WO2016095796A1 - 用于可信执行环境的安全操作系统更新方法 - Google Patents

用于可信执行环境的安全操作系统更新方法 Download PDF

Info

Publication number
WO2016095796A1
WO2016095796A1 PCT/CN2015/097362 CN2015097362W WO2016095796A1 WO 2016095796 A1 WO2016095796 A1 WO 2016095796A1 CN 2015097362 W CN2015097362 W CN 2015097362W WO 2016095796 A1 WO2016095796 A1 WO 2016095796A1
Authority
WO
WIPO (PCT)
Prior art keywords
operating system
upgrade
file
secure
security
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2015/097362
Other languages
English (en)
French (fr)
Inventor
何朔
郭伟
周钰
陈成钱
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Unionpay Co Ltd
Original Assignee
China Unionpay Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Unionpay Co Ltd filed Critical China Unionpay Co Ltd
Publication of WO2016095796A1 publication Critical patent/WO2016095796A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Definitions

  • the present invention relates to an operating system update method and, more particularly, to a secure operating system update method for a trusted execution environment.
  • a security information interaction device typically includes a first system management device (eg, a conventional multimedia operating system) that provides an operating environment for a conventional application and is secure.
  • a second system management device ie, a secure operating system
  • the first and second system management devices establish a secure channel between the regular application/device and the secure application/device and subsequently complete a subsequent data interaction process based on the secure channel.
  • the existing technical solutions have the following problems: after the secure operating system is released and run on the device, it is difficult to update the secure operating system under a higher security mechanism, such as adding functions or fixing vulnerabilities to the secure operating system.
  • the present invention proposes a secure operating system update method for a trusted execution environment that can continuously update and maintain a secure operating system.
  • a secure operating system update method for a trusted execution environment for a trusted execution environment includes the following steps:
  • the upgrade server sends an upgrade update notification to the target security information interaction device after the upgrade file is created, where the security information interaction device runs a conventional multimedia operating system and a security operating system, and the multimedia operating system Provide an operating environment for regular applications and accessory equipment.
  • the security operating system provides an operating environment in a secure mode for a security application and an accessory device (ie, an application and an accessory device with high security requirements, such as a payment application in the financial field) to perform a security information interaction process;
  • an upgrade update monitoring module in the multimedia operating system on the security information interaction device establishes a first security between the multimedia operating system and the security operating system after listening to and receiving the upgrade update notification Channels, and then send upgrade update commands to the secure operating system over the secure channel;
  • the upgrade application module in the security operating system establishes a second secure channel with the upgrade server after receiving the upgrade update command, and then the upgrade server is on the second secure channel. Pushing the upgrade file package to the secure operating system in an encrypted manner;
  • the upgrade application module After receiving the upgrade file package, the upgrade application module performs an upgrade operation for the secure operating system based on the upgrade file package.
  • the upgrade file package includes an upgrade file, an upgrade file version number, a security operating system verification file, and an upgrade file installation script, wherein the security operating system verification file is used for verification.
  • the integrity of the secure operating system which is used to indicate how and where the upgrade files are installed.
  • the step (A4) further comprises: (1) after receiving the upgrade file package, the upgrade application module decrypts the upgrade file package and upgrades from the upgrade file package The file package extracts the upgrade file, the upgrade file version number, the security operating system verification file, and the upgrade file installation script; (2) the upgrade application module verifies the extracted upgrade file version number, and runs the upgrade after the verification is passed.
  • a file installation script to perform an upgrade operation for the secure operating system.
  • the performing an upgrade operation for the secure operating system includes performing an installation operation of an upgrade file, a replacement operation of a secure operating system verification file, and other specified by the upgrade file installation script Update operation.
  • the process of installing the upgrade file is as follows: (1) installing the upgrade file into the update reserved memory area; (2) adding a function function function in the upgrade file Directly adding the address of the added function class function in the update reserved memory area to the system, and for the patch class function in the upgrade file, first searching the kernel symbol table to obtain the entry address of the patched function, and then The patched function is redirected to its corresponding patch function, which in turn replaces the instruction at the entry of the patched function with a jump instruction, thereby redirecting the patched function to its corresponding patch function.
  • the replacement operation of the security operating system verification file is performed after the installation operation of the upgrade file is completed, that is, the security operating system verification file corresponding to the security operating system before the update is replaced with the corresponding A secure operating system verification file for an updated secure operating system.
  • the boot loader verifies the integrity of the secure operating system based on the secure operating system check file.
  • the secure operating system verification file contains a hash value of the security operating system to which it corresponds.
  • the secure operating system update method for a trusted execution environment disclosed by the present invention has the advantages of being able to continuously update and maintain the secure operating system after the secure operating system is released and running on the device, thereby significantly improving the System performance and security.
  • FIG. 1 is a flow diagram of a secure operating system update method for a trusted execution environment, in accordance with an embodiment of the present invention.
  • the method for updating a secure operating system for a trusted execution environment disclosed by the present invention includes the following steps: (A1) upgrading the server (according to instructions of the maintenance personnel) After the level file package, the upgrade update notification is sent to the target security information interaction device, where the security information interaction device runs a conventional multimedia operating system and a security operating system, and the multimedia operating system is a conventional application and an auxiliary device. Provide an operating environment.
  • the security operating system provides an operating environment in a secure mode for a security application and an accessory device (ie, an application and an accessory device with high security requirements, such as a payment application in the financial field) to perform a security information interaction process;
  • an upgrade update monitoring module in the multimedia operating system on the security information interaction device establishes a first security between the multimedia operating system and the security operating system after listening to and receiving the upgrade update notification Channel, and then sending an upgrade update command to the secure operating system on the secure channel;
  • the upgrade application module in the secure operating system establishes and upgrades after receiving the upgrade update command a second secure channel between the servers, wherein the upgrade server pushes the upgrade file package to the secure operating system in an encrypted manner on the second secure channel;
  • the upgrade file package includes an upgrade file (ie, a replacement program for the operating system or a program to be added), and an upgrade file version number. (indicating the number of times the upgrade file is issued and the order), the security operating system verification file, and the upgrade file installation script, wherein the security operating system verification file is used to verify the integrity of the secure operating system, and the upgrade file is installed.
  • the script is used to indicate how and where the upgrade file is installed.
  • the step (A4) further includes: (1) after receiving the upgrade file package, the upgrade application module Decrypting the upgrade file package, and extracting an upgrade file, an upgrade file version number, a security operating system verification file, and an upgrade file installation script from the upgrade file package; (2) the upgrade application module verifying the extracted upgrade file The version number, and the upgrade file installation script is run after the verification is passed to perform an upgrade operation for the secure operating system.
  • the performing an upgrade operation for the secure operating system includes performing an installation operation of the upgrade file and a security operating system verification file. Replacement operations and other update operations specified by the upgrade file installation script.
  • the process of installing the upgrade file is as follows: (1) installing the upgrade file into the update reserved memory area; (2) Adding an address of the added function class function in the updated reserved memory area to the system directly for the added function class function in the upgrade file, and searching for the kernel first for the patch class function in the upgrade file.
  • the symbol table obtains the entry address of the patched function, and then redirects the patched function to its corresponding patch function (the defect of the patched function is corrected in the patch function), followed by the entry of the patched function
  • the instruction is replaced with a jump instruction, thereby redirecting the patched function to its corresponding patch function.
  • the replacement operation of the security operating system verification file is performed after the installation operation of the upgrade file is completed, that is, the security before the update is not performed.
  • the operating system's secure operating system verification file is replaced with a secure operating system verification file that corresponds to the updated secure operating system.
  • a bootloader verifies the security according to a secure operating system check file. The integrity of the operating system.
  • the security operating system verification file includes a hash value of the corresponding security operating system.
  • the secure operating system update method for the trusted execution environment disclosed by the present invention has the advantages of being able to continuously update and maintain the secure operating system after the secure operating system is released and running on the device, thereby Significantly improved system performance and security.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)

Abstract

一种用于可信执行环境的安全操作系统更新方法，所述方法包括：升级服务器制作完成升级文件包后向目标安全性信息交互设备发送升级更新通知（A1）；安全性信息交互设备上的多媒体操作系统中的升级更新监听模块在监听并接收到所述升级更新通知后向所述安全操作系统发送升级更新命令（A2）；安全操作系统中的升级应用模块在接收到所述升级更新命令后建立与所述升级服务器之间的第二安全通道，随之所述升级服务器在所述第二安全通道上将所述升级文件包以加密的方式推送到所述安全操作系统中（A3）；在接收到所述升级文件包后，所述升级应用模块基于所述升级文件包执行针对所述安全操作系统的升级操作（A4）。上述方法能够对安全操作系统进行持续的更新和维护。

Description

用于可信执行环境的安全操作系统更新方法 技术领域
本发明涉及操作系统更新方法，更具体地，涉及用于可信执行环境的安全操作系统更新方法。
背景技术
目前，随着计算机和网络应用的日益广泛以及不同领域的业务种类的日益丰富，用于安全性信息交互(即对安全性要求较高的信息交互，例如金融领域中的交易处理过程)的设备(尤其是基于移动终端的安全性信息交互设备)变得越来越重要。
在现有的基于可信执行环境的技术方案中，安全性信息交互设备(例如移动终端)通常包含为常规的应用提供运行环境的第一系统管理装置(例如常规的多媒体操作系统)和为安全性应用提供安全模式下的运行环境的第二系统管理装置(即安全操作系统)，并且在第一系统管理装置中运行的常规应用/设备与在第二系统管理装置中运行的安全应用/设备进行数据交互时，在所述第一和第二系统管理装置在该常规应用/设备和该安全应用/设备之间建立安全通道并随之基于该安全通道完成后续的数据交互过程。
然而，现有的技术方案存在如下问题：当安全操作系统被发布并在设备上运行之后，难于对安全操作系统在较高的安全机制下进行更新，例如针对安全操作系统增加功能或者修补漏洞。
因此，存在如下需求：提供能够对安全操作系统进行持续的更新和维护的用于可信执行环境的安全操作系统更新方法。
发明内容
为了解决上述现有技术方案所存在的问题，本发明提出了能够对安全操作系统进行持续的更新和维护的用于可信执行环境的安全操作系统更新方法。
本发明的目的是通过以下技术方案实现的：
一种用于可信执行环境的安全操作系统更新方法，所述用于可信执行环境 的安全操作系统更新方法包括下列步骤：
(A1)升级服务器制作完成升级文件包后向目标安全性信息交互设备发送升级更新通知，其中，所述安全性信息交互设备上运行有常规的多媒体操作系统和安全操作系统，所述多媒体操作系统为常规的应用和附属设备提供运行环境。所述安全操作系统为安全性应用和附属设备(即对安全性要求较高的应用和附属设备，例如金融领域中的支付应用)提供安全模式下的运行环境，以执行安全性信息交互过程；
(A2)所述安全性信息交互设备上的多媒体操作系统中的升级更新监听模块在监听并接收到所述升级更新通知后在所述多媒体操作系统和所述安全操作系统之间建立第一安全通道，并随之在所述安全通道之上向所述安全操作系统发送升级更新命令；
(A3)所述安全操作系统中的升级应用模块在接收到所述升级更新命令后建立与所述升级服务器之间的第二安全通道，随之所述升级服务器在所述第二安全通道上将所述升级文件包以加密的方式推送到所述安全操作系统中；
(A4)在接收到所述升级文件包后，所述升级应用模块基于所述升级文件包执行针对所述安全操作系统的升级操作。
在上面所公开的方案中，优选地，所述升级文件包包括升级文件、升级文件版本号、安全操作系统校验文件以及升级文件安装脚本，其中，所述安全操作系统校验文件用于验证安全操作系统的完整性，所述升级文件安装脚本用于指示升级文件的安装方式和位置。
在上面所公开的方案中，优选地，所述步骤(A4)进一步包括： (1)在接收到所述升级文件包后，所述升级应用模块解密所述升级文件包，并从所述升级文件包提取出升级文件、升级文件版本号、安全操作系统校验文件以及升级文件安装脚本；(2)所述升级应用模块验证提取出的升级文件版本号，并在验证通过后运行所述升级文件安装脚本以执行针对所述安全操作系统的升级操作。
在上面所公开的方案中，优选地，所述执行针对所述安全操作系统的升级操作包括执行升级文件的安装操作、安全操作系统校验文件的替换操作以及其他由所述升级文件安装脚本指定的更新操作。
在上面所公开的方案中，优选地，升级文件的安装操作的过程如下：(1)将所述升级文件安装到更新保留内存区中；(2)针对所述升级文件中的增加功能类函数，直接将所述增加功能类函数在更新保留内存区中的地址添加到系统中，而针对所述升级文件中的补丁类函数，则首先查找内核符号表以获取被修补函数的入口地址，随后将该被修补函数重定向到其对应的补丁函数，随之将被修补函数的入口处的指令替换为跳转指令，由此将被修补函数重定向到其对应的补丁函数。
在上面所公开的方案中，优选地，在升级文件的安装操作完成之后执行安全操作系统校验文件的替换操作，即将对应于未更新前的安全操作系统的安全操作系统校验文件替换为对应于已更新的安全操作系统的安全操作系统校验文件。
在上面所公开的方案中，优选地，在所述安全操作系统启动时，引导加载器根据安全操作系统校验文件校验所述安全操作系统的完整性。
在上面所公开的方案中，优选地，所述安全操作系统校验文件包含其所对应的安全操作系统的哈希值。
本发明所公开的用于可信执行环境的安全操作系统更新方法具有下列优点：能够在安全操作系统被发布和运行于设备上之后对安全操作系统进行持续的更新和维护，从而显著地提高了系统性能和安全性。
附图说明
结合附图，本发明的技术特征以及优点将会被本领域技术人员更好地理解，其中：
图1是根据本发明的实施例的用于可信执行环境的安全操作系统更新方法的流程图。
具体实施方式
图1是根据本发明的实施例的用于可信执行环境的安全操作系统更新方法的流程图。如图1所示，本发明所公开的用于可信执行环境的安全操作系统更新方法包括下列步骤：(A1)升级服务器(根据维护人员的指令)制作完成升 级文件包后向目标安全性信息交互设备发送升级更新通知，其中，所述安全性信息交互设备上运行有常规的多媒体操作系统和安全操作系统，所述多媒体操作系统为常规的应用和附属设备提供运行环境。所述安全操作系统为安全性应用和附属设备(即对安全性要求较高的应用和附属设备，例如金融领域中的支付应用)提供安全模式下的运行环境，以执行安全性信息交互过程；(A2)所述安全性信息交互设备上的多媒体操作系统中的升级更新监听模块在监听并接收到所述升级更新通知后在所述多媒体操作系统和所述安全操作系统之间建立第一安全通道，并随之在所述安全通道之上向所述安全操作系统发送升级更新命令；(A3)所述安全操作系统中的升级应用模块在接收到所述升级更新命令后建立与所述升级服务器之间的第二安全通道，随之所述升级服务器在所述第二安全通道上将所述升级文件包以加密的方式推送到所述安全操作系统中；(A4)在接收到所述升级文件包后，所述升级应用模块基于所述升级文件包执行针对所述安全操作系统的升级操作。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，所述升级文件包包括升级文件(即针对该操作系统的替换程序或者待增加程序)、升级文件版本号(其指示升级文件的发布次数以及先后顺序)、安全操作系统校验文件以及升级文件安装脚本，其中，所述安全操作系统校验文件用于验证安全操作系统的完整性，所述升级文件安装脚本用于指示升级文件的安装方式和位置。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，所述步骤(A4)进一步包括：(1)在接收到所述升级文件包后，所述升级应用模块解密所述升级文件包，并从所述升级文件包提取出升级文件、升级文件版本号、安全操作系统校验文件以及升级文件安装脚本；(2)所述升级应用模块验证提取出的升级文件版本号，并在验证通过后运行所述升级文件安装脚本以执行针对所述安全操作系统的升级操作。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，所述执行针对所述安全操作系统的升级操作包括执行升级文件的安装操作、安全操作系统校验文件的替换操作以及其他由所述升级文件安装脚本指定的更新操作。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，升级文件的安装操作的过程如下：(1)将所述升级文件安装到更新保留内存区中；(2)针对所述升级文件中的增加功能类函数，直接将所述增加功能类函数在更新保留内存区中的地址添加到系统中，而针对所述升级文件中的补丁类函数，则首先查找内核符号表以获取被修补函数的入口地址，随后将该被修补函数重定向到其对应的补丁函数(在该补丁函数中被修补函数的缺陷被修正)，随之将被修补函数的入口处的指令替换为跳转指令，由此将被修补函数重定向到其对应的补丁函数。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，在升级文件的安装操作完成之后执行安全操作系统校验文件的替换操作，即将对应于未更新前的安全操作系统的安全操作系统校验文件替换为对应于已更新的安全操作系统的安全操作系统校验文件。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，在所述安全操作系统启动时，引导加载器(bootloader)根据安全操作系统校验文件校验所述安全操作系统的完整性。
优选地，在本发明所公开的用于可信执行环境的安全操作系统更新方法中，所述安全操作系统校验文件包含其所对应的安全操作系统的哈希值。
由上可见，本发明所公开的用于可信执行环境的安全操作系统更新方法具有下列优点：能够在安全操作系统被发布和运行于设备上之后对安全操作系统进行持续的更新和维护，从而显著地提高了系统性能和安全性。
尽管本发明是通过上述的优选实施方式进行描述的，但是其实现形式并不局限于上述的实施方式。应该认识到：在不脱离本发明主旨和范围的情况下，本领域技术人员可以对本发明做出不同的变化和修改。

Claims (8)

  1. 一种用于可信执行环境的安全操作系统更新方法，所述用于可信执行环境的安全操作系统更新方法包括下列步骤：
    (A1)升级服务器制作完成升级文件包后向目标安全性信息交互设备发送升级更新通知，其中，所述安全性信息交互设备上运行有常规的多媒体操作系统和安全操作系统，所述多媒体操作系统为常规的应用和附属设备提供运行环境。所述安全操作系统为安全性应用和附属设备提供安全模式下的运行环境，以执行安全性信息交互过程；
    (A2)所述安全性信息交互设备上的多媒体操作系统中的升级更新监听模块在监听并接收到所述升级更新通知后在所述多媒体操作系统和所述安全操作系统之间建立第一安全通道，并随之在所述安全通道之上向所述安全操作系统发送升级更新命令；
    (A3)所述安全操作系统中的升级应用模块在接收到所述升级更新命令后建立与所述升级服务器之间的第二安全通道，随之所述升级服务器在所述第二安全通道上将所述升级文件包以加密的方式推送到所述安全操作系统中；
    (A4)在接收到所述升级文件包后，所述升级应用模块基于所述升级文件包执行针对所述安全操作系统的升级操作。
  2. 根据权利要求1所述的用于可信执行环境的安全操作系统更新方法，其特征在于，所述升级文件包包括升级文件、升级文件版本号、安全操作系统校验文件以及升级文件安装脚本，其中，所述安全操作系统校验文件用于验证安全操作系统的完整性，所述升级文件安装脚本用于指示升级文件的安装方式和位置。
  3. 根据权利要求2所述的用于可信执行环境的安全操作系统更新方法，其特征在于，所述步骤(A4)进一步包括：(1)在接收到所述升级文件包后，所述升级应用模块解密所述升级文件包，并从所述升级文件包提取出升级文件、升级文件版本号、安全操作系统校验文件以及升级文件安装脚本；(2)所述升级应用模块验证提取出的升级文件版本号，并在验证通过后运行所述升级文件安装脚本以执行针对所述安全操作系统的升级操作。
  4. 根据权利要求3所述的用于可信执行环境的安全操作系统更新方法，其特征在于，所述执行针对所述安全操作系统的升级操作包括执行升级文件的安装操作、安全操作系统校验文件的替换操作以及其他由所述升级文件安装脚本指定的更新操作。
  5. 根据权利要求4所述的用于可信执行环境的安全操作系统更新方法，其特征在于，升级文件的安装操作的过程如下：(1)将所述升级文件安装到更新保留内存区中；(2)针对所述升级文件中的增加功能类函数，直接将所述增加功能类函数在更新保留内存区中的地址添加到系统中，而针对所述升级文件中的补丁类函数，则首先查找内核符号表以获取被修补函数的入口地址，随后将该被修补函数重定向到其对应的补丁函数，随之将被修补函数的入口处的指令替换为跳转指令，由此将被修补函数重定向到其对应的补丁函数。
  6. 根据权利要求5所述的用于可信执行环境的安全操作系统更新方法，其特征在于，在升级文件的安装操作完成之后执行安全操作系统校验文件的替换操作，即将对应于未更新前的安全操作系统的安全操作系统校验文件替换为对应于已更新的安全操作系统的安全操作系统校验文件。
  7. 根据权利要求6所述的用于可信执行环境的安全操作系统更新方法，其特征在于，在所述安全操作系统启动时，引导加载器根据安全操作系统校验文件校验所述安全操作系统的完整性。
  8. 根据权利要求7所述的用于可信执行环境的安全操作系统更新方法，其特征在于，所述安全操作系统校验文件包含其所对应的安全操作系统的哈希值。
PCT/CN2015/097362 2014-12-17 2015-12-15 用于可信执行环境的安全操作系统更新方法 Ceased WO2016095796A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410778171.7 2014-12-17
CN201410778171.7A CN105590061B (zh) 2014-12-17 2014-12-17 用于可信执行环境的安全操作系统更新方法

Publications (1)

Publication Number Publication Date
WO2016095796A1 true WO2016095796A1 (zh) 2016-06-23

Family

ID=55929635

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/097362 Ceased WO2016095796A1 (zh) 2014-12-17 2015-12-15 用于可信执行环境的安全操作系统更新方法

Country Status (2)

Country Link
CN (1) CN105590061B (zh)
WO (1) WO2016095796A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112394968A (zh) * 2020-11-10 2021-02-23 上海商米科技集团股份有限公司 一种用于智能pos设备的空中下载技术升级系统及方法

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106485153A (zh) * 2016-10-10 2017-03-08 聚好看科技股份有限公司 版本升级方法及终端设备
US11258871B2 (en) 2016-11-14 2022-02-22 Huawei Technologies Co., Ltd. Message push method and terminal
CN110266651B (zh) * 2019-05-28 2021-07-13 创新先进技术有限公司 物联网设备及用于物联网设备的方法

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030070162A1 (en) * 2001-10-04 2003-04-10 Satoshi Oshima Information processor having multi OS and its OS update method
CN101021795A (zh) * 2006-02-13 2007-08-22 株式会社Ntt都科摩 更新启动装置及更新启动控制方法
CN103282911A (zh) * 2011-11-04 2013-09-04 Sk普兰尼特有限公司 普通域与安全域之间与信任区交互工作的方法和信任应用下载的管理方法、使用该方法的管理服务器、装置和系统
CN104040498A (zh) * 2012-01-05 2014-09-10 大陆汽车有限责任公司 用于在具有或不具有写入权限的不同的存储区域中更新程序和数据的计算机系统
CN104168557A (zh) * 2014-08-28 2014-11-26 酷派软件技术（深圳）有限公司 操作系统的升级方法和操作系统的升级装置

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101127634B (zh) * 2006-08-15 2010-10-20 华为技术有限公司 一种移动台安全更新升级的方法及其系统
CN102129375B (zh) * 2010-01-12 2014-07-02 中国移动通信集团公司 一种移动终端系统升级的方法和设备

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030070162A1 (en) * 2001-10-04 2003-04-10 Satoshi Oshima Information processor having multi OS and its OS update method
CN101021795A (zh) * 2006-02-13 2007-08-22 株式会社Ntt都科摩 更新启动装置及更新启动控制方法
CN103282911A (zh) * 2011-11-04 2013-09-04 Sk普兰尼特有限公司 普通域与安全域之间与信任区交互工作的方法和信任应用下载的管理方法、使用该方法的管理服务器、装置和系统
CN104040498A (zh) * 2012-01-05 2014-09-10 大陆汽车有限责任公司 用于在具有或不具有写入权限的不同的存储区域中更新程序和数据的计算机系统
CN104168557A (zh) * 2014-08-28 2014-11-26 酷派软件技术（深圳）有限公司 操作系统的升级方法和操作系统的升级装置

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112394968A (zh) * 2020-11-10 2021-02-23 上海商米科技集团股份有限公司 一种用于智能pos设备的空中下载技术升级系统及方法

Also Published As

Publication number Publication date
CN105590061B (zh) 2018-09-21
CN105590061A (zh) 2016-05-18

Similar Documents

Publication Publication Date Title
US8578376B2 (en) Automatically and securely configuring and updating virtual machines
US10142104B2 (en) Securely recovering a computing device
US8254568B2 (en) Secure booting a computing device
US9773122B2 (en) Automated compliance exception approval
CN105354488B (zh) 一种应用安装方法、相关装置及应用安装系统
US9727352B2 (en) Utilizing history of changes associated with software packages to manage computing systems
US20170003956A1 (en) Updating computer firmware
US20190042754A1 (en) Authenticating a boot path update
WO2015184891A1 (zh) Android系统的安全管控方法、装置及其系统
CN104573435A (zh) 用于终端权限管理的方法和终端
CN110333875A (zh) 一种服务程序更新方法、装置、服务器及存储介质
CN110018841A (zh) 一种uefi bios升级方法、系统及相关装置
CN107783776A (zh) 固件升级包的处理方法及装置、电子设备
WO2016095796A1 (zh) 用于可信执行环境的安全操作系统更新方法
CN102843400A (zh) 文件下载的方法及系统
WO2017220014A1 (zh) 系统权限管理方法、装置及智能终端
CN106709281A (zh) 补丁发放和获取方法、装置
US20190166123A1 (en) User terminal using cloud service, integrated security management server for user terminal, and integrated security management method for user terminal
CN112579330B (zh) 操作系统异常数据的处理方法、装置及设备
CN114721693B (zh) 一种微处理器、bios固件更新方法、计算机设备及存储介质
CN104572169B (zh) 一种基于uefi的软件分发和安装系统
US12131150B2 (en) System and methods for patch management
CN106445601A (zh) 一种插件升级的方法及装置
US9348849B1 (en) Backup client zero-management
TWI662491B (zh) Device for security information interaction

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15869303

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 06/11/2017)

122 Ep: pct application non-entry in european phase

Ref document number: 15869303

Country of ref document: EP

Kind code of ref document: A1