WO2010078679A1

WO2010078679A1 - Upgrading method, downloading tool and terminal

Info

Publication number: WO2010078679A1
Application number: PCT/CN2008/073835
Authority: WO
Inventors: 李夏忠
Original assignee: 中兴通讯股份有限公司
Priority date: 2008-12-29
Filing date: 2008-12-29
Publication date: 2010-07-15

Abstract

An upgrading method, a downloading tool and a terminal are provided, which are used for upgrading the software of the terminal, wherein, the method includes that the downloading tool in PC side authenticates the validity of the downloading tool by the terminal before sending upgrading instructions to the terminal; if the downloading tool is valid, and the downloading tool also confirms that the first network locking version identification prestored in the terminal is identical to the second network locking version identification of the software to be downloaded in the PC side, then the downloading tool downloads the software to be downloaded to the terminal. With the mentioned technical solution of the present invention, it can ensure the security of the terminal software upgrading.

Description

Upgrade method, download tool, and terminal

TECHNICAL FIELD The present invention relates to the field of communications, and in particular, to an upgrade method, a download tool, and a terminal. BACKGROUND OF THE INVENTION In the related art, Worldwide Interoperability for Microwave Access (WiMAX) technology implements the Institute for Electrical and Electronic Engineers (IEEE) 802.16 standard, WiMAX It is also possible to implement the Broadband Wireless Access (BWA) standard.

WiMAX is a wireless metropolitan area network (WMAN) technology, a new air interface standard proposed for the 4 start and millimeter wave bands. WiMAX can be used to connect 802.11a wireless access hotspots to the Internet and connect environments such as corporate and home to wired backbones. In addition, WiMAX can also be used as a wireless extension technology for cable and Digital Subscriber Line (DSL) to achieve wireless broadband access. At present, the WiMAX terminal is generally customized and sent to the user by the operator. Therefore, the operator has a lock network requirement for the terminal product, that is, the network parameter of the terminal can only be the parameter provided by the operator, and the operator also hopes The mobile terminal can perform parameter judgment on the above requirements to ensure the interests of the operator. However, during the software download process, the software version is very easy to be replaced by the attacker, which will cause the newly downloaded software to not judge the network parameters (ie, download the non-locked network version), so that the terminal can use other operators. The network parameters have brought huge economic losses to operators. Therefore, it is necessary to solve the problem of software version security during the software downloading process, so as to avoid huge economic loss caused by the software being unable to be safely upgraded. SUMMARY OF THE INVENTION The present invention has been made in view of the problem of low security of a software version in a software downloading process in the related art. Therefore, the main object of the present invention is to provide an improved security upgrade scheme for a terminal to solve the related art. The above problem. In order to achieve the above object, according to an aspect of the present invention, an upgrade method is provided for implementing software upgrade of a terminal. The upgrade method according to the present invention includes: the downloading tool of the PC side downloads the legality of the downloading tool through the terminal before the sending of the upgrade instruction to the terminal; if the downloading tool is legal, and the downloading tool determines the first lock network pre-saved in the terminal The version identifier is the same as the second lock network version identifier of the software to be downloaded on the PC side, and the download tool downloads the software to be downloaded to the terminal. The processing of the downloading tool confirming the legality of the downloading tool by the terminal includes: the downloading tool sends a specific legal command negotiated with the terminal to the terminal; and the terminal receives the specific legal command, and confirms that the downloading tool is legal. In addition, before the downloading tool passes the validity of the terminal to download the tool, the method further includes: the terminal dividing the memory into the first area and the second area, where the second area is used to store the first lock network version identifier . In addition, before determining whether the first lock net version identifier and the second lock net version identifier are the same, the method further includes: downloading the tool to acquire the first lock net version identifier stored by the terminal in the second area, and acquiring the locally saved second Lock network version identifier. In addition, if the download tool is legal, but the download tool determines that the first lock network version identifier is different from the second lock network version identifier, downloading the software to be downloaded to the terminal is prohibited. In order to achieve the above object, according to another aspect of the present invention, a downloading tool is provided. The downloading tool according to the present invention includes: a sending module, configured to send a specific legal command negotiated with the terminal to the terminal before sending the upgrade command to the terminal, so as to enable the terminal to verify the legality of the downloading tool; Whether the first lock net version identifier pre-stored in the detecting terminal is the same as the second lock net version identifier of the software to be downloaded on the PC side; and the downloading module is configured to determine the first lock net version identifier and the second lock net version in the detecting module When the logo is the same, download the software to be downloaded to the terminal. In addition, the foregoing detection module further includes: an obtaining module, configured to acquire a first lock network version identifier of the terminal, and obtain a locally saved second lock network version identifier. In addition, the downloading tool may further include: a control module, configured to: when the detecting module determines that the first lock net version identifier and the second lock net version identifier are the same, enable the download module, and determine, by the detecting module, the first lock network In case the version identifier and the second lock network version identifier are different, the module can be downloaded. In order to achieve the above object, according to another aspect of the present invention, a terminal is provided. The terminal according to the present invention includes: a verification module, configured to verify the validity of the downloading tool on the PC side; and a memory, configured to store the first lock network version identifier of the terminal, so that the downloading tool determines the first lock network version identifier and Whether the second lock network version identifier of the software to be downloaded on the PC side is the same. In addition, the foregoing memory further includes: a dividing module, configured to divide the memory into the first area and the second area, where the second area is used to store the first lock net version identifier. By means of the technical solution of the present invention, by performing double verification on the downloading tool and the new version of the software, the problem of low security of the software version in the software downloading process of the related technology can be solved, and the security of the terminal software upgrade can be ensured. Other features and advantages of the invention will be set forth in the description which follows, and The objectives and other advantages of the invention will be realized and attained by the <RTI The drawings are intended to provide a further understanding of the invention, and are intended to be a part of the description of the invention. In the drawings: FIG. 1 is a flowchart of a security upgrade method according to an embodiment of the present invention; FIG. 2 is a detailed process flowchart of a security upgrade method according to an embodiment of the present invention; FIG. 3 is a flowchart according to an embodiment of the present invention. FIG. 4 is a block diagram of a downloading tool according to an embodiment of the present invention; and FIG. 5 is a block diagram of a terminal according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the related art, there is a problem that the software version is low in security during the software downloading process. Therefore, in view of the above problems, the present invention provides a mobile terminal software security upgrade based on Flash partitioning. The method of the present invention, in the technical solution of the present invention, before receiving the download instruction sent by the PC side downloading software, the terminal software must verify the legality of the downloading tool, and in the case that the downloading tool is legal, through the downloading tool The detection module checks whether the lock network version identifier in the mobile terminal is consistent with the lock network version identifier in the version to be downloaded, and upgrades the software of the terminal if the two lock network version identifiers are consistent. The preferred embodiments of the present invention are described in the following with reference to the accompanying drawings, which are intended to illustrate and illustrate the invention. In the following description, numerous specific details are set forth However, it is apparent that the present invention may be practiced without these specific details. Further, various details may be obtained in the following embodiments and examples without departing from the spirit and scope of the appended claims. Make various combinations. Method Embodiments According to an embodiment of the present invention, a security upgrade method is provided. FIG. 1 is a flowchart of a security upgrade method according to an embodiment of the present invention. Before performing the processing shown in FIG. 1, the terminal first needs to The memory is divided into two areas: a first area and a second area, and uses the lock network version identifier of the second area storage terminal (ie, the first lock network version identifier). After the terminal performs the foregoing processing, the memory may be executed as shown in the figure. The processing shown in FIG. 1 includes steps S102 to S106: Step S102: Before the PC side downloading tool sends the upgrade command to the terminal, the legality of the downloading tool is verified by the terminal-supplied certificate; when the terminal performs the legality check of the downloading tool, If the terminal is able to receive the specific legal command that is sent by the downloading tool and negotiates with the terminal, the terminal confirms that the downloading tool is legal. Step S104: If the terminal determines that the downloading tool is legal, the downloading tool acquires the first pre-saved in the terminal. The lock network version identifier and the second lock network version identifier of the software to be downloaded on the PC side, after the acquisition, the download tool can Determining whether the acquired first lock network version identifier is the same as the second lock network version identifier; Step S106: If the download tool is legal, and the download tool determines that the first lock network version identifier is the same as the second lock network version identifier, The downloading software is downloaded to the terminal; if the downloading tool determines that the first lock network version identifier is different from the second lock network version identifier, downloading the software to be downloaded to the terminal is prohibited. Hereinafter, the above technical solution of the present invention will be described by taking a WiMAX terminal as an example with reference to the accompanying drawings. 2 is a detailed processing flowchart of a security upgrade method according to an embodiment of the present invention. As shown in FIG. 2, the following processing is included (step S202 - step S208): Step S202, the WiMAX terminal software can use the Flash driver 4 to execute the entire Flash. Zone or divide into two zones or. As shown in FIG. 3, the Flash driver divides the Flash area into a first part (the first area) and a second part (the second area), wherein the second part is used to retain the first lock version identifier. And, in the actual division process, the first part is much larger than the second part, for example, a 4M Flash area or a second part only accounts for the last 8K. When the software is running normally, the reading and writing of the parameters are performed in the first part; and the second part is only used as a backup area of the first lock network version identification when the software is upgraded (this step is not shown in Figure 2). Step S204: Before receiving the upgrade command (download), the WiMAX terminal software must first verify the legality of the downloading tool. Only after determining that the downloading tool is legal, the processing of step S206 can be performed, wherein determining the legality of the downloading tool needs to pass The downloading tool actively sends a pre-negotiated specific command (ie, the above-mentioned specific legal command negotiated with the terminal) to the terminal before executing the download command, for example, an Unlock command, a WiMAX Unlock command, and the like. When the terminal receives such a legal instruction, it can confirm the legality of the downloading tool and send a legal school-睑 command to the downloading tool; if the mobile terminal does not receive the legal command, even if it receives the download command sent by the downloading tool, The download upgrade is not performed; by the above processing, the first re-check is completed on the terminal side (corresponding to step S102 in Fig. 1). Step S206, if the terminal determines that the downloading tool is legal (that is, receives a legal verification instruction of the downloading tool), the downloading tool may use the detecting module to identify the lock network version in the terminal (the first lock network version identifier). Checking the consistency of the identifier of the lock network version (the second lock network version identifier) in the version to be downloaded (for the second re-check), wherein the lock network version identifier is retained in the fixed position of the last 8K of the FLASH. The value of the same position in the mobile terminal and the version to be downloaded (the first lock network version identifier and the second lock network version identifier) can be directly read by the download tool. Then, the detection module in the download tool compares the two values (the first lock net version identifier and the second lock net version identifier), and if the first lock net version identifier and the second lock net version identifier are the same, the second re-calibration If the first lock net version identifier and the second lock net version identifier are different, the school-failure fails, and the download tool does not perform the download upgrade (corresponding to step S104 in FIG. 1). Step S208, in a case where both the first re-check and the second re-check performed in step S204 and step S206 are passed, the downloading tool upgrades the software of the terminal (corresponding to step S106 in FIG. 1). It should be noted that, in practical applications, since the above technical solutions have greater versatility, WiMAX, Code Division Multiple Access (CDMA), and global mobile providing wireless access functions are provided. Communication (Global System for Mobile Communication, GSM for short), Packet Handling Switching (PHS), Wideband Code Division Multiple Access (WCDMA), Time Division Synchronization Codes The software of the lock network version can be upgraded according to the above technical solution according to the embodiment of the present invention, and the single-mode/multi-mode wireless access terminal product can be upgraded. . In the above process, the security of the downloading software is ensured by the double check of the downloading tool and the software to be upgraded. In addition, the technical solution according to the embodiment of the present invention has the advantages of convenient use, wide application range and simpleness. The advantages of easy. Provides a flexible software upgrade solution for operators or users, and since all verifications are performed automatically, it brings greater convenience to end users accessing WiMAX networks. Embodiment 1 of the present invention provides a downloading tool for implementing a method for upgrading a terminal software according to an embodiment of the present invention. FIG. 4 is a block diagram of a downloading tool according to an embodiment of the present invention. 4, comprising a transmitting module 40, a detecting module 42, a downloading module 44, a control module 46, and a receiving module 48. Hereinafter, each module in the downloading tool according to an embodiment of the present invention will be described in detail. Specifically, the sending module 40 is configured to send a specific legal command negotiated with the terminal, such as an Unlock command, a WiMAX Unlock command, etc., to enable the terminal to confirm the legality of the downloading tool before sending the download command to the terminal. If the terminal receives a specific legal command, it can confirm that the downloading tool is legal (ie, perform the first re-calibration-睑); after the terminal confirms that the downloading tool is legal, the downloading tool legal verification instruction is sent to the receiving module 48. The detecting module 42 is connected to the receiving module 48, and configured to detect whether the first lock net version identifier pre-stored in the terminal is the same as the second lock net version identifier of the PC side to be downloaded software when the terminal determines that the download tool is legal ( That is, before the detection module 42 performs the detection, the acquisition module in the detection module 42 needs to acquire the first lock network version identifier stored by the terminal, and obtain the locally saved second lock network version identifier, The detection module 42 performs detection. The first lock net version identifier is retained in a fixed position of the last 8K of the FLASH, and the value of the mobile terminal and the to-be-downloaded version in the same position can be directly read by the obtaining module (the first lock net version identifier and the second lock) Web version identifier). The downloading module 44 is connected to the control module 46 for receiving the control of the control module 46 (ie, the detecting module determines that the pre-saved first lock net version identifier is the same as the second lock net version identifier of the PC side to be downloaded software). B), download the software to be downloaded to the terminal. The control module 46 is connected to the detecting module 42 and the downloading module 44, for enabling the downloading module 44 when the detecting module 42 determines that the first lock net version identifier is the same as the second lock net version identifier, and the detecting module 42 determines In the case where a lock network version identifier is different from the second lock network version identifier, the module 44 can be downloaded. Through the above processing, in the case that the downloading tool passes the first re-calibration of the terminal, the qualified downloading tool performs the second re-verification of the software to be downloaded, thereby ensuring the security of the software downloading. Apparatus Embodiment 2 According to an embodiment of the present invention, a terminal is provided. FIG. 5 is a block diagram of a terminal according to an embodiment of the present invention. As shown in FIG. 5, a terminal according to an embodiment of the present invention includes a verification module 50 and a memory. 52, and a partitioning module in the memory 52 (not shown in the figure). In the following, each module in the terminal will be described in detail. Specifically, the verification module 50 in the terminal is configured to verify the validity of the download tool on the PC side (ie, perform the first re-check); preferably, when the verification module 50 performs the first re-check, download The tool will actively send a pre-negotiated specific command (ie, a specific legal command negotiated with the terminal) to the terminal before executing the download command, for example, an Unlock command, a WiMAX Unlock command, and the like. When the verification module 50 receives a legal instruction such as this, the verification module 50 can confirm the legitimacy of the download tool. In addition, the terminal further includes a memory 52 (in this example, the memory 52 is preferably a flash memory) and a partitioning module in the memory 52. In practical applications, the partitioning module first needs to divide the entire memory 52 area into two by the driver. As shown in FIG. 3, the partitioning module divides the memory 52 into a first part (a first area) and a second part (a second area), wherein the second part is used to retain the first lock network version identifier, Moreover, in the actual division process, the first part is much larger than the second part, for example, a 4M Flash, and the second part only accounts for the last 8K. When the software is running normally, the reading and writing of the parameters are performed in the first part; and the second part is only used as a backup area of the first lock network version identification when the software is upgraded. By dividing the partitioning of the memory 52, the memory 52 can be made to have a dedicated location for storing the first lock version identifier, so that the download tool can directly read the first lock stored in the second portion of the mobile terminal memory 52. The network version identifier is compared with the second lock network version identifier in the same position in the to-be-downloaded version, so that the download tool can perform the second verification, that is, the first lock network version identifier and the PC are determined. Whether the second lock version identifier of the side to be downloaded software is the same. It should be noted that, in practical applications, the terminal according to the embodiment of the present invention may be WiMAX, CDMA, GSM, PHS, WCDMA, TD-SCDMA, and single mode/multimode wireless access with wireless access functions. terminal. Moreover, as described herein, the term "memory" may refer to one or more devices for storing data, including read only memory (ROM), random access memory (RAM), magnetic RAM, magnetic core memory, disk storage. Media, optical storage media, flash memory devices, and/or other machine readable media for storing information. In addition, embodiments may be implemented in hardware, software, firmware, middleware, microcode, hardware description languages, or a combination thereof. When implemented in software, firmware, middleware or code, program code or code segments for performing the necessary tasks may be stored in a machine readable medium, such as a storage medium. The (multiple) processor can perform the necessary tasks. A code segment can represent any combination of processes, functions, subroutines, programs, routines, subroutines, modules, objects, packages, classes, or instructions, data structures, or programming languages. A code segment is coupled to another code segment or hardware circuit by transmitting and/or receiving information, data, arguments, or stored content. Information, arguments, parameters, data, etc. may be communicated, transmitted, or transmitted via any suitable means including memory sharing, messaging, token passing, network transmission, and the like. In summary, by means of the technical solution of the present invention, by performing double verification on the downloading tool and the new version of the software, the problem of low security of the software version in the software downloading process of the related technology can be solved, and the software upgrade can be ensured. The technical solution of the present invention also has the advantages of convenient use, wide application range, simple and easy operation, and provides a flexible software upgrade solution for the operator or the user, and since all the verifications are automatically performed It brings greater convenience to end users accessing WiMAX networks. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim

An upgrade method for implementing software upgrade of a terminal, wherein the method includes:

The downloading tool of the PC side passes the terminal to verify the legality of the downloading tool before sending the upgrade command to the terminal;

If the downloading tool is legal, and the downloading tool determines that the first lock net version identifier pre-stored in the terminal is the same as the second lock net version identifier of the PC side to be downloaded software, the download tool will treat the The download software is downloaded to the terminal.

2. The method according to claim 1, wherein the processing of the downloading tool confirming the legality of the downloading tool by the terminal comprises:

The downloading tool sends a specific legal command negotiated with the terminal to the terminal; if the terminal receives the specific legal command, it confirms that the downloading tool is legal.

The method according to claim 1, wherein before the downloading tool passes the terminal to verify the legitimacy of the downloading tool, the method further includes:

The terminal divides its memory into a first area and a second area, where the second area is used to store the first lock network version identifier.

The method according to claim 3, wherein before the determining that the first lock net version identifier and the second lock net version identifier are the same, the method further includes:

The downloading tool obtains the first lock net version identifier stored by the terminal in the second area, and obtains the second lock net version identifier saved locally.

The method according to claim 1, wherein the method further comprises:

If the downloading tool is legal, but the downloading tool determines that the first lock net version identifier is different from the second lock net version identifier, the downloading the software to be downloaded is prohibited from being downloaded to the terminal.

6. A downloading tool, characterized in that it comprises:

a sending module, configured to send, by the terminal, a specific legal command negotiated with the terminal, before the sending the upgrade command to the terminal, to enable the terminal to verify the legality of the downloading tool; a detecting module, configured to detect a first lock network version identifier pre-saved in the terminal

Whether the second lock network version identifier of the software to be downloaded on the PC side is the same;

And a downloading module, configured to download the software to be downloaded to the terminal if the detecting module determines that the first lock net version identifier and the second lock net version identifier are the same.

The downloading tool according to claim 6, wherein the detecting module further comprises:

And an obtaining module, configured to obtain the first lock network version identifier of the terminal, and obtain the second lock network version identifier saved locally.

8. The downloading tool according to claim 6, wherein the downloading tool further comprises:

a control module, configured to: when the detecting module determines that the first lock net version identifier and the second lock net version identifier are the same, enable the download module, and determine, by the detecting module, the first In the case that the lock network version identifier and the second lock network version identifier are different, the download module is disabled.

9. A terminal, comprising:

a verification module, configured to verify the legality of the downloading tool on the PC side;

And a storage device, configured to store the first lock net version identifier of the terminal, so that the download tool determines whether the first lock net version identifier is the same as the second lock net version identifier of the PC side to be downloaded software.

The terminal according to claim 9, wherein the memory further comprises: a dividing module, configured to divide the memory into a first area and a second area, wherein the second area is used for storing The first lock net version identifier.