WO2016146032A1

WO2016146032A1 - Cable modem security method and system

Info

Publication number: WO2016146032A1
Application number: PCT/CN2016/076160
Authority: WO
Inventors: 聂小波
Original assignee: 深圳市九洲电器有限公司
Priority date: 2015-03-16
Filing date: 2016-03-11
Publication date: 2016-09-22
Also published as: CN104754410A; CN104754410B

Abstract

A cable modem (CM) security method and system. The method comprises: storing a backup system (226) to a set top box (220) in communication with a CM (210); and when a CM system is damaged or collapsed, downloading, from the set top box (220), the backup system (226) to recover the system. The present invention does not require to increase Flash storage space of the CM (210), thus recovering the CM system without an increase in any costs, and ensuring a secure and normal operation of the CM (210).

Description

Cable modem security method and system

Technical field

[0001] The present invention relates to the field of communications, and in particular, to a cable modem security method and system.

Background technique

[0002] Currently, the cable memory of a cable modem (Cable Modem, CM for short) is generally 4M, and the 4M space can only store one system (including the boot loader and file system). In this way, since the cable modem has only one system, when the system is damaged or crashes, the cable modem will not work, which greatly affects the security of the cable modem.

[0003] In order to ensure the security of the cable modem, the existing solution is to increase the F1 ash storage space of the cable modem, and change it to 8M, and store the cable modem system and the backup system together in the 8M Flash, which can solve the cable. The system security of the modem, but it will greatly increase the hardware cost and waste.

technical problem

In view of the above, it is necessary to provide a cable modem security method and system for the above-mentioned problem of cable modem system security.

Problem solution

Technical solution

[0005] The present invention provides a cable modem security method, including the following steps:

[0006] S10: storing a backup system of the cable modem in the set top box;

[0007] S20: After the cable modem system is damaged or crashes, the cable modem sends a request to the set top box, requesting the set top box to send the backup system to the cable modem;

[0008] S30: The set top box receives the request, and sends the backup system to the cable modem;

[0009] S40: The cable modem downloads the backup system and performs verification, and if the verification passes, the backup system is used for system recovery.

[0010] In one embodiment, the step S20 is specifically: the cable modem boot loader sets a fixed IP address for the cable modem, and is used for performing backup system transmission with the set top box; Then, the SNMP command of the cable modem backup system is sent to the set-top box through the network port according to the simple network management protocol; after receiving the SNMP command, the set-top box checks the backup system of the set-top box, and sends an SNMP response command to the cable after querying the backup system. Modem; the cable modem sends a request after receiving an SNMP response command, requesting the set-top box to send the backup system.

[0011] In one embodiment, the step S30 is specifically: after the set top box receives the request, starts the TFTP process of sending the backup system, and sends a message for downloading the backup system to the cable modem through the SNMP protocol; boot loading of the cable modem After the program receives the message, it starts downloading the backup system.

[0012] In one embodiment, the step S40 is specifically as follows: After the cable modem boot loader downloads the backup system, the signature verification of the downloaded backup system is performed, and the check value generated by the signature verification is passed. The SNMP protocol is sent to the set-top box; the set-top box terminates the check value and compares it with the preset check value. If it is consistent, it passes the check. The set-top box sends the command to use the backup system for system recovery through the SNMP protocol to the cable modem. Then the verification does not pass.

[0013] In one of the embodiments, the method further comprises the step of synchronously upgrading the backup system by the set top box after the cable modem system is upgraded.

[0014] The present invention also provides a cable modem security system, including a cable modem and a set top box, the set top box stores a backup system of the cable modem; after the cable modem system is destroyed or crashes, the cable modem sends a request to the set top box, requesting the set top box to the cable The modem sends the backup system, the set-top box receives the request, and sends the backup system to the cable modem. The cable modem downloads the backup system and verifies it. If the verification passes, the backup system is used for system recovery.

[0015] In one of the embodiments, the cable modem boot loader sets a fixed IP address for the cable modem for backup system transmission with the set top box; and then sends a query cable modem to the set top box through the network port according to a simple network management protocol. Backup system SNMP command; After receiving the SNMP command, the set-top box checks the backup system on the set-top box, sends the SNM P response command to the cable modem after querying the backup system; the cable modem sends the request after receiving the SNMP response command, requesting the set-top box Send a backup system.

[0016] In one embodiment, after receiving the request, the set top box starts the TFTP process of sending the backup system, and sends a message for downloading the backup system to the cable modem through the SNMP protocol; cable modulation solution After the monitor's boot loader receives the message, it starts downloading the backup system.

[0017] In one embodiment, after the cable modem boot loader downloads the backup system, the signature verification of the downloaded backup system is performed, and the check value generated by the signature verification is sent to the set top box through the SNMP protocol; After the checksum value is terminated, it is compared with the preset check value. If the checksum is consistent, the set-top box sends a command to the cable modem to recover the system through the SNMP protocol through the SNMP protocol. If the two are inconsistent, the verification fails.

[0018] In one of the embodiments, after the cable modem system is upgraded, the set top box performs a synchronous upgrade of the backup system.

[0019] The present invention also provides a cable modem security system, including a cable modem and a set top box, the set top box including a processor, a communication interface, a memory and a bus;

[0020] wherein the processor, the communication interface, and the memory complete communication with each other through the bus;

[0021] the communication interface is configured to communicate with a cable modem;

[0022] the processor is configured to execute a program;

[0023] The program includes:

[0024] a backup system of the cable modem, configured to receive a request sent by the cable modem to the set top box after the cable modem system is damaged or crashed, and send the backup system to the cable modem, so that the cable modem downloads the backup system and adopts the The backup system performs system recovery. Advantageous effects of the invention

Beneficial effect

[0025] The cable modem security method and system of the present invention store the backup system on a set top box capable of communicating with the cable modem. After the cable modem system is destroyed or crashes, the backup system is downloaded from the set top box to perform system recovery, and no need to increase The large cable modem's Flash storage space allows the cable modem system to be recovered without any additional cost, ensuring the cable modem's security and proper operation.

Brief description of the drawing

DRAWINGS

1 is a flow chart of a cable modem security method in one embodiment.

2 is a schematic structural diagram of a cable modem security system in an embodiment. Embodiments of the invention

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

1 is a flow chart of a cable modem security method in an embodiment. As shown in FIG. 1, the method includes the following steps:

[0030] S10: storing a backup system of the cable modem in the set top box.

[0031] Since the cable modem and the set top box are connected through the network port, the two can communicate, so in this embodiment, the backup system of the cable modem is stored in the set top box, and the communication can be performed through the communication between the two. There is no need to increase the flash memory space of the cable modem.

[0032] S20: After the cable modem system is destroyed or crashes, the cable modem sends a request to the set top box requesting the set top box to send the backup system to the cable modem.

[0033] After the cable modem is started, if the system is damaged or crashes, it cannot be started normally, and the cable modem stays in the boot loader, in order to ensure the security and normal startup of the cable modem, in this embodiment, Since the backup system is stored in the set top box, after the cable modem system is destroyed or crashes, the cable modem sends a request to the set top box requesting the set top box to send a backup system to the cable modem to enable the cable modem to recover the system.

[0034] In a further embodiment, the step is specifically: the cable modem boot loader sets a fixed IP address for the cable modem for backup system transmission with the set top box; and then follows the simple network management protocol (SNMP) through the network port. Send an SNMP command to the set-top box to query the cable modem backup system; after receiving the SNMP command, the set-top box checks the backup system on the set-top box, sends an SNMP response command to the cable modem after querying the backup system; the cable modem receives the SNMP response. After the command is sent, the request is sent to the set-top box to send the backup system. In this way, the network set communication box is requested to send the backup system to the cable modem to recover the cable modem system.

[0035] S30: The set top box receives the request and sends the backup system to the cable modem.

[0036] After the cable modem sends a request to the set top box, the set top box receives the request and sends the backup system to the power Cable modem for system recovery.

[0037] In this embodiment, the step is specifically: after receiving the request, the set top box starts to send a TFT P (Simple File Transfer Protocol) process of the backup system, and sends a message for downloading the backup system to the cable modem through the SNMP protocol; After the boot loader receives the message, it starts downloading the backup system. This enables the backup system to be transmitted from the set-top box to the cable modem.

[0038] S40: The cable modem downloads the backup system and performs verification, and if the verification passes, the backup system is used for system recovery.

[0039] The cable modem downloads the backup system. In order to ensure the correctness and security of the downloaded backup system, verification is also required after the download, and if the verification is passed, the downloaded backup system is used for system recovery.

[0040] In this embodiment, the step is specifically: after the cable modem boot loader downloads the backup system, performs signature verification on the downloaded backup system, and sends the verification value generated by the signature verification to the SNMP protocol. The set-top box is compared with the preset check value after the check-in value of the set-top box is terminated. If the check-in value is consistent, the set-top box passes the SNMP protocol to send the command to use the backup system for system recovery through the SNMP protocol. If the two are inconsistent, the verification fails. . In this way, after the verification is passed, the cable modem system can be recovered after the cable modem system is destroyed or crashed, thereby ensuring the safety and normal operation of the cable modem without increasing the cost.

[0041] In addition, the method further includes the step of synchronously upgrading the backup system by the set top box after the cable modem system is upgraded, thereby ensuring the consistency of the backup system after the cable modem is upgraded.

[0042] The cable modem security method stores the backup system on a set top box capable of communicating with a cable modem. After the cable modem system is damaged or crashes, the backup system is downloaded from the set top box for system recovery, and the cable modem does not need to be increased. The Flash memory space allows the cable modem system to be recovered without any additional cost, ensuring the safety and proper operation of the cable modem.

[0043] Similarly, the present invention also provides a cable modem security system. The system includes a cable modem and a set top box, and the set top box stores a backup system of the cable modem; after the cable modem system is destroyed or crashes, the cable modem sends a request to the set top box, requests the set top box to send a backup system to the cable modem, the set top box receives the request, and the backup System sent to cable modem The cable modem downloads the backup system and verifies it. If the verification is passed, the backup system is used for system recovery.

[0044] In this embodiment, since the cable modem and the set top box are connected through the network port, the two can communicate, so the backup system of the cable modem is stored in the set top box, and the communication can be transmitted through the communication between the two. There is no need to increase the flash memory space of the cable modem.

[0045] After the cable modem is started, if the system is damaged or crashes, it cannot be started normally. The cable modem stays in the boot loader. In order to ensure the security and normal startup of the cable modem, the backup is stored in the set top box. System, after the cable modem system is destroyed or crashes, the cable modem sends a request to the set-top box requesting the set-top box to send a backup system to the cable modem to enable the cable modem to recover the system.

[0046] In a further embodiment, the cable modem's boot loader sets a fixed IP address for the cable modem for backup system transmission with the set top box; then sends a check to the set top box via the network port according to Simple Network Management Protocol (SNMP). After querying the SNMP command of the backup system; after receiving the SNMP command, the set-top box checks the backup system of the set-top box, sends an SNMP response command to the cable modem after querying the backup system; the cable modem sends a request after receiving the SNMP response command, and requests the set-top box to send Backup system. In this way, the network set communication box is requested to send the backup system to the cable modem to recover the cable modem system.

[0047] After the cable modem sends a request to the set top box, the set top box receives the request and sends the backup system to the cable modem for system recovery.

[0048] In a further embodiment, after receiving the request, the set top box starts to send a TFTP (Simple File Transfer Protocol) process of the backup system, and sends a message to the cable modem to download the backup system through the SNMP protocol; the cable modem's boot loader receives After the message, start downloading the backup system. This enables the backup system to be transmitted from the set-top box to the cable modem.

[0049] The cable modem downloads the backup system. In order to ensure the correctness and security of the downloaded backup system, verification is also required after the download, and if the verification is passed, the downloaded backup system is used for system recovery.

[0050] In a further embodiment, after the cable modem boot loader downloads the backup system, the signature verification of the downloaded backup system is performed, and the verification value generated by the signature verification is sent through the SNMP protocol. Send to the set-top box; the set-top box terminates the check value and compares it with the preset check value. If it is consistent, it passes the check. The set-top box sends the command to use the backup system for system recovery to the cable modem through the SNMP protocol. If the two are inconsistent, the verification is performed. Fail. In this way, after the verification is passed, the cable modem system can be recovered after the cable modem system is destroyed or crashed, thereby ensuring the safety and normal operation of the cable modem without increasing the cost.

[0051] In addition, after the cable modem system is upgraded, the set-top box synchronizes the backup system to ensure the consistency of the backup system after the cable modem is upgraded.

[0052] The cable modem security system stores the backup system on a set top box capable of communicating with the cable modem. After the cable modem system is destroyed or crashes, the backup system is downloaded from the set top box for system recovery, and the cable modem does not need to be increased. The Flash memory space allows the cable modem system to be recovered without any additional cost, ensuring the safety and proper operation of the cable modem.

[0053] The cable modem security method and system of the present invention stores the backup system on a set top box capable of communicating with the cable modem. After the cable modem system is destroyed or crashes, the backup system is downloaded from the set top box for system recovery, and no need to increase The large cable modem's Flash storage space allows the cable modem system to be recovered without any additional cost, ensuring the cable modem's security and proper operation.

Referring to FIG. 2, a schematic diagram of a cable modem security system 200 is provided. The cable modem security system may be comprised of a cable modem 210 and a set top box 220 containing computing power. The specific embodiment of the present invention does not limit the specific implementation of the cable modem security system 200. The set top box 220 includes:

[0055] processor 221, communication interface (Communications Interface) 222, memory

(memory) 223, bus 224.

[0056] The processor 221, the communication interface 222, and the memory 223 complete communication with each other through the bus 224.

[0057] The communication interface 222 is configured to communicate with the cable modem.

[0058] The processor 221 is configured to execute the program 225.

[0059] Specifically, the program 225 can include program code, the program code including computer operating instructions.

[0060] The processor 221 may be a central processing unit CPU or a specific integrated circuit ASIC (Applicatio) n Specific Integrated Circuit), or one or more integrated circuits configured to implement embodiments of the present invention.

[0061] The memory 223 is configured to store the program 225. The memory 223 may include a high speed RAM memory and may also include a non-volatile memory such as at least one disk memory. The program 225 may specifically include:

[0062] The backup system 226 of the cable modem is configured to receive a request sent by the cable modem 210 to the set top box after the cable modem system is destroyed or crashed, and send the backup system 226 to the cable modem 210 for the cable modem 210 to download the The backup system 226 is backed up and the system is restored using the backup system 226.

[0063] A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again. .

[0064] In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division, and the actual implementation may have another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not executed. Alternatively, the coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some communication interface, device or unit, and may be in electrical, mechanical or other form.

[0065] The unit described as a separate component may or may not be physically distributed, and the component displayed as a unit may or may not be a physical unit, that is, may be located in one place, or may be distributed to multiple On the network unit. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0067] The functions, if implemented in the form of software functional units and sold or used as separate products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may contribute to the prior art or part of the technical solution may be produced by software. In the form of a product, the computer software product is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods of the various embodiments of the present invention. All or part of the steps. The foregoing storage medium includes: u disk

, mobile hard disk, read-only memory (ROM, Read-Only

Memory, random access memory (RAM), disk or optical disk, and other media that can store program code.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalents, and improvements made within the spirit and scope of the present invention should be included in the scope of the present invention. Inside.

Claims

Claim

[Claim 1] A cable modem security method, comprising the steps of:

S10: storing a backup system of the cable modem in the set top box;

S20: After the cable modem system is damaged or crashes, the cable modem sends a request to the set top box, requesting the set top box to send the backup system to the cable modem; S30: the set top box receives the request, and sends the backup system to the cable modem; S40: cable modem download backup The system is verified and, if the verification is passed, the backup system is used for system recovery.

[Claim 2] The cable modem security method according to claim 1, wherein the step S20 is specifically: the cable modem loading procedure sets a fixed IP address for the cable modem for performing with the set top box. The backup system transmits; then, through the network port, according to the simple network management protocol, the SNMP command of the cable modem backup system is sent to the set-top box; after receiving the SNMP command, the set-top box checks the backup system of the set-top box, and sends the SNMP after querying the backup system. Answer the command to the cable modem; the cable modem sends a request after receiving the SNMP response command, requesting the set-top box to send the backup system.

[Claim 3] The cable modem security method according to claim 2, wherein the step S30 is specifically: after the set top box receives the request, starts to send the TFTP process of the backup system, and sends the download to the cable modem through the SNMP protocol. Back up the system's message; After the cable modem's boot loader receives the message, it starts downloading the backup system.

[Claim 4] The cable modem security method according to claim 3, wherein the step S40 is specifically: after the cable modem is loaded and loaded, the backup system is completed, and the downloaded backup system is verified by signature verification. And the verification value generated by the signature verification is sent to the set-top box through the SNMP protocol; the set-top box is terminated with the preset check value, and if it is consistent, the verification is performed, and the set-top box is sent to the cable modem through the SNMP protocol. The backup system performs the system recovery command. If the two are inconsistent, the verification fails.

[Claim 5] The cable modem security method according to claim 1, wherein The method also includes the step of synchronously upgrading the backup system by the set top box after the cable modem system is upgraded.

A cable modem security system, comprising: a cable modem and a set top box, the set top box storing a backup system of the cable modem; after the cable modem system is destroyed or crashed, the cable modem sends a request to the set top box, requesting the set top box to send a backup to the cable modem The system, the set top box receives the request, and sends the backup system to the cable modem, the cable modem downloads the backup system and performs verification, and if the verification passes, the backup system is used for system recovery.

The cable modem security system according to claim 6, wherein the cable modem boot loader sets a fixed IP address for the cable modem for backup system transmission with the set top box; and then follows the simple network management protocol to the set top box through the network port. Send the SNMP command of the cable modem backup system; after receiving the SNMP command, the set-top box checks the backup system of the set-top box, and sends an SNMP response command to the cable modem after querying the backup system;

The cable modem sends a request after receiving the SNMP response command, requesting the set-top box to send the backup system.

The cable modem security system according to claim 7, wherein after receiving the request, the set top box starts the TFTP process of sending the backup system, and sends a message for downloading the backup system to the cable modem through the SNMP protocol; the bootloader receiving the cable modem After the message, start downloading the backup system.

The cable modem security system according to claim 8, wherein the cable modem boot loader downloads the backup system, performs signature verification on the downloaded backup system, and passes the verification value generated by the signature verification through the SNMP protocol. Send to the set-top box; the set-top box terminates the check value and compares it with the preset check value. If it is consistent, it passes the check. The set-top box sends the command to use the backup system for system recovery to the cable modem through the SNMP protocol. If the two are inconsistent, the verification is performed. Fail.

The cable modem security system of claim 6 wherein the set top box synchronizes the backup system after the cable modem system is upgraded. [Claim 11] A cable modem security system, wherein the cable modem security system includes a cable modem and a set top box, the set top box including a processor, a communication interface, a memory, and a bus;

The processor, the communication interface, and the memory complete communication with each other through a bus; the communication interface is configured to communicate with a cable modem;

The processor is configured to execute a program;

The program includes:

A cable modem backup system for receiving a request sent by the cable modem to the set top box after the cable modem system is destroyed or crashes, and transmitting the backup system to the cable modem, causing the cable modem to download the backup system and adopt the backup system Perform a system recovery.