WO2012065422A1

WO2012065422A1 - Method for updating key of mobile terminal, and mobile terminal

Info

Publication number: WO2012065422A1
Application number: PCT/CN2011/074578
Authority: WO
Inventors: 韩静
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-11-19
Filing date: 2011-05-24
Publication date: 2012-05-24
Also published as: CN102012984A

Abstract

A method for updating a key of a mobile terminal, and a mobile terminal are disclosed. The method involves: a key updating request message from a personal computer (PC) is received by a mobile terminal, wherein the key updating request message is used for requesting updating a key of the mobile terminal (S102); allowing of the PC for updating the key is determined by the mobile terminal according to the key updating request message (S104); the key is updated by the mobile terminal according to a key updating instruction message from the PC (S106). With the solution applied, security of the mobile terminal is ensured.

Description

The present invention relates to the field of communications, and in particular to a method for updating a mobile terminal key and a mobile terminal. BACKGROUND At present, with large-capacity memory cards widely used in mobile terminals and PDA devices, users and operators have increasingly demanded security for files stored on mobile devices, many mobile terminals and PDA devices. This feature is supported on the top. They are mainly used as follows: The user enters the password method for the entire file directory to encrypt; the user encrypts the key file for a single file; although these methods are simple to implement, the disadvantages are very obvious, these keys can be Randomly read and write by users, it is easy to be cracked and modified, security is not enough, it is difficult to achieve real protection of important information of users. In response to this situation, we propose a complete solution to update the mobile terminal side file encryption and decryption key by the key update tool developed on the PC side. SUMMARY OF THE INVENTION The present invention has been made in view of the problem that the key of the mobile terminal in the related art can be arbitrarily updated by the user. Therefore, the main object of the present invention is to provide a method for updating a key of a mobile terminal and a mobile terminal to solve the above problem. In order to achieve the above object, according to an aspect of the present invention, a method for updating a mobile terminal key is provided. The method for updating a mobile terminal key according to the present invention receives a key update request message from a PC, wherein the key update request message is used to request to update a key of the mobile terminal; the mobile terminal updates the request message according to the key , determining to allow the PC to update the key; the mobile terminal is in the key update instruction message from the PC, and updates the key. The mobile terminal resides in a key update request message, and the determining that the PC is allowed to update the key comprises: the mobile terminal determines the authentication of the PC according to the key update request message; the mobile terminal opens the key update permitting the key, wherein the key is updated Allowed labels have been used to indicate that the PC is allowed to update the key. The mobile terminal determines, according to the key update request message, that the authentication of the PC includes: the mobile terminal sends the identity information saved by the mobile terminal to the PC according to the key update request message, where the identifier information uniquely identifies the mobile terminal; and the mobile terminal receives the information from the PC. The identification information encrypted according to the predetermined encryption rule; the mobile terminal decrypts the encrypted identification information according to the decryption rule corresponding to the predetermined encryption rule; the mobile terminal determines whether the decrypted identification information is identical to the identification information saved by itself; The result is yes, then it is determined that the PC is authenticated. The predetermined encryption rule is pre-stored on the dongle, and the dongle is preset on the PC. The mobile terminal determines, according to the key update request message, that the authentication of the PC includes: the mobile terminal sends the self-generated random number to the PC according to the key update request message; the mobile terminal receives the random number encrypted by the RSA algorithm from the PC; The mobile terminal decrypts the encrypted random number according to the decryption rule corresponding to the RSA algorithm; the mobile terminal determines whether the decrypted random number is the same as the self-generated random number; if the judgment result is yes, it determines that the PC authentication is passed. . Before the mobile terminal updates the key according to the key update instruction message from the PC, the method further includes: the mobile terminal receiving the key update instruction message from the PC; the mobile terminal determining whether the key update permission flag is turned on; If so, the mobile terminal performs an operation of updating the key. After the mobile terminal updates the key, the method further includes: turning off the key update permission flag. In order to achieve the above object, according to an aspect of the present invention, a method for updating a mobile terminal key is also provided. The method for updating a mobile terminal key according to the present invention includes: the PC transmitting a key update request message to the mobile terminal, wherein the key update request message is used to request to update the key of the mobile terminal; and the PC determines to allow the PC to update at the mobile terminal. After the key, a key update instruction message is sent to the mobile terminal, wherein the key update instruction message is used to update the key of the mobile terminal. In order to achieve the above object, according to another aspect of the present invention, a mobile terminal is also provided. The mobile terminal according to the present invention includes: a receiving module, configured to receive a key update request message from a PC, wherein the key update request message is used to request to update a key of the mobile terminal; It is set to determine that the PC is allowed to update the key according to the key update request message; and the update module is configured to update the key according to the key update instruction message from the PC. The determining module includes: a determining submodule, configured to determine that the PC is authenticated to pass; the opening submodule, being set to open a key update permission flag, wherein the key update allowing flag is used to indicate that the PC is allowed to update the key. With the present invention, the mobile terminal determines whether to allow the key to be updated according to the key update request message from the PC, and solves the problem that the key of the mobile terminal in the related art can be arbitrarily updated by the user, thereby ensuring the security of the mobile terminal. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are set to illustrate,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, In the drawings: FIG. 1 is a first flowchart of a method for updating a key of a mobile terminal according to an embodiment of the present invention; FIG. 2 is a diagram showing a method for performing PC side encryption by means of a dongle according to a preferred embodiment 2 of the present invention; FIG. 3 is a flow chart of performing a side key update tool and a mobile terminal authentication in a manner of not using a dongle according to a preferred embodiment 3 of the present invention; FIG. 4 is a flowchart. FIG. 5 is a flowchart of updating a plurality of sets of keys according to an embodiment of the present invention; FIG. 6 is a flowchart of an embodiment of the present invention. FIG. 7 is a schematic diagram of a PC side key update tool interface according to an embodiment of the present invention; FIG. 8 is a method for updating a mobile terminal key according to an embodiment of the present invention; FIG. 9 is a structural block diagram of a mobile terminal according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. According to an embodiment of the present invention, a method for updating a mobile terminal key is provided. FIG. 1 is a first flowchart of a method for updating a key of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 1, the method includes the following steps: step S102 to step 4: S. Step S102: The mobile terminal receives a key update request message from the PC, where the key update request message is used to request to update the key of the mobile terminal. Step S104: The mobile terminal resides in a key update request message, and determines to allow the PC to update the key. Step 4 gathers S 106, the mobile terminal resides in a key update instruction message from the PC, and updates the key. In the related art, the key of the mobile terminal can be arbitrarily updated by the user, so that the security of the mobile terminal is poor. In the embodiment of the present invention, a key update software is developed on the PC side, and a software module for key download and management is also implemented on the mobile terminal, so that the mobile terminal is based on

The key update request message of the PC determines whether the key is allowed to be updated, so that the key can be prevented from being arbitrarily updated by the user, thereby ensuring the security of the mobile terminal. Preferably, the mobile terminal resides in a key update request message, and determining that the PC is allowed to update the key comprises: the mobile terminal determines the authentication of the PC according to the key update request message; and the mobile terminal opens the key update permitting the label, wherein The key update allows the label to be used to indicate that the PC is allowed to update the key. In the preferred embodiment, when the PC side software version is used to update the key, the mobile terminal performs authentication and authentication on the update tool, and only the update tool that passes the authentication authentication can perform the key update process, thereby ensuring PC side software security. Sex. Preferably, the mobile terminal resides in a key update request message, and determines that the authentication of the PC includes: the mobile terminal sends the identity information saved by the PC to the PC, wherein the identifier information uniquely identifies the mobile terminal; Receiving identification information encrypted by the PC according to a predetermined encryption rule; the mobile terminal decrypts the encrypted identification information according to a decryption rule corresponding to the predetermined encryption rule; the mobile terminal determines the decrypted identification information and the identification information saved by the mobile terminal Whether they are the same; if the judgment result is yes, it is determined that the PC authentication is passed. Preferably, the predetermined encryption rule is pre-stored on the dongle, wherein the dongle is preset on the PC. In the preferred embodiment, a legally customized dongle is added during the use of the PC side software, so that the PC side key update tool can only operate normally after inserting a legally customized dongle on the PC, thereby ensuring the PC. Side software security. It should be noted that the protection of the software version download tool by the customized dongle can be based on the PKI technology. Preferably, the mobile terminal resides in a key update request message, and determining to authenticate the PC includes: the mobile terminal sends a self-generated random number to the PC according to the key update request message; the mobile terminal receives the encrypted data according to the RSA algorithm from the PC. a random number; the mobile terminal decrypts the encrypted random number according to a decryption rule corresponding to the RSA algorithm; the mobile terminal determines whether the decrypted random number is the same as the self-generated random number; if the judgment result is yes, determining the PC The authentication was passed. In the preferred embodiment, the handshake mode is directly used by the PC-side key update tool and the mobile terminal key update module without using the dongle mode, and the implementation manner is simple and convenient. Preferably, before the mobile terminal is in the key update instruction message from the PC, before updating the key, the method further includes: the mobile terminal receiving the key update instruction message from the PC; the mobile terminal determining whether the key update permission flag is turned on; If the result of the determination is YES, the mobile terminal performs an operation of updating the key. In the preferred embodiment, the key update allows the opening or closing of the flag, thereby controlling whether to update the mobile terminal key, and the implementation manner is simple and reliable. Preferably, after the mobile terminal updates the key, the method further includes: closing the key update permission flag. In the preferred embodiment, the mobile terminal immediately turns off the key update permission flag regardless of whether the key update is successful or not, thereby ensuring the security of the mobile terminal. Additionally, in the preferred embodiment, the key update enable flag, once closed, cannot be opened in any other way, and any key update process is not allowed to take effect. The implementation process of the embodiment of the present invention will be described in detail below with reference to examples. Preferred Embodiment 1 This preferred embodiment 1 describes a basic process for updating a mobile terminal key, including the following steps: step 4 to step 4: 7. Step 1: Implement a PC-side key update software, which includes an interface operation flow, an authentication process, a key update process, and a key file import process. Step 2: The interface operation process includes setting an input key interface, a key file import interface, a key authentication success or failure interface, and a key update success or not interface. Step 4: When the software download key is updated by using the PC side key, the PC side tool and the mobile terminal key update module perform authentication authentication, and the authentication and authentication process can be performed in two ways. The dog performs the authentication authentication process, and the other directly uses the PC side key update tool and the mobile terminal key update module to directly perform handshake communication. Step 4: Develop a key update module on the mobile terminal side. This module ensures that all files encrypted and decrypted are not updated in any other way except for the PC side key update tool, including OTA. The way. Implementation: The key update software module on the mobile terminal side adds a key update permission label. After the mobile terminal side software detects that the authentication authentication is passed, the key update permission flag is allowed to be opened, and the key update process can be activated. The key update permission flag is immediately closed after the update ends. Step 5: After the mobile terminal side software detects that the authentication is passed, the PC side software continues to send the key update instruction message to perform the key update process. Step 6: The key update process is to send a key update instruction message through the PC tool, and the mobile terminal side updates the corresponding index value, the public key and the private key according to the instruction. Step 7: The PC side key update tool can update multiple sets of keys in two ways: file update and manual update. Manual update mode 下 Use the interface to enter the key to send the key. The file update key first uses the PC side tool to import the key file and delivers the key in the file. Preferred Embodiment 2 FIG. 2 is a flowchart of performing PC-side key update tool and mobile terminal authentication according to a preferred embodiment of the present invention. As shown in FIG. 2, the following steps S202 to FIG. S226. Step S202, booting up. Step S204, inserting a dongle on the PC, running the key update software, and not operating the PC side key update software without inserting the dongle. Step S206, the PC side software requests the mobile terminal to identify the mobile terminal unique information. Step 4: S208, the mobile terminal side determines whether the information identifying the uniqueness of the mobile terminal is valid, and if yes, proceeds to step S210, otherwise proceeds to step S224. Step 4 gathers S210, and the mobile terminal returns information identifying the uniqueness of the mobile terminal to the PC side tool. Step S212, the PC side sends the information identifying the uniqueness of the mobile terminal to the dongle for private key encryption. Step S214: The PC side key update tool sends the ciphertext of the mobile terminal that identifies the unique information of the mobile terminal returned by the dongle to the mobile terminal. Step S216, the mobile terminal decrypts the information ciphertext identifying the mobile terminal uniquely by using a set of public keys corresponding to the storage in the dongle. Step S218, the mobile terminal determines whether the decrypted data is the same as the information identifying the uniqueness of the mobile terminal, and if yes, proceeds to step S220, otherwise proceeds to step S226. Step 4 is gathered into S220, and the mobile terminal returns the authentication success to the key update tool. Step S222, starting the key update process and ending. Step S224, a handshake process of the mobile terminal and the PC side tool. Step S226, rejecting the update. Preferred Embodiment 3 FIG. 3 is a flowchart of performing a side key update tool and mobile terminal authentication in a manner of not using a dongle according to a preferred embodiment 3 of the present invention. As shown in FIG. 3, the following steps S302 to FIG. S320. Step S302, booting up. Step S304, the PC key update software requests to read the random number from the mobile terminal. Step S306, the mobile terminal returns random data. Step S308, the key update tool encrypts the random data by using the RSA algorithm, and sends a handshake instruction to the mobile terminal. Step S310, the mobile terminal decrypts the handshake data. Step S312, the mobile terminal determines whether the decrypted handshake data is equal to the transmitted random data, and if yes, proceeds to step S314, otherwise proceeds to step S318. Step 4 gathers S314, and the mobile terminal returns the authentication success to the key update tool. Step S316, the key update process is started and ends. Step S318, a handshake process of the mobile terminal and the PC side tool. In step S320, the update is rejected. FIG. 4 is a flowchart of an update key according to an embodiment of the present invention. As shown in FIG. 4, the following steps S402 to S416 are included. Step S402, the PC side key update tool and the mobile phone authentication succeed. Step S404, the mobile phone side opens the permission update flag, and returns a PC side success message. In step S406, the PC side tool continues to send the key update instruction message. Step S408: After receiving the instruction, the mobile terminal side determines whether the key update permission flag is in an open state, and if yes, proceeds to step S410, otherwise proceeds to step S416. Step 4 gathers S410 to update the key operation. Step S412, the mobile terminal side determines whether the update is successful, and if yes, proceeds to step S410, otherwise proceeds to step S416. In step S414, the permission update flag is turned off, the mobile phone returns to the key update tool to update successfully, and the PC side displays the update result. In step S416, the permission update flag is turned off, the update fails, and the PC side displays the update result. It should be noted that the authentication process needs to be performed before any key operation is updated. The key update enable flag is turned off for each update operation, whether successful or not. In addition, the present invention also provides a method of updating a plurality of sets of keys in a file mode or a manual mode, which will be described below with reference to FIGS. 5 and 6. FIG. 5 is a flowchart of updating multiple sets of keys in a file manner according to an embodiment of the present invention. As shown in FIG. 5, multiple sets of keys are encrypted in advance and saved in a file according to a certain format, and then performed. The following step 4 gathers S502 to step 4 to gather S512. Step S502, selecting a file import button of the PC side key update tool. Step S504, selecting a file. In step S506, the file contains multiple sets of key pairs and is encrypted. Step S508, the PC side tool decrypts it to determine whether it is legal. If yes, proceed to step 4 to gather S510, otherwise step 4 to gather S512. Step 4 gathers S510 to update the key operation. In step S512, the update fails, and the PC side displays the update result. FIG. 6 is a flowchart of manually updating a plurality of sets of keys according to an embodiment of the present invention. As shown in FIG. 6, the following steps S602 to S610 are included. Step 4 gathers S602 and manually inputs multiple sets of public and private keys. In step S604, a manual import button of the PC side key update tool is selected. In step S606, the PC side tool determines whether it is legal. If yes, proceed to step S608, otherwise step 4 to S610. Step S608, updating the key operation. Step 4 gathers S610, the update fails, and the PC side displays the update result. FIG. 7 is a schematic diagram of a PC side key update tool interface according to an embodiment of the present invention. As shown in FIG. 7, it may be imported through a file (corresponding to the above file method) or manually imported (corresponding to the manual mode described above). The plurality of sets of keys of the mobile terminal are updated. It should be noted that the steps shown in the flowchart of the accompanying drawings may be performed in a computer system such as a set of computer executable instructions, and, although the logical order is shown in the flowchart, in some cases, The steps shown or described may be performed in an order different from that herein. The embodiment of the present invention provides a method for updating a key of a mobile terminal, and FIG. 8 is a second flowchart of a method for updating a key of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 8, the method includes the following steps S802 to Step S804. Step S802, the PC sends a key update request message to the mobile terminal, where the key update request message is used to request to update the key of the mobile terminal. Step S804, after the mobile terminal determines to allow the PC to update the key, the PC sends a key update instruction message to the mobile terminal, where the key update instruction message is used to update the key of the mobile terminal. The embodiment of the invention provides a mobile terminal, which can be used to implement the method for updating the key of the mobile terminal. FIG. 9 is a structural block diagram of a mobile terminal according to an embodiment of the present invention, including a receiving module 92, a determining module 94, and an updating module 96. The structure is described in detail below. The receiving module 92 is configured to receive a key update request message from the personal computer PC, where the key update request message is used to request to update the key of the mobile terminal; the determining module 94 is connected to the receiving module 92 and configured to receive the module 92. Receiving a key update request message, determining to allow the PC to update the key; an update module 96, coupled to the determining module 94, configured to update the key update command message according to the key from the PC after the determining module 94 determines that the PC is allowed to update the key Key. In the related art, the key of the mobile terminal can be arbitrarily updated by the user, so that the security of the mobile terminal is poor. In the embodiment of the present invention, a key update software is developed on the PC side, and a software module for key downloading and management is also implemented on the mobile terminal, so that the mobile terminal receives the key update request message received by the receiving module 92 to determine whether The key is allowed to be updated, so that the key can be prevented from being arbitrarily updated by the user, thereby ensuring the security of the mobile terminal. Preferably, the determination module 94 includes a determination sub-module 942 and an opening sub-module 944. The structure is described in detail below. The determining sub-module 942 is configured to determine to pass the authentication of the PC; the opening sub-module 944 is connected to the determining sub-module 942, and is configured to open the key update permitting flag after the determining sub-module 942 determines that the PC is authenticated. The key update allows the label to be used to indicate that the PC is allowed to update the key. It should be noted that the mobile terminal described in the device embodiment corresponds to the foregoing method embodiment, and the specific implementation process has been described in detail in the method embodiment, and is not described herein. In summary, the foregoing embodiment of the present invention provides a method for updating a mobile terminal key and a mobile terminal. The key update request message from the PC is determined by the mobile terminal to determine whether to allow the key to be updated, which solves the problem that the key of the mobile terminal in the related art can be arbitrarily updated by the user, thereby ensuring the security of the mobile terminal. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim

A method for updating a mobile terminal key, comprising:

The mobile terminal receives a key update request message from the personal computer PC, where the key update request message is used to request to update the key of the mobile terminal;

The mobile terminal determines, according to the key update request message, that the PC is allowed to update the key;

The mobile terminal - updates the key in accordance with a key update instruction message from the PC.

The method according to claim 1, wherein the mobile terminal determines, according to the key update request message, that allowing the PC to update the key comprises:

The mobile terminal determines, according to the key update request message, that the PC is authenticated;

The mobile terminal opens a key update enable flag, wherein the key update enable flag is used to indicate that the PC is allowed to update the key.

The method according to claim 2, wherein the mobile terminal determines, according to the key update request message, that the authentication of the PC includes:

The mobile terminal sends the identity information saved by itself to the PC according to the key update request message, where the identifier information uniquely identifies the mobile terminal;

Receiving, by the mobile terminal, the identification information that is encrypted according to a predetermined encryption rule from the PC;

The mobile terminal decrypts the encrypted identification information according to a decryption rule corresponding to the predetermined encryption rule;

Determining, by the mobile terminal, whether the decrypted identification information is the same as the self-preserved identification information;

If the result of the determination is yes, it is determined that the PC is authenticated.

4. The method according to claim 3, wherein the predetermined encryption rule is pre-stored on a dongle, wherein the dongle is preset on the PC.

The mobile terminal sends a random number generated by itself to the PC according to the key update request message;

Receiving, by the mobile terminal, the random number encrypted according to an RSA algorithm from the PC;

The mobile terminal decrypts the encrypted random number according to a decryption rule corresponding to the RSA algorithm;

Determining, by the mobile terminal, whether the decrypted random number is the same as the self-generated random number;

The method according to claim 2, wherein, before the mobile terminal updates the key according to the key update instruction message from the PC, the method further includes:

Receiving, by the mobile terminal, the key update instruction message from the PC; the mobile terminal determining whether the key update permission flag is turned on;

If the result of the determination is YES, the mobile terminal performs an operation of updating the key.

7. The method according to claim 6, wherein after the mobile terminal updates the key, the method further comprises: turning off the key update permission flag.

8. A method for updating a mobile terminal key, comprising:

The personal computer PC transmits a key update request message to the mobile terminal, wherein the key update request message is used to request to update a key of the mobile terminal; the PC determines at the mobile terminal that the PC is allowed to update the secret After the key, a key update instruction message is sent to the mobile terminal, wherein the key update instruction message is used to update the key of the mobile terminal.

9. A mobile terminal, comprising:

a receiving module, configured to receive a key update request message from a personal computer PC, where the key update request message is used to request to update a key of the mobile terminal; a determining module, configured to reside in the key update request message, to determine that the PC is allowed to update the key; and an update module configured to update the key based on a key update instruction message from the PC. The mobile terminal according to claim 9, wherein the determining module comprises:

Determining a submodule, configured to determine that the PC is authenticated to pass;

The sub-module is opened, set to open a key update enable flag, wherein the key update enable flag is used to indicate that the PC is allowed to update the key.