WO2018024198A1 - 机顶盒的应用程序升级方法、系统及机顶盒 - Google Patents

机顶盒的应用程序升级方法、系统及机顶盒 Download PDF

Info

Publication number
WO2018024198A1
WO2018024198A1 PCT/CN2017/095444 CN2017095444W WO2018024198A1 WO 2018024198 A1 WO2018024198 A1 WO 2018024198A1 CN 2017095444 W CN2017095444 W CN 2017095444W WO 2018024198 A1 WO2018024198 A1 WO 2018024198A1
Authority
WO
WIPO (PCT)
Prior art keywords
upgrade
application
program
data
upgrade program
Prior art date
Application number
PCT/CN2017/095444
Other languages
English (en)
French (fr)
Inventor
高翔
Original Assignee
深圳市创维软件有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳市创维软件有限公司 filed Critical 深圳市创维软件有限公司
Publication of WO2018024198A1 publication Critical patent/WO2018024198A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
    • H04N21/4432—Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/445—Program loading or initiating
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB

Definitions

  • the present disclosure relates to the field of communication technologies, for example, to an application upgrade method, system, and set top box of a set top box.
  • Set-top boxes have become an indispensable set-top box for modern life, making up for the lack of TV functions.
  • Over-the-Air Technology (OTA) upgrade has become a basic function of set-top boxes due to the addition of system functions or functions of the front-end, or set-top box manufacturers find bugs in their own software. Set-top boxes produced by two or three manufacturers.
  • OTA Over-the-Air Technology
  • the general architecture of the set-top box is: BOOT+loader+APP mode.
  • the set-top box is booted from the Build-Own-Operate-Transfer (BOOT) program. If there is an upgrade flag, load the loader (the upgrade program for the APP upgrade) to upgrade the application (Application, APP). After the upgrade is successful, the upgrade is cleared. The logo, if the upgrade fails, directly enters the APP, and enters the loader upgrade APP again after the next boot.
  • BOOT Build-Own-Operate-Transfer
  • the above upgrade method can upgrade the APP in the set-top box. Because the upgrade mode is in the loader, if the upgrade mode and the trigger mode are cracked, such as being hacked, the flow of the company developer, etc., that is, the loader is cracked, the set-top box may Being attacked and constantly restarting, seriously affecting the normal use of the set-top box.
  • the present disclosure provides an application upgrade method, system and set top box of a set top box, which can improve the security of application and upgrade program upgrade.
  • This embodiment provides a method for upgrading an application of a set top box, which may include the following steps:
  • the method further includes:
  • the first upgrade program is upgraded, the first upgrade program is upgraded by the second upgrade program.
  • the method further includes:
  • the second upgrade program is set in a one-time programmable OTP register.
  • the upgrading the application by the first upgrade program comprises:
  • the first upgrade program downloads upgrade data of the application by using an over-the-air technology OTA, and detects whether the upgrade data of the application is successfully downloaded;
  • the upgrade data of the application When the upgrade data of the application is successfully downloaded, the data corresponding to the flash area of the application is updated by using the upgrade data of the application; when the update is successful, the upgrade identification information of the application is cleared and the set top box is restarted; when the update is performed; When it fails, restart the set-top box.
  • upgrading the first upgrade program by the second upgrade program includes:
  • the second upgrade program downloads the upgrade data of the first upgrade program by using an OTA, and detects whether the upgrade data of the first upgrade program is successfully downloaded;
  • the data of the flash area corresponding to the first upgrade program is updated by using the upgrade data of the first upgrade program; when the update is successful, the upgrade identifier information of the first upgrade program is cleared. And restart the set-top box; when the update fails, restart the set-top box.
  • the method further includes:
  • the embodiment further provides an application upgrade system of the set top box, which may include:
  • the first upgrade program set to upgrade the application
  • the BOOT program is configured to detect whether the application is upgraded after the set top box is powered on; when the application is upgraded, verify whether the data of the first upgrade program is complete; when the data of the first upgrade program is complete The first upgrade program is started to upgrade the application; when the data of the first upgrade program is incomplete, the second upgrade program is started to upgrade the application.
  • the BOOT program is further configured to: when the application is not upgraded, determine whether to detect the upgrade of the first upgrade program; when upgrading the first upgrade program, start the first The second upgrade program upgrades the first upgrade program.
  • the BOOT program is further configured to:
  • the first upgrade program When the first upgrade program is not upgraded, it is verified whether the data of the application is complete; when the data of the application is complete, the application is started; when the data of the application is incomplete, the verification office is Whether the data of the first upgrade program is complete; when the data of the first upgrade program is complete, the first upgrade program is started to upgrade the application, when the data of the first upgrade program is incomplete, The second upgrade program is started to upgrade the application and the first upgrade program.
  • the second upgrade program is set in a one-time programmable OTP register.
  • the first upgrade program is set to:
  • Downloading, by the OTA, the upgrade data of the application detecting whether the upgrade data of the application is successfully downloaded; when the upgrade data of the application is unsuccessfully downloaded, prompting that the upgrade fails, clearing the upgrade identifier information of the application, and restarting the set top box And when the upgrade data of the application is successfully downloaded, updating the data corresponding to the flash area of the application by using the upgrade data of the application; when the update is successful, clearing the upgrade identification information of the application and restarting the set top box; When the update fails, restart the set-top box.
  • the second upgrade program is set to:
  • the embodiment further provides a computer readable storage medium storing computer executable instructions for performing any of the above methods.
  • the embodiment further provides a set top box, the set top box comprising an application upgrade system of the set top box, further comprising one or more processors, a memory and one or more programs, the one or more programs being stored in the memory When executed by one or more processors, perform any of the above methods.
  • the embodiment further provides a computer program product comprising a computer program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer Having the computer perform any of the methods described above.
  • the application program is upgraded by setting two upgrade programs; when the data of the first upgrade program is complete, the application program is upgraded by the first upgrade program. When the data of the first upgrade program is incomplete, the application is upgraded by the second upgrade program. When the first upgrade program is cracked or conflicts with other vendors, the application can be securely and timely upgraded.
  • FIG. 1 is a flowchart of an application upgrade method of a set top box according to an embodiment of the present invention
  • FIG. 2 is a structural block diagram of an application upgrade system of a set top box according to the embodiment
  • FIG. 3 is a schematic structural diagram of hardware of a set top box according to the embodiment.
  • the embodiment provides a method, a system for upgrading an application of a set top box, and a set top box.
  • the application upgrade method of the set top box provided in this embodiment may be an upgrade method of the OTA upgrade set top box application, where two upgrade programs for not upgrading the application may be set in the set top box, and one upgrade program may also be used. Upgrade another upgrade program.
  • the upgrade method may include the following steps:
  • the value of the first upgrade flag bit of the application is read, and whether the application is upgraded is determined according to the value of the first upgrade flag bit.
  • the BOOT program detects whether there is an APP upgrade flag, that is, the first upgrade flag bit, and the APP indicates that the APP has an upgrade requirement, and the APP is upgraded. If not, the APP has no upgrade requirement, and the APP is upgraded.
  • a flag bit can be set in the loader flag partition, such as the AppUpdate_flag flag bit, as the APP upgrade flag bit, the flag bit can occupy 32 bits, and the relationship between the value of the flag bit and the trigger APP upgrade is set, such as the value of the flag bit AppUpdate_flag.
  • the APP upgrade is triggered, and the value of the flag bit that triggers the APP upgrade can be customized.
  • S20 when the application is upgraded, it is verified whether the data of the first upgrade program (loader1) is complete; when the data of the first upgrade program is complete, the application is upgraded by the first upgrade program; When the data of an upgrade program is incomplete, the application is upgraded by the second upgrade program (loader2).
  • Reading the first check of the first upgrade program when the application is upgraded The value of the bit, according to the value of the first check bit, whether the data of the first upgrade program is complete.
  • the first upgrade program may be loader1.bin, set a signature check digit for the program, that is, the first check digit, and save the check digit value in the loader1.bin program, such as using hash (hash)
  • the verification method calculates the hash value of the loader1.bin program as a preset hash value, and saves the preset hash value in the last few bytes of loader1.bin to calculate the current loader1.bin
  • the hash value is compared with whether the hash value of the current loader1.bin is consistent with the preset hash value. If the current loader1.bin is destroyed, the hash value of the current loader1.bin is inconsistent with the preset hash value, and the checksum is obtained.
  • the result of the error is determined, so that the data of the current loader1.bin is incomplete. If the hash value of the current loader1.bin is consistent with the preset hash value, it is determined that the current data of the loader1.bin is complete. Other verification methods may also be used in this embodiment to determine the integrity of the first upgrade procedure.
  • the APP when the data of the first upgrade program is complete, the APP may be upgraded by the first upgrade program, thereby improving the security of the APP upgrade; when the data of the first upgrade program is incomplete, the second upgrade procedure is performed on the APP.
  • the upgrade ensures a normal and timely upgrade of the app.
  • the application upgrade method of the set top box provided in this embodiment may further include S30-S70 as shown below.
  • the value of the second upgrade flag of the first upgrade program is read, and whether the first upgrade program is upgraded according to the value of the second upgrade flag is determined. .
  • the upgrade flag of loader1 can be set in the loader flag partition, and the value of the upgrade flag of loader1 can be read to determine whether to upgrade loader1.
  • the second upgrade program is used to upgrade the first upgrade.
  • the program is upgraded.
  • the first upgrade program is recorded as loader1
  • the second upgrade program is recorded as loader2.
  • loader1 has upgrade requirements
  • loader1 is upgraded through loader2 to ensure that loader1 is updated in time
  • APP upgrade method, trigger upgrade mode is cracked or
  • the conflict with other vendors' upgrade programs leads to an upgrade error, the above problem can be solved by upgrading loader1, and the security of the set-top box APP upgrade is improved.
  • the set-top box can also upgrade the APP through the second upgrade program to ensure the normal upgrade of the set-top box.
  • the data in the OTP register or the OTP area of the flash memory stored in the BOOT program and the second upgrade program cannot be written after one write. fixed one. Therefore, the BOOT program and the second upgrade program of the set top box will not be changed, that is, the second upgrade program is not upgraded, and the data of the second upgrade program is always complete and can always work normally.
  • the upgraded first upgrade program upgrades the application.
  • the value of the second check digit of the application is read, and the data of the application is verified to be complete according to the value of the second check digit.
  • the application may be app.bin, and set a signature check bit for the program, that is, the second check bit, and determine whether the data of the application is complete by verifying the value of the signature check bit of the application, and the process is The process of verifying the integrity of the loader1.bin is the same. Referring to the process of verifying the integrity of the loader1.bin provided by the above embodiment.
  • the BOOT program can read the APP upgrade flag bit in the loaderflag partition and the upgrade flag bit of loader1 to determine whether to upgrade the APP and loader1 programs.
  • the upgrade can also be triggered; it is not necessary to trigger the upgrade information in the APP to ensure that the APP and loader1 can be upgraded and updated immediately if the fault occurs, which reduces the failure rate of the set-top box software.
  • the application upgrade method provided by this embodiment ensures that the APP is upgraded normally by using two loaders. If the upgrade method is triggered or the upgrade mode is triggered, the loader2 can be passed. To update loader1, modify the upgrade mode of the set-top box, and improve the security of the loader and APP upgrade.
  • the step of upgrading the application by the first upgrade procedure may include:
  • the first upgrade program downloads the upgrade data of the application through the OTA, and detects whether the upgrade data of the application is successfully downloaded;
  • the upgrade data of the application is unsuccessful, the upgrade fails, and the upgrade identifier information of the application, such as the upgrade flag of the APP, is cleared, that is, the value of the first upgrade flag is cleared, and the set-top box is restarted;
  • the upgrade data of the application is successfully downloaded, the data corresponding to the flash area of the application is updated by using the upgrade data of the application; when the update of the data corresponding to the flash area of the application is successful, the upgrade identification information of the application is cleared, that is, the first Upgrade the value of the flag and restart the set-top box; when the application fails to update the data in the flash area, restart the set-top box.
  • the loader1 or loader1 will re-upgrade the application due to the incomplete data of the application.
  • the step of upgrading the application by the second upgrade program may include:
  • the second upgrade program downloads the upgrade data of the application through the OTA, and detects whether the upgrade data of the application is successfully downloaded;
  • the upgrade data of the application is unsuccessful, the upgrade fails, and the upgrade identifier information of the application, such as the upgrade flag of the APP, is cleared, that is, the value of the first upgrade flag is clear, and the set-top box is restarted;
  • the upgrade data of the application is successfully downloaded, the data corresponding to the flash area of the application is updated; when the data update of the corresponding flash area of the application is successful, the upgrade identification information of the application is cleared and Restart the set-top box; restart the set-top box when the data update of the corresponding flash area of the application fails. It can be seen from S70 that after the restart, due to the incomplete data of the application, loader1 or loader2 will re-upgrade the application.
  • the upgrade identifier information of the clear application may be a value of the upgrade flag of the clear application, or may be a value of modifying the upgrade flag of the application.
  • the upgrade data download of the application is unsuccessful. Usually, there is a problem with the provider data of the upgrade data. Clearing the upgrade data flag of the application can prevent the application from being updated every time the set-top box is powered on, which affects the running of the application.
  • the step of upgrading the first upgrade program by the second upgrade procedure may include:
  • the second upgrade program downloads the upgrade data of the first upgrade program through the OTA, and detects whether the upgrade data of the first upgrade program is successfully downloaded. If the upgrade data of the first upgrade program is unsuccessfully downloaded, the upgrade fails, and the first upgrade program is cleared. Upgrade the identification information, such as the loader1 upgrade flag, that is, the second upgrade flag and restart the set-top box;
  • the upgrade identifier information of the first upgrade program may be the value of the upgrade flag of the first upgrade program, or the value of the upgrade flag of the first upgrade program.
  • the upgrade data of the first upgrade program is unsuccessful, usually because there is a problem with the provider data of the upgrade data, and the upgrade data flag of the first upgrade program is cleared, thereby preventing the update of the first upgrade program every time the set-top box is powered on. Occupy the data processing resources of the set top box.
  • the upgrade data of the first upgrade program is successfully downloaded, the data of the flash area corresponding to the first upgrade program is updated; when the data update of the flash area corresponding to the first upgrade program is successful, the upgrade identifier information of the first upgrade program is cleared, that is, the above information is cleared.
  • the value of the second upgrade flag is set, and the set top box is restarted; when the data update of the flash area corresponding to the first upgrade program fails, the set top box is restarted. It can be known from S70 that after the restart, the data of the first upgrade program is incomplete, and loader2 will re-upgrade loader1.
  • the embodiment further provides a set top box, where the set top box includes an application upgrade system of the set top box.
  • the application upgrade system provided in this embodiment may include a BOOT program 10, a first upgrade program 20, a second upgrade program 30, and a plurality of applications 40.
  • the first upgrade program 20 is configured to upgrade an application.
  • the second upgrade program 30 is configured to upgrade the first upgrade program or the application.
  • the BOOT program is configured to detect whether the application is upgraded after the set-top box is powered on; when the application is upgraded, verify that the data of the first upgrade program is complete; when the data of the first upgrade program is complete, start The first upgrade program upgrades the application; when the data of the first upgrade program is incomplete, the second upgrade program is started to upgrade the application.
  • the BOOT program is further configured to: when the application is not upgraded, determine whether to detect the upgrade of the first upgrade program; when upgrading the first upgrade program, start the second upgrade process to the first Upgrade the program to upgrade.
  • the BOOT program is further configured to:
  • the first upgrade program After the first upgrade program is upgraded by the second upgrade program, it is verified whether the data of the application is complete; when the data of the application is complete, the application is jumped; and when the data of the application is incomplete, The first upgrade program after starting the upgrade upgrades the application.
  • the BOOT program is further configured to: when the upgrade of the first upgrade program is not performed, verify whether the data of the application is complete; when the data of the application is complete, start the application; when the data of the application is not When complete, verify that the data of the first upgrade program is complete; when the data of the first upgrade program is complete, start the first upgrade program to upgrade the application, and when the data of the first upgrade program is incomplete, start the second upgrade.
  • the program upgrades the application and the first upgrade.
  • the second upgrade program is set in a one-time programmable OTP register.
  • the first upgrade program is set to:
  • the upgrade data of the application When the upgrade data of the application is successfully downloaded, the data corresponding to the flash area of the application is updated by the upgrade data of the application; when the update is successful, the upgrade identification information of the application is cleared and the set top box is restarted; when the update fails, the set top box is restarted.
  • the second upgrade process is set to:
  • the application update data is used to update the data corresponding to the flash area of the application; when the data update of the corresponding flash area of the application is successful, the upgrade identification information of the application is cleared and the set top box is restarted; in the corresponding flash area of the application When the data update fails, restart the set-top box.
  • the second upgrade program is further configured to:
  • the upgrade data of the first upgrade program is downloaded through the OTA, and the upgrade data of the first upgrade program is successfully downloaded.
  • the upgrade data of the first upgrade program is unsuccessful, the upgrade fails, and the upgrade identifier information of the first upgrade program is cleared.
  • An upgrade program upgrades the identification information and restarts the set top box; when the first upgrade program fails to update the data in the flash area, the set top box is restarted.
  • the embodiment further provides a computer readable storage medium storing computer executable instructions for performing any of the above methods.
  • the set top box includes: a processor 310 and a memory 320; and may also include a communication interface (Communications). Interface) 330 and bus 340.
  • Communication interface Communication interface
  • the processor 310, the memory 320, and the communication interface 330 can complete communication with each other through the bus 340. Communication interface 330 can be used for information transmission. Processor 310 can invoke logic instructions in memory 320 to perform any of the methods of the above-described embodiments.
  • the memory 320 may include a storage program area and a storage data area, and the storage program area may store an operating system and an application required for at least one function.
  • the storage data area can store data and the like created according to the use of the set top box.
  • the memory may include, for example, a volatile memory of a random access memory, and may also include a non-volatile memory. For example, at least one disk storage device, flash memory device, or other non-transitory solid state storage device.
  • the logic instructions in the memory 320 described above can be implemented in the form of software functional units and sold or used as separate products, the logic instructions can be stored in a computer readable storage medium.
  • the technical solution of the present disclosure may be embodied in the form of a computer software product, which may be stored in a storage medium, and includes a plurality of instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) All or part of the steps of the method described in this embodiment are performed.
  • the storage medium may be a non-transitory storage medium or a transitory storage medium.
  • the non-transitory storage medium may include: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. medium.
  • All or part of the processes in the above embodiment methods may be completed by a computer program indicating related hardware, and the program may be stored in a non-transitory computer readable storage medium, the program being When executed, the flow of an embodiment of the method as described above may be included.
  • the disclosure provides an application upgrade method, a system and a set top box of a set top box, which can ensure that the application is safely and timely upgraded when the first upgrade program is cracked or conflicts with other vendors, and the first upgrade program can be ensured.
  • the timely update has improved the difficulty of cracking and ensured the security of the upgrade program.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Stored Programmes (AREA)
  • Computer Security & Cryptography (AREA)

Abstract

一种机顶盒及其应用程序升级方法、系统，所述应用程序升级方法通过设置两个升级程序来对应用程序进行升级；当第一升级程序的数据完整时由第一升级程序对应用程序进行升级，当第一升级程序的数据不完整时由第二升级程序对应用程序进行升级。

Description

机顶盒的应用程序升级方法、系统及机顶盒 技术领域
本公开涉及通信技术领域，例如涉及一种机顶盒的应用程序升级方法、系统及机顶盒。
背景技术
机顶盒已经成为现代生活不可或缺的机顶盒，弥补电视功能的不足。由于前端的系统功能或功能的添加，或者机顶盒厂商发现自身软件的一些漏洞(Bug)，空中下载技术(Over-the-Air Technology，OTA)升级已经成为机顶盒的一个基本功能，往往一个运行商会采购2到3家厂商生产的机顶盒。
机顶盒的普遍架构是：BOOT+loader+APP模式。机顶盒开机从引导(Build-Own-Operate-Transfer，BOOT)程序进行启动，如果有升级标志，就进行加载loader(给APP升级的升级程序)升级应用程序(Application，APP)，升级成功后清除升级标志，若升级失败则直接进入APP，下次开机再次进入loader升级APP。
上述升级方式，能够升级机顶盒中的APP，由于升级方式在loader中，如果升级方式与触发方式被破解，如被黑客攻击，公司开发人员的流动等原因造成，即loader被破解，则机顶盒就可能被攻击从而不断重启，严重影响机顶盒的正常使用。
发明内容
本公开提供一种机顶盒的应用程序升级方法、系统及机顶盒，可以提高应用程序和升级程序升级的安全性。
本实施例提供一种机顶盒的应用程序升级方法，可以包括如下步骤：
机顶盒开机后，判断是否对所述机顶盒的应用程序进行升级；以及
当对所述应用程序进行升级时，则校验第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，由第一升级程序对所述应用程序进行升级；当所述第一升级程序的数据不完整时，由第二升级程序对所述应用程序进行升级。
可选地，判断是否对所述应用程序进行升级之后，还包括：
当不对所述应用程序进行升级时，则判断是否对所述第一升级程序进行升级；以及
当对所述第一升级程序进行升级时，则由所述第二升级程序对第一升级程序进行升级。
可选地，判断是否对所述第一升级程序进行升级之后，还包括：
当不对所述第一升级程序进行升级时，则校验所述应用程序的数据是否完整；
当所述应用程序的数据完整时，则跳转到所述应用程序；以及
当所述应用程序的数据不完整时，则校验所述第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，由所述第一升级程序对应用程序进行升级；当所述第一升级程序的数据不完整时，由所述第二升级程序对所述应用程序和所述第一升级程序进行升级。
可选地，所述第二升级程序设置在一次性可编程OTP寄存器中。
可选地，所述由第一升级程序对所述应用程序进行升级，包括：
所述第一升级程序通过空中下载技术OTA下载所述应用程序的升级数据，并检测所述应用程序的升级数据是否下载成功；
当所述应用程序的升级数据下载不成功时，则提示升级失败，清除所述应用程序的升级标识信息并重启机顶盒；以及
当所述应用程序的升级数据下载成功时，则用所述应用程序的升级数据更新所述应用程序对应闪存区域的数据；当更新成功时，清除应用程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
可选地，由所述第二升级程序对所述第一升级程序进行升级包括：
所述第二升级程序通过OTA下载所述第一升级程序的升级数据，并检测所述第一升级程序的升级数据是否下载成功；
当所述第一升级程序的升级数据下载不成功时，则提示升级失败，清除第一升级程序的升级标识信息并重启机顶盒；以及
当第一升级程序的升级数据下载成功时，则用所述第一升级程序的升级数据更新所述第一升级程序对应闪存区域的数据；当更新成功时，清除第一升级程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
可选地，当对所述第一升级程序进行升级时，则由所述第二升级程序对第一升级程序进行升级之后，还包括：
校验所述应用程序的数据是否完整；当所述应用程序的数据完整时，则跳转到所述应用程序；以及当所述应用程序的数据不完整时，由升级后的第一升级程序对所述应用程序进行升级。
本实施例还提供一种机顶盒的应用程序升级系统，可以包括：
第一升级程序，设置为对应用程序进行升级；
第二升级程序，设置为对第一升级程序或应用程序进行升级；以及
BOOT程序，设置为在机顶盒开机后，检测是否对应用程序进行升级；当对所述应用程序进行升级时，校验第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，启动第一升级程序对所述应用程序进行升级；当所述第一升级程序的数据不完整时，启动第二升级程序对所述应用程序进行升级。
可选地，所述BOOT程序还设置为：当不对应用程序进行升级时，则判断检测是否对所述第一升级程序进行升级；当对所述第一升级程序进行升级时，启动所述第二升级程序对第一升级程序进行升级。
可选地，所述BOOT程序还设置为：
当不对第一升级程序进行升级时，则校验所述应用程序的数据是否完整；当所述应用程序的数据完整时，启动应用程序；当所述应用程序的数据不完整时，校验所述第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，启动所述第一升级程序对所述应用程序进行升级，当所述第一升级程序的数据不完整时，启动所述第二升级程序对所述应用程序和所述第一升级程序进行升级。
可选地，所述第二升级程序设置在一次性可编程OTP寄存器中。
可选地，所述第一升级程序是设置为：
通过OTA下载所述应用程序的升级数据，检测所述应用程序的升级数据是否下载成功；当所述应用程序的升级数据下载不成功时，提示升级失败，清除应用程序的升级标识信息并重启机顶盒；以及当所述应用程序的升级数据下载成功时，用所述应用程序的升级数据更新所述应用程序对应闪存区域的数据；当更新成功时，清除应用程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
可选地，所述第二升级程序是设置为：
通过OTA下载所述第一升级程序的升级数据，检测所述第一升级程序的升级数据是否下载成功；当所述第一升级程序的升级数据下载不成功时，提示升级失败，清除第一升级程序的升级标识信息并重启机顶盒；以及当所述第一升级程序的升级数据下载成功时，用所述第一升级程序的升级数据更新所述第一升级程序闪存区域的数据；当更新成功时，清除第一升级程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
本实施例还提供一种计算机可读存储介质，存储有计算机可执行指令，所述计算机可执行指令用于执行上述任意一种方法。
本实施例还提供一种机顶盒，所述机顶盒包括所述机顶盒的应用程序升级系统，还包括一个或多个处理器、存储器以及一个或多个程序，所述一个或多个程序存储在存储器中，当被一个或多个处理器执行时，执行上述任意一种方法。
本实施例还提供了一种计算机程序产品，所述计算机程序产品包括存储在非暂态计算机可读存储介质上的计算机程序，所述计算机程序包括程序指令，当所述程序指令被计算机执行时，使所述计算机执行上述任意一种方法。
本实施例提供的机顶盒的应用程序升级方法、系统及机顶盒中，通过设置两个升级程序来对应用程序进行升级；在第一升级程序的数据完整时由第一升级程序对应用程序进行升级，在第一升级程序的数据不完整时由第二升级程序对应用程序进行升级，当第一升级程序被破解或者与其他厂商冲突，能够确保对应用程序安全、及时的升级。
附图说明
图1为本实施例提供的机顶盒的应用程序升级方法的流程图；
图2为本实施例提供的机顶盒的应用程序升级系统的结构框图；
图3是本实施例提供的一种机顶盒的硬件结构示意图。
具体实施方式
本实施例提供一种机顶盒的应用程序升级方法、系统及一种机顶盒。其中，本实施例提供的机顶盒的应用程序升级方法，可以采用OTA升级机顶盒应用程序的升级方法，所述机顶盒中可以设置两个用于未应用程序进行升级的升级程序，其中一个升级程序还可以给另一个升级程序进行升级。参考图1，所述升级方法可以包括如下步骤：
在S10中，机顶盒开机后，判断是否对机顶盒的应用程序进行升级；
机顶盒开机后，读取应用程序的第一升级标志位的值，根据所述第一升级标志位的值判断是否对所述应用程序进行升级。
例如，在机顶盒开机后，由BOOT程序检测是否有APP升级标志位，即上述第一升级标志位，有则说明APP有升级需求，对该APP进行升级，无则说明APP无升级需求，不对该APP进行升级。
可以在loader flag分区中设置一个标志位，如AppUpdate_flag标志位，作为APP升级标志位，该标志位可以占32位，设置该标志位的值与触发APP升级的关联关系，如标志位AppUpdate_flag的值为A时，触发APP升级，其中触发APP升级的标志位的值可以自定义设置。在S20中，当对应用程序进行升级时，则校验第一升级程序(loader1)的数据是否完整；当第一升级程序的数据完整时，由第一升级程序对应用程序进行升级；当第一升级程序的数据不完整时，由第二升级程序(loader2)对应用程序进行升级。
其中，当对所述应用程序进行升级时，读取所述第一升级程序的第一校验 位的值，根据所述第一校验位的值校验第一升级程序的数据是否完整。
其中，第一升级程序可以为loader1.bin，为该程序设置签名校验位，即上述第一校验位，并将校验位的值保存在loader1.bin程序中，如采用哈希(hash)校验方法，计算loader1.bin程序完整时的哈希值作为预设哈希值，可以将预设哈希值保存在loader1.bin的最后几个字节的位置，计算当前loader1.bin的哈希值，比较当前loader1.bin的哈希值与预设哈希值是否一致，若当前的loader1.bin被破坏，当前loader1.bin的哈希值与预设哈希值不一致，得到校验错误的结果，从而确定当前loader1.bin的数据不完整，若当前loader1.bin的哈希值与预设哈希值一致，则确定当前的loader1.bin的数据完整。本实施例中还可以采用其他校验方法来判断第一升级程序的完整性。
其中，在第一升级程序的数据完整时，可以通过第一升级程序对APP进行升级，提高了APP升级的安全性；在第一升级程序的数据不完整时，由第二升级程序对APP进行升级，确保了APP的正常、及时的升级。
本实施例提供的机顶盒的应用程序升级方法，还可以包括如下所示的S30-S70。
在S30中，当不对应用程序进行升级时，则判断是否对第一升级程序进行升级。
其中，当不对所述应用程序进行升级时，读取所述第一升级程序的第二升级标志位的值，根据所述第二升级标志位的值判断是否对所述第一升级程序进行升级。
可以在loader flag分区中设置loader1的升级标志位，通过读取loader1的升级标志位的值来确定是否对loader1进行升级。
在S40中、当对第一升级程序进行升级时，则由第二升级程序对第一升级 程序进行升级。
其中，第一升级程序记作loader1，第二升级程序记作loader2，当loader1有升级需求时，通过loader2对loader1进行升级，确保了loader1及时更新，出现APP的升级方法、触发升级模式被破解或者与其他厂商升级程序冲突导致升级错误时，可以通过对loader1的升级来解决上述问题，提高了机顶盒APP升级的安全性。
本实施例中，仅第一升级程序升级，而第二升级程序不升级，故不会出现两个loader都破坏的情况。使得在第一升级程序升级后出现故障无法升级APP时，机顶盒也能通过第二升级程序对APP进行升级，确保了机顶盒的正常升级。
例如，所述BOOT程序和第二升级程序均存储的闪存(flash)的一次性可编程(One Time Programmable，OTP)寄存器或OTP区域中，OTP寄存器或OTP区域的数据在一次写入后是不能更改的。这样机顶盒的BOOT程序和第二升级程序是不会被改变的，即第二升级程序不进行升级，第二升级程序的数据始终是完整的，始终能正常工作。
可选地，在第一升级程序升级之后，校验应用程序的数据是否完整，当应用程序的数据完整时，则跳转到所述应用程序；当所述应用程序的数据不完整时，由升级后的第一升级程序对所述应用程序进行升级。
其中，在第一升级程序升级之后，读取所述应用程序的第二校验位的值，根据所述第二校验位的值校验所述应用程序的数据是否完整；若是，则跳转到所述应用程序，若否，则由升级后的所述第一升级程序对所述应用程序进行升级。
在S50中，当不对第一升级程序进行升级时，则校验应用程序的数据是否完整。
其中，当不对所述第一升级程序进行升级时，读取所述应用程序的第二校验位的值，根据所述第二校验位的值校验所述应用程序的数据是否完整。
其中，应用程序可以为app.bin，为该程序设置签名校验位，即上述第二校验位，通过验证应用程序的签名校验位的值来确定应用程序的数据是否完整，该过程与校验loader1.bin完整性的过程相同，参考上述实施例提供的校验loader1.bin完整性的过程。
在S60中，当应用程序的数据完整，则跳转到应用程序，用户能正常使用APP。
本实施例中，在APP启动过程中可以获知是APP需升级还是loader1需升级，非常便捷。当APP和loader1都需要升级时，可以先升级APP，再升级loader1，快速完成APP升级以供用户使用，例如在升级APP之后下次重启机顶盒时再升级loader1，也可以先升级loader1，再升级APP。
在机顶盒开机启动之后，BOOT程序可以读取loaderflag分区中的APP升级标志位和loader1的升级标志位，确定是否升级APP和loader1程序。
在S70中，当应用程序的数据不完整时，则校验第一升级程序的数据是否完整；当第一升级程序的数据完整时，由第一升级程序对应用程序进行升级；当第一升级程序的数据不完整时，由第二升级程序对应用程序和第一升级程序进行升级。
当APP或loader1数据不完整时，也可以触发升级；不必在APP获取升级信息才触发，确保APP和loader1一旦出现故障，能够立即进行升级更新，降低了机顶盒软件的故障率。
本实施例提供的应用程序升级方法，通过使用两个loader来确保对APP进行正常的升级，如果发现升级方法或触发升级模式被破解后，可以通过loader2 来更新loader1，从而修改机顶盒的升级方式，提高了loader和APP升级的安全性。
可选地，在上述S20和S70中，由第一升级程序对应用程序进行升级的步骤可以包括：
第一升级程序通过OTA下载应用程序的升级数据，检测应用程序的升级数据是否下载成功；
若应用程序的升级数据下载不成功，则提示升级失败，清除应用程序的升级标识信息，如APP的升级标志位，也即清除上述第一升级标志位的值，并重启机顶盒；
若应用程序的升级数据下载成功，则用应用程序的升级数据更新应用程序对应闪存区域的数据；当应用程序对应闪存区域的数据更新成功时，清除应用程序的升级标识信息，即清除上述第一升级标志位的值，并重启机顶盒；当应用程序对应闪存区域的数据更新失败时，重启机顶盒，在S70可知，在重启后由于应用程序的数据不完整，loader1或loader1会对应用程序重新升级。
可选地，在上述S20和S70中，由第二升级程序对应用程序进行升级的步骤可以包括：
第二升级程序通过OTA下载应用程序的升级数据，检测应用程序的升级数据是否下载成功；
若应用程序的升级数据下载不成功，则提示升级失败，清除应用程序的升级标识信息如APP的升级标志位，也即清楚上述第一升级标志位的值，并重启机顶盒；
若应用程序的升级数据下载成功，则更新应用程序对应闪存区域的数据；在应用程序对应闪存区域的数据更新成功时，清除应用程序的升级标识信息并 重启机顶盒；在应用程序对应闪存区域的数据更新失败时，重启机顶盒。由S70可知，在重启后由于应用程序的数据不完整，loader1或loader2会对应用程序重新进行升级。其中，清除应用程序的升级标识信息可以是清除应用程序的升级标志位的值，也可以是修改应用程序的升级标志位的值。应用程序的升级数据下载不成功，通常是由于升级数据的提供方数据存在问题，清除应用程序的升级数据标志位，可以防止每次机顶盒开机时均进行应用程序的更新，影响应用程序的运行。
可选地，上述S40和S70中，由第二升级程序对第一升级程序进行升级的步骤可以包括：
第二升级程序通过OTA下载第一升级程序的升级数据，检测第一升级程序的升级数据是否下载成功；若第一升级程序的升级数据下载不成功，则提示升级失败，清除第一升级程序的升级标识信息，如loader1升级标志位，即上述第二升级标志位并重启机顶盒；
其中，清除第一升级程序的升级标识信息可以是清除第一升级程序的升级标志位的值，也可以是修改第一升级程序的升级标志位的值。第一升级程序的升级数据下载不成功，通常是由于升级数据的提供方数据存在问题，清除第一升级程序的升级数据标志位，可以防止每次机顶盒开机时均进行第一升级程序的更新，占用机顶盒的数据处理资源。
若第一升级程序的升级数据下载成功，则更新第一升级程序对应闪存区域的数据；在第一升级程序对应闪存区域的数据更新成功时，清除第一升级程序的升级标识信息，即清除上述第二升级标志位的值，并重启机顶盒；在第一升级程序对应闪存区域的数据更新失败时，重启机顶盒。由S70可知，在重启后由于第一升级程序的数据不完整，loader2会对loader1重新进行升级。
基于上述实施例提供的机顶盒的应用程序升级方法，本实施例还提供一种机顶盒，所述机顶盒包括机顶盒的应用程序升级系统。参考图2，本实施例提供的应用程序升级系统可以包括BOOT程序10、第一升级程序20、第二升级程序30和多个应用程序40。
所述第一升级程序20，设置为对应用程序进行升级。
所述第二升级程序30，设置为对第一升级程序或应用程序进行升级。
BOOT程序，设置为在机顶盒开机后，检测是否对应用程序进行升级；当对所述应用程序进行升级时，校验第一升级程序的数据是否完整；当第一升级程序的数据完整时，启动第一升级程序对应用程序进行升级；当第一升级程序的数据不完整时，启动第二升级程序对应用程序进行升级。
可选地，所述BOOT程序还设置为：当不对应用程序进行升级时，则判断检测是否对第一升级程序进行升级；当对第一升级程序进行升级时，启动第二升级程序对第一升级程序进行升级。
可选地，所述BOOT程序还设置为：
在由第二升级程序对第一升级程序进行升级之后，校验应用程序的数据是否完整；当应用程序的数据完整时，则跳转到应用程序；以及当应用程序的数据不完整时，则启动升级后的第一升级程序对所述应用程序进行升级。
可选地，所述BOOT程序还设置为：当不对第一升级程序进行升级时，则校验应用程序的数据是否完整；当应用程序的数据完整时，启动应用程序；当应用程序的数据不完整时，校验第一升级程序的数据是否完整；当第一升级程序的数据完整时，启动第一升级程序对应用程序进行升级，当第一升级程序的数据不完整时，启动第二升级程序对应用程序和第一升级程序进行升级。
可选地，所述第二升级程序设置在一次性可编程OTP寄存器中。
可选地，所述第一升级程序是设置为：
通过OTA下载应用程序的升级数据，检测应用程序的升级数据是否下载成功；当应用程序的升级数据下载不成功时，提示升级失败，清除应用程序的升级标识信息并重启机顶盒；以及
当应用程序的升级数据下载成功时，用应用程序的升级数据更新应用程序对应闪存区域的数据；当更新成功时，清除应用程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
可选地，所述第二升级程是设置为：
通过OTA下载应用程序的升级数据，检测应用程序的升级数据是否下载成功；当应用程序的升级数据下载不成功时，提示升级失败，清除应用程序的升级标识信息并重启机顶盒；以及在应用程序的升级数据下载成功时，用应用程序的升级数据更新应用程序对应闪存区域的数据；在应用程序对应闪存区域的数据更新成功时，清除应用程序的升级标识信息并重启机顶盒；在应用程序对应闪存区域的数据更新失败时，重启机顶盒。
可选地，所述第二升级程序还设置为：
通过OTA下载第一升级程序的升级数据，检测第一升级程序的升级数据是否下载成功；当第一升级程序的升级数据下载不成功时，提示升级失败，清除第一升级程序的升级标识信息并重启机顶盒；以及当第一升级程序的升级数据下载成功时，用第一升级程序的升级数据更新第一升级程序闪存区域的数据；当第一升级程序对应闪存区域的数据更新成功时，清除第一升级程序的升级标识信息并重启机顶盒；当第一升级程序对应闪存区域的数据更新失败时，重启机顶盒。本实施例还提供一种计算机可读存储介质，存储有计算机可执行指令，所述计算机可执行指令用于执行上述任意一种方法。
如图3所示，是本实施例提供的一种机顶盒的硬件结构示意图，如图3所示，该机顶盒包括：处理器(processor)310和存储器(memory)320；还可以包括通信接口(Communications Interface)330和总线340。
其中，处理器310、存储器320和通信接口330可以通过总线340完成相互间的通信。通信接口330可以用于信息传输。处理器310可以调用存储器320中的逻辑指令，以执行上述实施例的任意一种方法。
存储器320可以包括存储程序区和存储数据区，存储程序区可以存储操作系统和至少一个功能所需的应用程序。存储数据区可以存储根据机顶盒的使用所创建的数据等。此外，存储器可以包括，例如，随机存取存储器的易失性存储器，还可以包括非易失性存储器。例如至少一个磁盘存储器件、闪存器件或者其他非暂态固态存储器件。
此外，在上述存储器320中的逻辑指令可以通过软件功能单元的形式实现并作为独立的产品销售或使用时，该逻辑指令可以存储在一个计算机可读取存储介质中。本公开的技术方案可以以计算机软件产品的形式体现出来，该计算机软件产品可以存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行本实施例所述方法的全部或部分步骤。
存储介质可以是非暂态存储介质，也可以是暂态存储介质。非暂态存储介质可以包括：U盘、移动硬盘、只读存储器(Read-Only Memory，ROM)、随机存取存储器(Random Access Memory，RAM)、磁碟或者光盘等多种可以存储程序代码的介质。
上述实施例方法中的全部或部分流程，是可以通过计算机程序来指示相关的硬件完成的，该程序可存储于一个非暂态计算机可读存储介质中，该程序被 执行时，可包括如上述方法的实施例的流程。
工业实用性
本公开提供一种机顶盒的应用程序升级方法、系统及机顶盒，可以实现在第一升级程序被破解或者与其他厂商冲突的情况下，确保应用程序安全、及时的升级，并且能够确保第一升级程序的及时更新，提高了破解难度，保障了升级程序的安全。

Claims (16)

  1. 一种机顶盒的应用程序升级方法，包括：
    机顶盒开机后，判断是否对所述机顶盒的应用程序进行升级；以及
    当对所述应用程序进行升级时，则校验第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，由第一升级程序对所述应用程序进行升级；当所述第一升级程序的数据不完整时，由第二升级程序对所述应用程序进行升级。
  2. 根据权利要求1所述的方法，其中，判断是否对所述应用程序进行升级之后，还包括：
    当不对所述应用程序进行升级时，则判断是否对所述第一升级程序进行升级；以及
    当对所述第一升级程序进行升级时，则由所述第二升级程序对第一升级程序进行升级。
  3. 根据权利要求2所述的方法，其中，判断是否对所述第一升级程序进行升级之后，还包括：
    当不对所述第一升级程序进行升级时，则校验所述应用程序的数据是否完整；
    当所述应用程序的数据完整时，则跳转到所述应用程序；以及
    当所述应用程序的数据不完整时，则校验所述第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，由所述第一升级程序对应用程序进行升级；当所述第一升级程序的数据不完整时，由所述第二升级程序对所述应用程序和所述第一升级程序进行升级。
  4. 根据权利要求1-3任一项所述的方法，其中，所述第二升级程序设置在一次性可编程OTP寄存器中。
  5. 根据权利要求1-3任一项所述的方法，其中，所述由第一升级程序对所述应用程序进行升级，包括：
    所述第一升级程序通过空中下载技术OTA下载所述应用程序的升级数据，并检测所述应用程序的升级数据是否下载成功；
    当所述应用程序的升级数据下载不成功时，则提示升级失败，清除所述应用程序的升级标识信息并重启机顶盒；以及
    当所述应用程序的升级数据下载成功时，则用所述应用程序的升级数据更新所述应用程序对应闪存区域的数据；当更新成功时，清除应用程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
  6. 根据权利要求2或3所述的方法，其中，所述由所述第二升级程序对所述第一升级程序进行升级包括：
    所述第二升级程序通过OTA下载所述第一升级程序的升级数据，并检测所述第一升级程序的升级数据是否下载成功；
    当所述第一升级程序的升级数据下载不成功时，则提示升级失败，清除第一升级程序的升级标识信息并重启机顶盒；以及
    当第一升级程序的升级数据下载成功时，则用所述第一升级程序的升级数据更新所述第一升级程序对应闪存区域的数据；当更新成功时，清除第一升级程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
  7. 根据权利要求2所述的方法，其中，由所述第二升级程序对第一升级程序进行升级之后，还包括：
    校验所述应用程序的数据是否完整；
    当所述应用程序的数据完整时，则跳转到所述应用程序；以及
    当所述应用程序的数据不完整时，由升级后的第一升级程序对所述应用程 序进行升级。
  8. 一种机顶盒的应用程序升级系统，包括：
    第一升级程序，设置为对应用程序进行升级；
    第二升级程序，设置为对第一升级程序或应用程序进行升级；以及
    引导BOOT程序，设置为在机顶盒开机后，检测是否对应用程序进行升级；当对所述应用程序进行升级时，校验第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，启动第一升级程序对所述应用程序进行升级；当所述第一升级程序的数据不完整时，启动第二升级程序对所述应用程序进行升级。
  9. 根据权利要求8所述的系统，其中，所述BOOT程序还设置为：当不对应用程序进行升级时，则判断检测是否对所述第一升级程序进行升级；当对所述第一升级程序进行升级时，启动所述第二升级程序对第一升级程序进行升级。
  10. 根据权利要求9所述的系统，其中，所述BOOT程序还设置为：
    当不对第一升级程序进行升级时，则校验所述应用程序的数据是否完整；当所述应用程序的数据完整时，启动应用程序；当所述应用程序的数据不完整时，校验所述第一升级程序的数据是否完整；当所述第一升级程序的数据完整时，启动所述第一升级程序对所述应用程序进行升级，当所述第一升级程序的数据不完整时，启动所述第二升级程序对所述应用程序和所述第一升级程序进行升级。
  11. 根据权利要求8-10任一项所述的系统，其中，所述第二升级程序设置在一次性可编程OTP寄存器中。
  12. 根据权利要求8-10任一项所述的系统，其中，所述第一升级程序是设置为：
    通过OTA下载所述应用程序的升级数据，检测所述应用程序的升级数据是 否下载成功；当所述应用程序的升级数据下载不成功时，提示升级失败，清除应用程序的升级标识信息并重启机顶盒；以及
    当所述应用程序的升级数据下载成功时，用所述应用程序的升级数据更新所述应用程序对应闪存区域的数据；当更新成功时，清除应用程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
  13. 根据权利要求9或10所述的系统，其中，所述第二升级程序是设置为：
    通过OTA下载所述第一升级程序的升级数据，检测所述第一升级程序的升级数据是否下载成功；
    当所述第一升级程序的升级数据下载不成功时，提示升级失败，清除第一升级程序的升级标识信息并重启机顶盒；以及
    当所述第一升级程序的升级数据下载成功时，用所述第一升级程序的升级数据更新所述第一升级程序闪存区域的数据；当更新成功时，清除第一升级程序的升级标识信息并重启机顶盒；当更新失败时，重启机顶盒。
  14. 根据权利要求9所述的系统，其中，所述BOOT程序还设置为：
    在由所述第二升级程序对第一升级程序进行升级之后，校验所述应用程序的数据是否完整；当所述应用程序的数据完整时，则跳转到所述应用程序；以及当所述应用程序的数据不完整时，则启动升级后的第一升级程序对所述应用程序进行升级。
  15. 一种机顶盒，包括如权利要求8-14任一项所述的机顶盒的应用程序升级系统。
  16. 一种计算机可读存储介质，存储有计算机可行指令，所述计算机可执行指令用于执行权利要求1-7任一项所述的方法。
PCT/CN2017/095444 2016-08-01 2017-08-01 机顶盒的应用程序升级方法、系统及机顶盒 WO2018024198A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610618057.7A CN106303709B (zh) 2016-08-01 2016-08-01 一种机顶盒及其应用程序升级方法、系统
CN201610618057.7 2016-08-01

Publications (1)

Publication Number Publication Date
WO2018024198A1 true WO2018024198A1 (zh) 2018-02-08

Family

ID=57663656

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/095444 WO2018024198A1 (zh) 2016-08-01 2017-08-01 机顶盒的应用程序升级方法、系统及机顶盒

Country Status (2)

Country Link
CN (1) CN106303709B (zh)
WO (1) WO2018024198A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111199039A (zh) * 2018-11-20 2020-05-26 成都鼎桥通信技术有限公司 应用程序的安全性校验方法、装置及终端设备
CN112667444A (zh) * 2020-12-31 2021-04-16 深圳康佳电子科技有限公司 一种系统升级方法、存储介质及终端设备
CN113031996A (zh) * 2021-03-17 2021-06-25 歌尔科技有限公司 一种电子设备的ota升级方法、装置、控制终端及介质

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106303709B (zh) * 2016-08-01 2019-04-16 深圳市创维软件有限公司 一种机顶盒及其应用程序升级方法、系统
CN108664256A (zh) * 2017-03-28 2018-10-16 宁德时代新能源科技股份有限公司 系统的固件更新方法、装置和电池管理系统
CN109542480A (zh) * 2018-11-16 2019-03-29 深圳市邻友通科技发展有限公司 美甲打印装置的操作系统升级方法、装置和介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101714093A (zh) * 2009-12-01 2010-05-26 福建新大陆通信科技有限公司 机顶盒的三段式双备份Loader升级方法
CN101719072A (zh) * 2009-11-23 2010-06-02 青岛海信宽带多媒体技术有限公司 嵌入式终端设备软件升级方法及升级装置
CN102012831A (zh) * 2010-12-08 2011-04-13 四川金网通电子科技有限公司 基于Linux平台的OTA升级方法
CN103186390A (zh) * 2011-12-29 2013-07-03 中国移动通信集团公司 家庭网关及其软件升级方法
US20140223160A1 (en) * 2013-02-04 2014-08-07 Samsung Electronics Co., Ltd. Electronic device and firmware upgrading method thereof
CN106303709A (zh) * 2016-08-01 2017-01-04 深圳市创维软件有限公司 一种机顶盒及其应用程序升级方法、系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101719072A (zh) * 2009-11-23 2010-06-02 青岛海信宽带多媒体技术有限公司 嵌入式终端设备软件升级方法及升级装置
CN101714093A (zh) * 2009-12-01 2010-05-26 福建新大陆通信科技有限公司 机顶盒的三段式双备份Loader升级方法
CN102012831A (zh) * 2010-12-08 2011-04-13 四川金网通电子科技有限公司 基于Linux平台的OTA升级方法
CN103186390A (zh) * 2011-12-29 2013-07-03 中国移动通信集团公司 家庭网关及其软件升级方法
US20140223160A1 (en) * 2013-02-04 2014-08-07 Samsung Electronics Co., Ltd. Electronic device and firmware upgrading method thereof
CN106303709A (zh) * 2016-08-01 2017-01-04 深圳市创维软件有限公司 一种机顶盒及其应用程序升级方法、系统

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111199039A (zh) * 2018-11-20 2020-05-26 成都鼎桥通信技术有限公司 应用程序的安全性校验方法、装置及终端设备
CN112667444A (zh) * 2020-12-31 2021-04-16 深圳康佳电子科技有限公司 一种系统升级方法、存储介质及终端设备
CN113031996A (zh) * 2021-03-17 2021-06-25 歌尔科技有限公司 一种电子设备的ota升级方法、装置、控制终端及介质

Also Published As

Publication number Publication date
CN106303709B (zh) 2019-04-16
CN106303709A (zh) 2017-01-04

Similar Documents

Publication Publication Date Title
WO2018024198A1 (zh) 机顶盒的应用程序升级方法、系统及机顶盒
WO2017067448A1 (zh) 一种无线固件升级方法、系统及计算机存储介质
KR100506203B1 (ko) 부팅 및 부트 코드 업데이트 방법 및 시스템
CN109062598B (zh) 一种安全的ota升级方法及系统
US8874892B1 (en) Assessing BIOS information prior to reversion
CN107783776B (zh) 固件升级包的处理方法及装置、电子设备
CN106325929B (zh) 一种固件升级方法、固件升级装置、冰箱和服务端
US10437580B2 (en) Software updating methods and systems
US9928059B1 (en) Automated deployment of a multi-version application in a network-based computing environment
EP2962243A1 (en) A method for software anti-rollback recovery
CN106775610B (zh) 一种电子设备启动方法及一种电子设备
WO2016078060A1 (zh) 用于多系统终端的系统升级方法、升级装置和终端
TW201621647A (zh) 作業系統更新方法
CN110597545B (zh) 一种基于ota组件的热补丁智能升级方法及系统
WO2015154538A1 (zh) 存储器的启动方法及装置
US20170185311A1 (en) Data Processing Method and Smart Device
CN106775674B (zh) 一种基于通用引导加载程序的设备及其启动方法
CN106156626B (zh) 一种系统安全升级的方法和装置
US20130080751A1 (en) Method and device for updating bios program for computer system
CN113626059B (zh) 系统升级方法、摄像机及计算机可读存储介质
WO2021012170A1 (zh) 固件启动方法、设备及计算机可读存储介质
CN110659052B (zh) 网络设备中系统软件的更新方法、系统及可读存储介质
US11768669B2 (en) Installing application program code on a vehicle control system
CN114282205A (zh) 固件启动方法及装置、计算机可读存储介质
WO2016127587A1 (zh) 一种实现软件版本升级的方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17836380

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 04/07/2019)

122 Ep: pct application non-entry in european phase

Ref document number: 17836380

Country of ref document: EP

Kind code of ref document: A1