that sends the encrypted new version of the firmware file and the new version of the firmware information to the firmware storage end, and the firmware source end and A TLS secure connection is established between the firmware stores.

Images