WO2016161864A1

WO2016161864A1 - Ota bootstrap method and system

Info

Publication number: WO2016161864A1
Application number: PCT/CN2016/075811
Authority: WO
Inventors: 罗猛
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-04-07
Filing date: 2016-03-07
Publication date: 2016-10-13
Also published as: CN106162706A; CN106162706B

Abstract

Disclosed are an OTA bootstrap method and system. The method comprises: a terminal device receiving a PreBootstrap message carrying a dynamic identification code; the terminal device receiving a Bootstrap message; and the terminal device checking the Bootstrap message using the dynamic identification code.

Description

Air interface guiding method and system

Technical field

This application relates to, but is not limited to, mobile communication terminal management techniques.

Background technique

With the development of mobile communication services, OMA DM (Object Management Architecture Data Management) is increasingly important in the entire mobile operation server system, and the application of OMA DM can effectively reduce maintenance costs.

In the OMA DM protocol, a terminal that does not have the DM function can obtain a DM session with the server through Bootstrap. The common Bootstrap has the following three types:

1. Factory Bootstrap mode: Pre-fabrication of all information for DM interaction to the terminal at the factory, without the need to transmit sensitive public key and other information through the air interface, the security is high but not flexible;

2. The OTA Bootstrap mode is adopted. The terminal that does not have the DM function receives the Bootstrap message from the DM server by means of a WAP application (WAP PUSH, Wireless Application Protocol Push) or an object exchange (OBEX, Object Exchange). According to the content of the message, the corresponding configuration is performed to obtain the capability of performing DM session with the DM server. This method has high flexibility, but needs to transmit a large amount of sensitive information through the air interface, so there is a risk of receiving a malicious Bootstrap message. , security is not high;

3. Smart card Bootstrap mode: The terminal reads the information from the inserted Smartcard to complete the Bootstrap to obtain the DM interaction capability. This method is also safer but the application cost is also increased.

As can be seen from the above analysis, OTA Bootstrap is the most flexible and efficient way. The required network environment includes: terminal equipment, users, network servers, and terminal management (DM) servers. The processing flow is shown in Figure 1:

Step 101: The user registers on the terminal device.

Step 102: The network server detects the terminal device in the network.

Step 103: The terminal device confirms that it is a registered device on the live network (that is, the terminal device is available);

Step 104: The network server sends an OTA Bootstrap request to the DM server.

Step 105: The DM server feeds back the air interface guidance setting feedback message PUSH OTA Bootstrap;

Step 106: The terminal device performs an OTA Bootstrap operation.

Step 107: The terminal device and the DM server return to each other.

As shown in Figure 1, the DM server may be an authorized DM server or an unauthorized DM server. Therefore, the Bootstrap message received by the terminal device may be sent by the unauthorized DM server, so that the terminal device is completely controlled by the unauthorized DM server, and there is a great security risk.

Therefore, although OTA Bootstrap is flexible and efficient, it has great security risks. Although the OMA DM protocol requires authentication of the message authentication code (MAC) for the OTA Bootstrap, various security mechanisms are developed, such as: the network provides the identification code NETWPIN, the user provides the identification code USERPIN, and the network/user provides the same. The identification code USERNETWPIN, etc., but the personal identification number (PIN, Personal Identification Number) is obtained in a single way or the PIN code itself is basically fixed, and the security is weak. These highly sensitive information are easily hacked or artificially leaked during transmission. In this case, the terminal device may receive a malicious Bootstrap message and perform a Bootstrap operation to cause the terminal device to fail to work normally, or interact with an unauthorized DM server, so that the information on the terminal device is leaked or tampered with, so that the user Suffered huge losses.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

This document provides an air interface guidance method and system, which can enhance the reliability verification of Bootstrap messages and avoid security problems such as user information leakage or tampering after receiving malicious Bootstrap messages.

An air interface guiding OTA Bootstrap method includes: a terminal device receives a pre-boot PreBootstrap message carrying a dynamic identification code; a terminal device receives a Bootstrap message; and the terminal device utilizes The dynamic identification code checks the Bootstrap message.

Optionally, after the terminal device uses the dynamic identifier to verify the Bootstrap message, the method further includes: after the Bootstrap message passes the verification, the terminal device performs a Bootstrap operation corresponding to the Bootstrap message.

Optionally, after the terminal device uses the dynamic identifier to check the Bootstrap message, the method further includes: after the Bootstrap message fails the verification, the terminal device discards the Bootstrap message.

Optionally, the PreBootstrap message further carries an effective time of the dynamic identifier;

The detecting, by the terminal device, the Bootstrap message by using the dynamic identification code, is: the terminal device uses the dynamic identification code to check the Bootstrap message within a valid time of the dynamic identification code.

Optionally, the detecting, by the terminal device, the Bootstrap message by using the dynamic identifier:

When the correspondence between the Bootstrap message and the dynamic identification code is correct, and the verification of the Bootstrap message by using the dynamic identification code is completed within the valid time of the dynamic identification code, the Bootstrap message passes the verification;

When the correspondence between the Bootstrap message and the dynamic identification code is incorrect, or the verification of the Bootstrap message by using the dynamic identification code is not completed within the valid time of the dynamic identification code, the Bootstrap message fails the verification.

An air interface guiding system, configured in the terminal device, includes: a first receiving module, configured to: receive a PreBootstrap message carrying a dynamic identification code; and a second receiving module, configured to: receive a Bootstrap message; and the verification module is configured to: The dynamic identification code checks the Bootstrap message.

Optionally, the system further includes: a processing module, configured to: after the Bootstrap message passes the verification by the verification module, perform a Bootstrap operation corresponding to the Bootstrap message.

Optionally, the system further includes: a processing module, configured to: when the Bootstrap message fails the verification by the verification module, discard the Bootstrap message.

Optionally, the PreBootstrap message further carries an effective time of the dynamic identifier, and the verification module is configured to: use the dynamic identifier to verify the Bootstrap message during an effective time of the dynamic identifier .

Optionally, the verification module is set to:

A computer readable storage medium storing computer executable instructions for performing the method of any of the above.

In the OTA Bootstrap process of the embodiment of the present invention, the terminal device receives the PreBootstrap message carrying the dynamic identification code and the Bootstrap message, and uses the dynamic identification code to check the Bootstrap message. In this way, the reliability of Bootstrap message verification in the OTA Bootstrap process is greatly increased, and security problems such as leakage or tampering of user information due to receiving malicious Bootstrap messages are avoided.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a schematic diagram of a basic process of an air interface guiding process performed by a terminal device in the related art;

2 is a flowchart of an air interface guiding method according to an embodiment of the present invention;

3 is a flowchart of an air interface guiding method according to Embodiment 1 of the present invention;

FIG. 4 is a schematic diagram of the composition of an air interface guiding system according to an embodiment of the present invention.

Embodiments of the invention

Embodiments of the present invention will be described below with reference to the accompanying drawings.

FIG. 2 is a flowchart of an air interface guiding method according to an embodiment of the present invention. As shown in FIG. 2, the air interface guiding method provided by the embodiment of the present invention includes the following steps:

Step 21: The terminal device receives a PreBootstrap message carrying a dynamic identification code.

In this step, the dynamic identifier carried in the PreBootstrap message has a corresponding relationship with the subsequent Bootstrap message. Here, the dynamic identification code is, for example, a dynamically generated and encrypted PIN code.

The terminal device receives the PreBootstrap message, for example, from the DM server group, and then parses the PreBootstrap message, obtains the PIN code, and stores the PIN code.

In an embodiment, the PreBootstrap message also carries the effective time of the dynamic identification code. After the terminal device parses the PreBootstrap message, the PIN code and the valid time of the PIN code are obtained, and the PIN code and the valid time of the PIN code are stored.

Step 22: The terminal device receives the Bootstrap message.

Step 23: The terminal device uses the dynamic identification code to check the Bootstrap message.

After the Bootstrap message passes the check, the terminal device performs the Bootstrap operation corresponding to the Bootstrap message. After the Bootstrap message fails the check, the terminal device discards the Bootstrap message.

In an embodiment, the PreBootstrap message also carries the valid time of the dynamic identifier. At this time, step 23 includes: the terminal device uses the dynamic identification code to check the Bootstrap message within the valid time of the dynamic identification code. Wherein, when the correspondence between the Bootstrap message and the dynamic identification code is correct, and the verification of the Bootstrap message by using the dynamic identification code is completed within the valid time of the dynamic identification code, the Bootstrap message passes the check; when the Bootstrap If the correspondence between the message and the dynamic identification code is incorrect, or the verification of the Bootstrap message by using the dynamic identification code is not completed within the valid time of the dynamic identification code, the Bootstrap message fails the verification.

FIG. 3 is a flowchart of an air interface guiding method according to Embodiment 1 of the present invention. As shown in FIG. 3, the steps of the first embodiment of the present invention are described in detail:

Step 301: The user registers on the terminal device.

Step 302: The network server detects the terminal device in the network.

Step 303: The terminal device confirms that the device is registered on the live network (that is, the terminal device is available).

Step 304: The network server sends an OTA Bootstrap request to the DM server group.

Step 305: The DM server group sends a PreBootstrap message to the terminal device, where the PreBootstrap message carries the dynamically generated encrypted PIN code and the valid time of the PIN code.

Step 306: The terminal device receives the PreBootstrap message, parses the message, and obtains the PIN code and the valid time of the PIN code, and stores the information.

Step 307: The DM server group sends a Bootstrap message to the terminal device.

Step 308: The terminal device uses the dynamic PIN code to check the Bootstrap message within the valid time of the PIN code, and performs a Bootstrap operation when the verification succeeds; if the verification fails or exceeds the valid time of the PIN code, the Bootstrap message is discarded;

Step 309: After the terminal device Bootstrap is completed, the terminal is connected to the DM server group.

As shown in FIG. 4, an embodiment of the present invention further provides an air interface guiding system, which is configured in a terminal device, and includes: a first receiving module 41, configured to: receive a PreBootstrap message carrying a dynamic identification code; and a second receiving module 42, set The method is: receiving the Bootstrap message, and the checking module 43 is configured to: check the Bootstrap message by using the dynamic identifier.

In an embodiment, the system may further include a processing module 44, configured to: perform a Bootstrap operation corresponding to the Bootstrap message after the Bootstrap message passes the verification by the verification module; or, when the Bootstrap message fails the verification module. After the check, the Bootstrap message is discarded.

In an embodiment, the PreBootstrap message further carries an effective time of the dynamic identifier. The verification module 43 is configured to check the Bootstrap message by using the dynamic identification code within the valid time of the dynamic identification code.

In the embodiment, the verification module 43 is configured to: when the Bootstrap message and the dynamic identification code correspond to the correct relationship, and the verification of the Bootstrap message by using the dynamic identification code is completed within the valid time of the dynamic identification code, The Bootstrap message passes the verification; when the correspondence between the Bootstrap message and the dynamic identification code is incorrect, or the verification of the Bootstrap message by using the dynamic identification code is not completed within the valid time of the dynamic identification code, the The Bootstrap message failed the test.

In addition, the processing procedure of the above system is the same as that described above, and thus will not be described herein.

In summary, according to the solution of the embodiment of the present invention, the Bootstrap message check in the embodiment of the present invention can be completed by using the existing method in a simple manner, thereby saving cost and ensuring the source of the Bootstrap message. Reliability, which effectively enhances the security of the OTA Bootstrap process.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When the device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

Claims

An air interface booting OTA Bootstrap method, including:

The terminal device receives the pre-boot PreBootstrap message carrying the dynamic identification code;

The terminal device receives the Bootstrap message;

The terminal device uses the dynamic identification code to check the Bootstrap message.
The method of claim 1, wherein the terminal device uses the dynamic identification code to check the Bootstrap message, and further includes: after the Bootstrap message passes the verification, the terminal device executes the Bootstrap corresponding to the Bootstrap message. operating.
The method of claim 1, wherein the terminal device checks the Bootstrap message by using the dynamic identification code, and further comprises: after the Bootstrap message fails the verification, the terminal device discards the Bootstrap message.
The method according to any one of claims 1 to 3, wherein: the PreBootstrap message further carries an effective time of the dynamic identification code;

The detecting, by the terminal device, the Bootstrap message by using the dynamic identification code, is: the terminal device uses the dynamic identification code to check the Bootstrap message within a valid time of the dynamic identification code.
The method of claim 4, wherein the detecting, by the terminal device, the Bootstrap message by using the dynamic identification code comprises:

When the correspondence between the Bootstrap message and the dynamic identification code is correct, and the verification of the Bootstrap message by using the dynamic identification code is completed within the valid time of the dynamic identification code, the Bootstrap message passes the verification;

When the correspondence between the Bootstrap message and the dynamic identification code is incorrect, or the verification of the Bootstrap message by using the dynamic identification code is not completed within the valid time of the dynamic identification code, the Bootstrap message fails the verification.
An air interface guiding system is provided on a terminal device, including:

The first receiving module is configured to: receive a PreBootstrap message carrying a dynamic identification code;

The second receiving module is configured to: receive a Bootstrap message;

The verification module is configured to: check the Bootstrap message by using the dynamic identification code.
The system of claim 6, further comprising: a processing module, configured to: perform a Bootstrap operation corresponding to the Bootstrap message after the Bootstrap message passes the verification by the verification module.
The system of claim 6 further comprising: a processing module configured to: discard the Bootstrap message after the Bootstrap message has not passed the verification by the verification module.
The system according to any one of claims 6 to 8, wherein: the PreBootstrap message further carries an effective time of the dynamic identification code, and the verification module is configured to: utilize during the effective time of the dynamic identification code The dynamic identification code checks the Bootstrap message.
The system of claim 9 wherein: said verification module is configured to:

When the correspondence between the Bootstrap message and the dynamic identification code is correct, and the verification of the Bootstrap message by using the dynamic identification code is completed within the valid time of the dynamic identification code, the Bootstrap message passes the verification;

When the correspondence between the Bootstrap message and the dynamic identification code is incorrect, or the verification of the Bootstrap message by using the dynamic identification code is not completed within the valid time of the dynamic identification code, the Bootstrap message fails the verification.
A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-5.