WO2020042778A1

WO2020042778A1 - Firmware upgrade method and device

Info

Publication number: WO2020042778A1
Application number: PCT/CN2019/095580
Authority: WO
Inventors: 黄凯明; 孙健康; 王林青; 邹启蒙; 姚四海; 曾晓东; 林锋
Original assignee: 阿里巴巴集团控股有限公司
Priority date: 2018-08-27
Filing date: 2019-07-11
Publication date: 2020-03-05
Also published as: CN111832013A; TW202009778A; TWI709056B; CN109214168A; CN109214168B

Abstract

Provided are a firmware upgrade method and device in embodiments of the description, wherein the method comprises: obtaining, by a server, a first firmware file, wherein the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key; encrypting the first firmware file with a second key to obtain a second firmware file; checking the second firmware file by using a preset check algorithm to obtain a first check value; sending a firmware upgrade instruction to the terminal device, wherein the firmware upgrade instruction is used for instructing the terminal device to upgrade the firmware, and the firmware upgrade instruction carries a download address of the second firmware file, the second key and the first check value. Hence, in the embodiments of the description, a new firmware file (equivalent to a source firmware file) developed by a developer is encrypted and checked for many times, to ensure that the contents of the firmware file are not cracked and tampered during firmware upgrading, and thus the security is high.

Description

Method and device for upgrading firmware

Technical field

The present application relates to the field of electronic technology, and in particular, to a method and a device for upgrading firmware.

Background technique

Firmware refers to the device "driver" stored inside the device, which is responsible for the most basic and lowest-level work of the operating system. Through the firmware, the operating system can achieve the operation of a specific machine in accordance with the standard device driver. It can be seen that among hardware devices, firmware is the soul of hardware devices and determines the functions and performance of hardware devices.

To fix product defects, meet changing needs and new features, and shorten product cycles, the device's firmware is upgraded. At present, in the process of upgrading the firmware, the confidentiality of related firmware files is low, and it is easy to be tampered or cracked, and there is a large security risk.

In order to solve the above technical problems, it is necessary to propose a highly secure firmware upgrade method.

Summary of the Invention

The purpose of the embodiments of this specification is to provide a method and a device for upgrading firmware. The embodiments of this specification are implemented as follows:

In a first aspect, a method for upgrading firmware is provided, which is applied to a server. The method includes:

Obtaining a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

Encrypting the first firmware file by using a second key to obtain a second firmware file;

Verifying the second firmware file by using a preset verification algorithm to obtain a first verification value;

Sending a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file, the second key, and the First check value.

In a second aspect, a firmware upgrade method is provided, which is applied to a terminal device, and the method includes:

Receiving a firmware upgrade instruction sent by a server, the firmware upgrade instruction carrying a download address of a second firmware file, a second key, and a first check value, where the second firmware file uses a second key to pair the first The firmware file is encrypted, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first check value is obtained by performing a preset verification algorithm on the second firmware file. The first key obtained by verification is a private key;

Obtaining the second firmware file according to the download address of the second firmware file;

Verifying the second firmware file by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, the second firmware file is decrypted by using the second key to obtain the first firmware file, and a pre-stored third firmware file is used. Decrypt the first firmware file with a key to obtain the source firmware file, and the third key is a public key corresponding to the first key;

Use the source firmware file to perform firmware upgrade on the terminal device.

According to a third aspect, a firmware upgrade device is provided and applied to a server. The device includes:

An obtaining module, configured to obtain a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

An encryption module, configured to encrypt the first firmware file by using a second key to obtain a second firmware file;

A first verification module, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value;

A sending module is configured to send a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file and the second The key and the first check value.

According to a fourth aspect, a firmware upgrade device is provided and is applied to a terminal device. The device includes:

An instruction receiving module is configured to receive a firmware upgrade instruction sent by a server. The firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value. The second firmware file uses the first firmware file. The two keys are obtained by encrypting the first firmware file. The first firmware file is obtained by encrypting the source firmware file by using the first key. The first verification value is obtained by using a preset verification algorithm. The second firmware file is obtained through verification, and the first key is a private key;

A downloading module, configured to obtain the second firmware file according to the download address of the second firmware file;

A second verification module, configured to verify the second firmware file by using the preset verification algorithm to obtain a second verification value;

A decryption module, configured to decrypt the second firmware file by using the second key when the second check value matches the first check value to obtain the first firmware file, And decrypting the first firmware file by using a pre-stored third key to obtain the source firmware file, where the third key is a public key corresponding to the first key;

An upgrade module is configured to use the source firmware file to upgrade the firmware of the terminal device.

In a fifth aspect, an electronic device is provided, including:

Processor; and

A memory arranged to store computer-executable instructions that, when executed, cause the processor to perform the following operations:

According to a sixth aspect, an electronic device is provided, including:

Processor; and

According to a seventh aspect, a computer storage medium is provided. The computer-readable storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including a plurality of application programs, cause the electronic The device does the following:

According to an eighth aspect, a computer storage medium is provided. The computer-readable storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including multiple application programs, cause the electronic The device does the following:

Receiving a firmware upgrade instruction sent by a server, where the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value; The firmware file is encrypted, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first check value is obtained by performing a preset verification algorithm on the second firmware file. The first key obtained by verification is a private key;

As can be seen from the technical solutions provided by the embodiments of the present specification, in the embodiments of the present specification, the new firmware file (that is, the source firmware file) developed by the developer is encrypted and verified multiple times to ensure the firmware file during the firmware upgrade process. The content is not cracked and tampered with high security.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly explain the embodiments of the present specification or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are merely These are some of the embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without paying creative labor.

FIG. 1 is an application scenario diagram of a firmware upgrade method according to an embodiment of the present specification; FIG.

2 is a flowchart of a firmware upgrade method according to an embodiment of the present specification;

3 is a flowchart of a firmware upgrade method according to another embodiment of the present specification;

4 is a schematic structural diagram of a firmware upgrade device according to an embodiment of the present specification;

5 is a schematic structural diagram of a firmware upgrade device according to another embodiment of the present specification;

6 is a schematic structural diagram of an electronic device according to an embodiment of the present specification;

FIG. 7 is a schematic structural diagram of an electronic device according to another embodiment of the present specification.

detailed description

In order to enable those skilled in the art to better understand the technical solutions in the present specification, the technical solutions in the embodiments of the present specification will be clearly and completely described with reference to the accompanying drawings in the embodiments of the present specification. Obviously, the described The examples are only a part of the examples of this specification, but not all the examples. Based on the embodiments in this specification, all other embodiments obtained by a person of ordinary skill in the art without creative efforts should fall within the protection scope of this specification.

The embodiments of the present specification provide a method and a device for upgrading firmware.

In order to facilitate understanding, the following first introduces some concepts and application scenarios involved in the embodiments of this specification.

Over-the-air (OTA) technology: refers to the use of a variety of over-the-air transmission methods (including not limited to WiFi, ZigBee, BLE, etc.) to distribute resources or configuration upgrades to embedded terminal devices, enabling terminal devices to perform automatic Update the upgraded technology. At present, the firmware upgrade of terminal equipment is mainly realized through OTA.

Message Queue Telemetry Transmission (MQTT): It is an instant messaging protocol developed by IBM and belongs to a lightweight transmission protocol.

Asymmetric encryption: Asymmetric encryption algorithm is a kind of key confidentiality method, involving public key and private key. Among them, public key and private key are a pair. If you use the private key to encrypt data, only It can be decrypted with the corresponding public key; if the data is encrypted with the public key, it can only be decrypted with the corresponding private key.

Symmetric encryption: A symmetric encryption algorithm is a method of key confidentiality. It uses single-key encryption. The same key can be used for data encryption and decryption at the same time.

Digital digest: A digital digest is a message of any length into a fixed-length short message. It is similar to a function whose argument is a message, that is, a hash function. The digital digest uses a one-way hash function to "digest" the plaintext that needs to be encrypted into a series of ciphertexts of fixed length (for example, 128 bits). This series of ciphertexts is also called digital fingerprints. It has a fixed length, and different The result of ciphertext is always different, and the abstract of the same plaintext must be consistent.

BootLoader: It is the first piece of code that the embedded system executes after power-on. After it completes the initialization of the CPU and related hardware, it loads the operating system image or solidified embedded application into memory and then Jump to the space where the operating system is located and start the operating system.

Application scenarios of the technical solutions of the embodiments of the present specification: The application scenarios include: a development environment, a management center, a server, and a terminal device; wherein a developer develops a firmware file in the development environment, and the firmware file developed by the developer is called "source firmware" File ", the source firmware file is used for the firmware upgrade of the terminal device; the management center is used to store and version information management of the source firmware file developed by the developer. After the developer develops a new source firmware file, the management center will update the new The source firmware file is entered into the management center. In order to ensure the legitimacy of the source firmware file, the management center will asymmetrically encrypt the new source firmware and provide the asymmetrically encrypted firmware file to the server. After a series of processing of the firmware file from the management center, the download address of the processed firmware file is provided to the terminal device; the terminal device downloads the firmware file according to the firmware file download address from the server, and verifies the downloaded firmware file , Decryption, if the check passes, and the decryption is successful, then Source files to obtain the firmware, the firmware file using the source terminal of the firmware upgrade.

Next, a method for upgrading firmware provided by an embodiment of this specification is described.

FIG. 2 is a flowchart of a firmware upgrade method according to an embodiment of the present specification. The method is applied to a server. As shown in FIG. 2, the method may include the following steps: step 202, step 204, step 206, and step 208, where ,

In step 202, a first firmware file is obtained, where the first firmware file is obtained by encrypting the source firmware file with a first key, and the first key is a private key.

In the embodiment of the present specification, the source firmware file is a firmware file developed by a developer in a development environment, and the source firmware file is a non-encrypted file.

In the embodiment of this specification, after a developer develops (or compiles) a new source firmware file in a development environment, it will be entered into the management center for storage, and the management center will asymmetrically encrypt the source firmware file to obtain the The symmetrically encrypted firmware file is the first firmware file. Specifically, the management center may use the private key of the RSA encryption algorithm to encrypt the source firmware file to obtain the first firmware file. Correspondingly, the server obtains the first firmware file from the management center.

In step 204, the first firmware file is encrypted by using the second key to obtain a second firmware file.

In the embodiment of the present specification, in order to avoid the leakage of data and business logic of the firmware file during transmission, the server encrypts the first firmware file. Considering that the AES encryption algorithm has the advantages of fast operation speed, high security, and low resource consumption, it may be preferred to use the AES encryption algorithm to encrypt the first firmware. At this time, the second key is the AES key.

In step 206, the second firmware file is verified by using a preset verification algorithm to obtain a first verification value.

In the embodiment of this specification, to ensure the security of the firmware upgrade process, the server verifies the second firmware file. The verification algorithm may include: SHA256 verification algorithm, SHA128 verification algorithm, or MD5 verification algorithm. Specifically, when the verification algorithm is a SHA256 verification algorithm, the first verification value is a 256-bit string; specifically, when the verification algorithm is a SHA128 verification algorithm, the first verification value is a 128-bit character. Specifically, when the verification algorithm is an MD5 verification algorithm, the first verification value is a 128-bit character string.

In step 208, a firmware upgrade instruction is sent to the terminal device. The firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade. The firmware upgrade instruction carries the download address of the second firmware file, the second key, and the first check value. .

In the embodiment of the present specification, when it is detected that the firmware version in the terminal device is lower than the version of the source firmware file, a firmware upgrade instruction is sent to the terminal device.

Considering that the amount of data carried in the firmware upgrade instruction is relatively small, in the embodiment of the present specification, the firmware upgrade instruction may be sent to the terminal device through a lightweight transmission protocol; wherein the lightweight transmission protocol may include: MQTT protocol or CoAP protocol .

In the embodiment of the present specification, the server can receive status information reported by the terminal device, where the status information may include at least one of the following: firmware version information and firmware installation progress information, and the firmware version information is used to determine whether the terminal device is A firmware upgrade is required.

In the embodiment of this specification, if an error occurs in the terminal device during the firmware upgrade process, the server can locate the error according to the installation progress information of the firmware.

In the embodiment of this specification, if the firmware upgrade of the terminal device fails, the server may issue a firmware upgrade instruction again when the terminal device restarts.

It can be seen from the above embodiment that in this embodiment, the new firmware file (ie, the source firmware file) developed by the developer is encrypted and verified multiple times to ensure that the content of the firmware file is not cracked and tampered during the firmware upgrade , Higher security.

FIG. 3 is a flowchart of a firmware upgrade method according to another embodiment of the present specification. The method is applied to a terminal device. As shown in FIG. 3, the method may include the following steps: step 302, step 304, step 306, step 308, and Step 310, wherein

In step 302, a firmware upgrade instruction sent by a server is received, wherein the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value, and the second firmware file uses the second key The first firmware file is encrypted. The first firmware file is obtained by encrypting the source firmware file with a first key. The first verification value is obtained by verifying the second firmware file with a preset verification algorithm. Yes, the first key is a private key.

In step 304, a second firmware file is acquired according to the download address of the second firmware file.

In the embodiment of the present specification, the legality of the download address of the firmware file is verified by means of HTTPS certificate authentication, so as to ensure that the download address and check value of the firmware file in the firmware upgrade instruction have not been tampered with. Accordingly, the above step 304 is specific. It can include the following steps:

Obtaining a digital certificate corresponding to the download address of the second firmware file;

Determine whether the digital certificate is in the preset white list. If the digital certificate is in the preset white list, obtain the second firmware file from the download address of the second firmware file, where the digital certificate in the preset white list is a valid digital certificate. .

In the embodiment of the present specification, the certificate corresponding to the download address of the second firmware file can be obtained, and the obtained certificate is verified through the root certificate of the legal download address stored in advance; if the verification is passed, the download address of the second firmware file is obtained. Obtain a second firmware file. Specifically, the root certificate of the legal download address is embedded in the terminal device. When the firmware file needs to be obtained from the download address (that is, communication with the server is required), the host (that is, the server) is obtained through the host domain name included in the download address. ) Certificate, use the preset verification algorithm and the embedded root certificate to verify the host ’s certificate. If the verification is successful, it indicates that the host is legitimate. At this time, download the corresponding firmware file from the download address. If the verification fails, , It means that the host is illegal, and the corresponding firmware file is not downloaded from the download address at this time.

In step 306, the second firmware file is verified by using a preset verification algorithm to obtain a second verification value.

In the embodiment of this specification, in order to ensure the legality of the firmware file, the terminal device checks the downloaded firmware file to obtain a check value, and compares the check value with the check value carried in the firmware upgrade instruction. To determine the legitimacy of the firmware file; if the two match (that is, the same), the firmware file is legal and has not been tampered with; if the two do not match (that is, the same), the firmware file is Illegal, has been tampered with, in this case, the subsequent upgrade operation of the firmware file is no longer performed.

In step 308, if the second check value matches the first check value, the second firmware file is decrypted using the second key to obtain the first firmware file, and the first stored file is used to decrypt the first firmware file. The firmware file is decrypted to obtain the source firmware file, and the third key is a public key corresponding to the first key.

In the embodiment of the present specification, the terminal device stores a public key (ie, a third key) and a private key (ie, a first key) used for firmware file signing in advance.

In the embodiment of the present specification, the downloaded firmware file is decrypted using the key carried in the firmware upgrade instruction to obtain the decrypted firmware file. Because the firmware file decrypted by using the key carried in the firmware upgrade instruction is still an encrypted firmware file, and is a firmware file encrypted with a private key, and the terminal device locally maintains the public key corresponding to the private key, The terminal device can use the corresponding public key to decrypt the aforementioned firmware file. If the decryption fails, it means that the firmware file is illegal and has been tampered with. In this case, the subsequent upgrade operation of the firmware file is no longer performed; if If the decryption is successful, the terminal device is firmware upgraded according to the decrypted firmware file (that is, the source firmware file).

In step 310, the terminal device is firmware upgraded using the source firmware file.

In the embodiment of the present specification, the source firmware file may be written into the flash memory of the terminal device. After the source firmware file is written into the flash memory of the terminal device, the terminal device can be restarted immediately to complete the firmware upgrade; or the terminal device can be restarted to complete the firmware upgrade after a preset time period or when a preset time point is reached.

In the embodiment of the present specification, the flash memory of the terminal device may be encrypted to ensure the security of the data stored in the flash memory. Specifically, if the flash memory of the terminal device is encrypted, when writing data to the flash memory, the flash memory needs to be decrypted first, and then the data is written; and when reading data from the flash memory, the flash memory needs to be decrypted first, and then Read the data.

In the embodiment of the present specification, in order to ensure that the boot loader of the terminal device cannot be tampered with, the fourth key may be used to encrypt the boot loader of the terminal device, and the encrypted boot loader is verified to obtain a third check value; The third verification value is stored in the flash memory of the terminal device, so that when the terminal device is restarted, the BootLoader needs to be verified, and it can be started only after the verification is passed; in this case, the third key can be stored in advance In BootLoader, to ensure the security of the third key. The fourth key may be a 256-bit character string generated after Security Boot is turned on. The character string may be used as an AES key to encrypt the BootLoader, and the third check value may be stored at a position starting at 0x0 in the flash memory.

In the embodiment of the present specification, the terminal device may report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information, and the firmware version information is used to determine whether the terminal device needs to perform Firmware upgrade, firmware installation progress information is used by the server to locate firmware upgrade errors.

It can be seen from the above embodiment that in this embodiment, the new firmware file (that is, the source firmware file) developed by the developer is encrypted and verified multiple times to ensure that the content of the firmware file is not cracked and tampered during the firmware upgrade process. , Higher security.

FIG. 4 is a schematic structural diagram of a firmware upgrade device according to an embodiment of the present specification. The firmware upgrade device is applied to a server. In a software implementation, the firmware upgrade device 400 may include an acquisition module 401, an encryption module 402, A first verification module 403 and a sending module 404, where:

An obtaining module 401 is configured to obtain a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

An encryption module 402, configured to encrypt the first firmware file by using a second key to obtain a second firmware file;

A first verification module 403, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value;

A sending module 404 is configured to send a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file, the first Two keys and the first check value.

Optionally, as an embodiment, the sending module 404 may include:

An instruction sending submodule is configured to send a firmware upgrade instruction to the terminal device through a lightweight transmission protocol.

Optionally, as an embodiment, the second key includes an AES key.

Optionally, as an embodiment, the preset verification algorithm includes: a SHA256 verification algorithm, a SHA128 verification algorithm, or an MD5 verification algorithm.

Optionally, as an embodiment, the firmware upgrading apparatus 400 may further include:

Receiving status information reported by the terminal device, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

5 is a schematic structural diagram of a firmware upgrade apparatus according to another embodiment of the present specification. The firmware upgrade apparatus is applied to a terminal device. In a software implementation, the firmware upgrade apparatus 500 may include an instruction receiving module 501 and a download module. 502, a second verification module 503, a decryption module 504, and an upgrade module 505, where:

An instruction receiving module 501 is configured to receive a firmware upgrade instruction sent by a server, where the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value. The second firmware file is The second key is obtained by encrypting the first firmware file. The first firmware file is obtained by encrypting the source firmware file by using the first key. The first verification value is obtained by using a preset verification algorithm. Obtained by performing verification on the second firmware file, and the first key is a private key;

A downloading module 502, configured to obtain the second firmware file according to the download address of the second firmware file;

A second verification module 503, configured to verify the second firmware file by using the preset verification algorithm to obtain a second verification value;

A decryption module 504, configured to decrypt the second firmware file by using the second key when the second verification value matches the first verification value to obtain the first firmware file. And decrypting the first firmware file by using a pre-stored third key to obtain the source firmware file, where the third key is a public key corresponding to the first key;

An upgrade module 505 is configured to use the source firmware file to upgrade the firmware of the terminal device.

Optionally, as an embodiment, the download module 502 may include:

A certificate obtaining submodule, configured to obtain a certificate corresponding to the download address of the second firmware file;

A verification sub-module for verifying the obtained certificate through a pre-stored root certificate of a legal download address;

The firmware file download sub-module is configured to obtain the second firmware file from a download address of the second firmware file if the verification succeeds.

Optionally, as an embodiment, the firmware upgrading apparatus 500 may further include:

An encryption submodule, configured to use the fourth key to encrypt the BootLoader of the terminal device, and verify the encrypted BootLoader to obtain a third check value;

A storage submodule, configured to store the third check value in a flash memory of the terminal device.

Optionally, as an embodiment, the third key is stored in the BootLoader in advance.

Optionally, as an embodiment, the upgrade module 505 may include:

An upgrade submodule is configured to write the source firmware file into a flash memory of the terminal device.

The reporting module is configured to report status information to the server, the status information includes at least one of the following: firmware version information and firmware installation progress information.

FIG. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present specification. The electronic device may be a server. As shown in FIG. 6, at the hardware level, the electronic device includes a processor, and optionally an internal bus and network Interface, memory. The memory may include a memory, such as a high-speed random access memory (Random-Access Memory, RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory. Of course, the electronic device may also include hardware required for other services.

The processor, network interface and memory can be connected to each other through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, or an EISA (Extended Industry Standard Architecture (Extended Industry Standard Architecture) bus and so on. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only a two-way arrow is used in FIG. 6, but it does not mean that there is only one bus or one type of bus.

Memory for storing programs. Specifically, the program may include program code, where the program code includes a computer operation instruction. The memory may include memory and non-volatile memory, and provide instructions and data to the processor.

The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it to form a firmware upgrade device on a logical level. The processor executes a program stored in the memory, and is specifically used to perform the following operations:

Optionally, as an embodiment, the sending a firmware upgrade instruction to the terminal device includes:

Sending a firmware upgrade instruction to the terminal device through a lightweight transmission protocol.

Optionally, as an embodiment, the second key includes an AES key.

Optionally, as an embodiment, the method further includes:

The method performed by the firmware upgrading apparatus disclosed in the embodiment shown in FIG. 6 of the present specification may be applied to a processor, or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in a processor or an instruction in a form of software. The aforementioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc .; it may also be a digital signal processor (DSP), special integration Circuit (Application Specific Integrated Circuit, ASIC), Field Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps, and logical block diagrams disclosed in the embodiments of this specification can be implemented or executed. A general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in combination with the embodiments of the present specification may be directly embodied as being executed by a hardware decoding processor, or may be executed and completed by using a combination of hardware and software modules in the decoding processor. The software module may be located in a mature storage medium such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, and the like. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the foregoing method in combination with its hardware.

The electronic device can also execute the method in FIG. 2 and implement the functions of the firmware upgrade device in the embodiment shown in FIG. 2, which will not be described in detail in the embodiment of this specification.

FIG. 7 is a schematic structural diagram of an electronic device according to another embodiment of the present specification. The electronic device may be a terminal device. As shown in FIG. 7, at the hardware level, the electronic device includes a processor, and optionally an internal bus, Network interface, storage. The memory may include a memory, such as a high-speed random access memory (Random-Access Memory, RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory. Of course, the electronic device may also include hardware required for other services.

The processor, network interface and memory can be connected to each other through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, or an EISA (Extended Industry Standard Architecture (Extended Industry Standard Architecture) bus and so on. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only a two-way arrow is used in FIG. 7, but it does not mean that there is only one bus or one type of bus.

Optionally, as an embodiment, the obtaining the second firmware file according to the download address of the second firmware file includes:

Obtaining a certificate corresponding to the download address of the second firmware file;

Verify the obtained certificate through the pre-stored root certificate of the legal download address;

If the verification is successful, obtain the second firmware file from the download address of the second firmware file.

Optionally, as an embodiment, the method further includes:

Using a fourth key to encrypt the BootLoader of the terminal device, and verifying the encrypted BootLoader to obtain a third check value;

Storing the third check value in a flash memory of the terminal device.

Optionally, as an embodiment, the using the source firmware file to perform firmware upgrade on the terminal device includes:

Writing the source firmware file into a flash memory of the terminal device.

Optionally, as an embodiment, the method further includes:

Report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information.

The method performed by the firmware upgrading apparatus disclosed in the embodiment shown in FIG. 7 of the present specification may be applied to a processor, or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in a processor or an instruction in a form of software. The aforementioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc .; it may also be a digital signal processor (DSP), special integration Circuit (Application Specific Integrated Circuit, ASIC), Field Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps, and logical block diagrams disclosed in the embodiments of this specification may be implemented or executed. A general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in combination with the embodiments of the present specification may be directly embodied as being executed by a hardware decoding processor, or may be executed and completed by using a combination of hardware and software modules in the decoding processor. The software module may be located in a mature storage medium such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, and the like. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the foregoing method in combination with its hardware.

The electronic device can also execute the method in FIG. 3 and implement the functions of the firmware upgrade device in the embodiment shown in FIG.

An embodiment of the present specification also provides a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, the one or more programs include instructions, and the instructions should be portable electronic devices that include multiple application programs When executed, the portable electronic device can be caused to execute the method in the embodiment shown in FIG. 2, and is specifically configured to execute the following method:

An embodiment of the present specification also provides a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, the one or more programs include instructions, and the instructions should be portable electronic devices that include multiple application programs When executed, the portable electronic device can be caused to execute the method in the embodiment shown in FIG. 3, and is specifically configured to execute the following method:

In short, the above descriptions are merely preferred embodiments of the present specification, and are not intended to limit the protection scope of the present specification. Any modification, equivalent replacement, or improvement made within the spirit and principle of this specification shall be included in the protection scope of this specification.

The system, device, module, or unit described in the foregoing embodiments may be specifically implemented by a computer chip or entity, or a product with a certain function. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or A combination of any of these devices.

Computer-readable media includes both permanent and non-persistent, removable and non-removable media. Information can be stored by any method or technology. Information may be computer-readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), and read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, Magnetic tape cartridges, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media may be used to store information that can be accessed by computing devices. As defined herein, computer-readable media does not include temporary computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the terms "including," "including," or any other variation thereof are intended to encompass non-exclusive inclusion, so that a process, method, product, or device that includes a range of elements includes not only those elements, but also Other elements not explicitly listed, or those that are inherent to such a process, method, product, or device. Without more restrictions, the elements defined by the sentence "including a ..." do not exclude the existence of other identical elements in the process, method, product or equipment including the elements.

Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple. For the relevant part, refer to the description of the method embodiment.

Claims

A firmware upgrade method applied to a server, the method includes:

Obtaining a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

Encrypting the first firmware file by using a second key to obtain a second firmware file;

Verifying the second firmware file by using a preset verification algorithm to obtain a first verification value;

Sending a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file, the second key, and the First check value.
The method according to claim 1, wherein the sending a firmware upgrade instruction to the terminal device comprises:

Sending a firmware upgrade instruction to the terminal device through a lightweight transmission protocol.
The method according to claim 1, the second key comprises: an AES key.
The method according to claim 1, wherein the preset verification algorithm comprises: a SHA256 verification algorithm, a SHA128 verification algorithm, or an MD5 verification algorithm.
The method according to claim 1, further comprising:

Receiving status information reported by the terminal device, where the status information includes at least one of the following: firmware version information and firmware installation progress information.
A firmware upgrade method applied to a terminal device, the method includes:

Receiving a firmware upgrade instruction sent by a server, where the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value; The firmware file is encrypted, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first check value is obtained by performing a preset verification algorithm on the second firmware file. The first key obtained by verification is a private key;

Obtaining the second firmware file according to the download address of the second firmware file;

Verifying the second firmware file by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, the second firmware file is decrypted by using the second key to obtain the first firmware file, and a pre-stored third firmware file is used. Decrypt the first firmware file with a key to obtain the source firmware file, and the third key is a public key corresponding to the first key;

Use the source firmware file to perform firmware upgrade on the terminal device.
The method according to claim 6, wherein the obtaining the second firmware file according to a download address of the second firmware file comprises:

Obtaining a certificate corresponding to the download address of the second firmware file;

Verify the obtained certificate through the pre-stored root certificate of the legal download address;

If the verification is successful, obtain the second firmware file from the download address of the second firmware file.
The method according to claim 6, further comprising:

Using a fourth key to encrypt the boot loader BootLoader of the terminal device, and verify the encrypted BootLoader to obtain a third check value;

Storing the third check value in a flash memory of the terminal device.
The method according to claim 8, wherein the third key is stored in the BootLoader in advance.
The method according to claim 6, wherein the using the source firmware file to upgrade the terminal device firmware comprises:

Writing the source firmware file into a flash memory of the terminal device.
The method according to claim 6, further comprising:

Report status information to the server, where the status information includes at least one of the following: firmware version information and firmware installation progress information.
A firmware upgrade device applied to a server, the device includes:

An obtaining module, configured to obtain a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

An encryption module, configured to encrypt the first firmware file by using a second key to obtain a second firmware file;

A first verification module, configured to verify the second firmware file by using a preset verification algorithm to obtain a first verification value;

A sending module is configured to send a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file and the second The key and the first check value.
A firmware upgrade device applied to a terminal device, the device includes:

An instruction receiving module is configured to receive a firmware upgrade instruction sent by a server. The firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value. The second firmware file uses the first firmware file. The two keys are obtained by encrypting the first firmware file. The first firmware file is obtained by encrypting the source firmware file by using the first key. The first verification value is obtained by using a preset verification algorithm. The second firmware file is obtained through verification, and the first key is a private key;

A downloading module, configured to obtain the second firmware file according to the download address of the second firmware file;

A second verification module, configured to verify the second firmware file by using the preset verification algorithm to obtain a second verification value;

A decryption module, configured to decrypt the second firmware file by using the second key when the second check value matches the first check value to obtain the first firmware file, And decrypting the first firmware file by using a pre-stored third key to obtain the source firmware file, where the third key is a public key corresponding to the first key;

An upgrade module is configured to use the source firmware file to upgrade the firmware of the terminal device.
An electronic device includes:

Processor; and

A memory arranged to store computer-executable instructions that, when executed, cause the processor to perform the following operations:

Obtaining a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

Encrypting the first firmware file by using a second key to obtain a second firmware file;

Verifying the second firmware file by using a preset verification algorithm to obtain a first verification value;

Sending a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file, the second key, and the First check value.
An electronic device includes:

Processor; and

A memory arranged to store computer-executable instructions that, when executed, cause the processor to perform the following operations:

Receiving a firmware upgrade instruction sent by a server, where the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value; The firmware file is encrypted, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first check value is obtained by performing a preset verification algorithm on the second firmware file. The first key obtained by verification is a private key;

Obtaining the second firmware file according to the download address of the second firmware file;

Verifying the second firmware file by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, the second firmware file is decrypted by using the second key to obtain the first firmware file, and a pre-stored third firmware file is used. Decrypt the first firmware file with a key to obtain the source firmware file, and the third key is a public key corresponding to the first key;

Use the source firmware file to perform firmware upgrade on the terminal device.
A computer storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including a plurality of application programs, cause the electronic device to perform the following operations:

Obtaining a first firmware file, where the first firmware file is obtained by encrypting a source firmware file with a first key, and the first key is a private key;

Encrypting the first firmware file by using a second key to obtain a second firmware file;

Verifying the second firmware file by using a preset verification algorithm to obtain a first verification value;

Sending a firmware upgrade instruction to a terminal device, where the firmware upgrade instruction is used to instruct the terminal device to perform a firmware upgrade, and the firmware upgrade instruction carries a download address of the second firmware file, the second key, and the First check value.
A computer storage medium stores one or more programs, and the one or more programs, when executed by an electronic device including a plurality of application programs, cause the electronic device to perform the following operations:

Receiving a firmware upgrade instruction sent by a server, where the firmware upgrade instruction carries a download address of a second firmware file, a second key, and a first check value; The firmware file is encrypted, the first firmware file is obtained by encrypting the source firmware file with a first key, and the first check value is obtained by performing a preset verification algorithm on the second firmware file. The first key obtained by verification is a private key;

Obtaining the second firmware file according to the download address of the second firmware file;

Verifying the second firmware file by using the preset verification algorithm to obtain a second verification value;

If the second check value matches the first check value, the second firmware file is decrypted by using the second key to obtain the first firmware file, and a pre-stored third firmware file is used. Decrypt the first firmware file with a key to obtain the source firmware file, and the third key is a public key corresponding to the first key;

Use the source firmware file to perform firmware upgrade on the terminal device.