WO2021102753A1

WO2021102753A1 - Flash packet encryption method and apparatus, electronic device, and computer storage medium

Info

Publication number: WO2021102753A1
Application number: PCT/CN2019/121328
Authority: WO
Inventors: 郭明强; 张志龙; 尚玉栋; 裴磊
Original assignee: 深圳市欢太科技有限公司; Oppo广东移动通信有限公司
Priority date: 2019-11-27
Filing date: 2019-11-27
Publication date: 2021-06-03
Also published as: CN114424193A

Abstract

A flash packet encryption method and apparatus, an electronic device, and a computer storage medium. The method comprises: encrypting feature data of each partitioned file in a flash packet to obtain encrypted feature data; processing signature data of each partitioned file in the flash packet to obtain encrypted signature data; processing partitioned identification data of each partitioned file in the flash packet to obtain encrypted partitioned identification data; and determining an encrypted flash packet according to the encrypted feature data, the encrypted signature data, and the encrypted partitioned identification data. Whether the flash packet can be installed on a current terminal can be determined by means of an identity identifier containing version information, thereby preventing mixed use of different versions of flash packages while protecting the security of the flash package.

Description

Encryption method, device, electronic equipment and computer storage medium for flashing package

Technical field

This application relates to the field of computer technology, in particular to a method, device, electronic equipment, and computer storage medium for encrypting a flash package.

Background technique

With the development of technology, terminals need to install flashing packages to update the operating system. Due to the diversification of the market, users can be divided into many categories. Different types of users need different versions of flashing packages to obtain operating systems with different permissions. The operator's system is installed on the terminal of ordinary users, which may harm the interests of the operator.

Therefore, it is necessary to encrypt different versions of the flashing package to avoid the above situation. Currently, the commonly used encryption method requires the user to manually enter a preset password for verification, but this is very inconvenient and cannot identify whether the flashing package has been illegally modified.

Summary of the invention

Based on the above problems, this application proposes a flashing package encryption method, device, electronic equipment, and computer storage medium, which can protect the security of the flashing package while preventing the mixing of different versions of the flashing package.

The first aspect of the embodiments of the present application provides a method for encrypting a flashing package, and the method includes:

Encrypting the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

Processing the signature data of each partition file in the flashing package to obtain signature encrypted data, where the signature data is used to represent the version information of the flashing package;

Processing the partition identification data of each partition file in the flashing package to obtain partition identification encrypted data, where the partition identification data is used to indicate the type of each partition file;

The encrypted flashing package is determined according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data.

A second aspect of the embodiments of the present application provides a device for encrypting a flashing package. The device includes a processing unit and a communication unit, wherein:

The processing unit is configured to encrypt the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

A third aspect of the embodiments of the present application provides an electronic device, including a multi-core processor, a communication interface, and a memory. The multi-core processor, the communication interface, and the memory are connected to each other. The memory is used to store a computer program, and the The computer program includes program instructions, and the multi-core processor is configured to invoke the program instructions to execute the method described in any step of the first aspect of the embodiments of the present application.

The fourth aspect of the embodiments of the present application provides a computer storage medium, the computer storage medium stores a computer program, the computer program includes program instructions, and when executed by a processor, the program instructions cause the processor to execute such as The method described in any step of the first aspect of the embodiments of the present application.

A fifth aspect of the embodiments of the present application provides a computer program product, wherein the above-mentioned computer program product includes a non-transitory computer-readable storage medium storing a computer program, and the above-mentioned computer program is operable to cause a computer to execute the computer program Part or all of the steps described in any method of the first aspect. The computer program product may be a software installation package.

By implementing the above application examples, the following beneficial effects can be obtained:

The above flashing package encryption method, device, electronic equipment and computer storage medium, by encrypting the feature data of each partition file in the flashing package to obtain feature encrypted data, the feature data includes any one of the each partition file Fragment; processing the signature data of each partition file in the flashing package to obtain signature encrypted data, the signature data is used to represent the version information of the flashing package; for each partitioning file in the flashing package The partition identification data is processed to obtain partition identification encrypted data, the partition identification data is used to indicate the type of each partition file; determined according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data Encrypted flashing package. The identification code containing the version information can be used to confirm whether the flashing package can be installed on the current terminal, which protects the security of the flashing package while preventing the mixing of different versions of the flashing package.

Description of the drawings

In order to explain the technical solutions of the embodiments of the present invention more clearly, the following will briefly introduce the drawings used in the description of the embodiments. Obviously, the drawings in the following description are some embodiments of the present invention. Ordinary technicians can obtain other drawings based on these drawings without creative work.

FIG. 1 is a schematic diagram of the contents of a flashing package provided by an embodiment of the application;

Figure 2 is a system architecture diagram of a method for encrypting a flashing package provided by an embodiment of the application;

FIG. 3 is a schematic flowchart of a method for encrypting a flashing package provided by an embodiment of the application;

Figure 4 is a schematic structural diagram of an encrypted flashing package provided by an embodiment of the application;

FIG. 5 is a schematic flowchart of another method for encrypting a flashing package provided by an embodiment of the application;

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of this application;

FIG. 7 is a block diagram of structural units of a device for encrypting a flashing package provided by an embodiment of the application.

Detailed ways

In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only These are a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific sequence. In addition, the terms "including" and "having" and any variations of them are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes unlisted steps or units, or optionally also includes Other steps or units inherent to these processes, methods, products or equipment.

Reference to "embodiments" herein means that a specific feature, structure or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art clearly and implicitly understand that the embodiments described herein can be combined with other embodiments.

The electronic devices and terminals involved in the embodiments of this application may include various handheld devices with wireless communication functions, vehicle-mounted devices, wearable devices, computing devices or other processing devices connected to wireless modems, as well as various forms of user equipment (User Equipment, UE), mobile station (Mobile Station, MS), terminal device (terminal device), etc.

At present, as shown in Figure 1, Figure 1 is a schematic diagram of the contents of a flashing package provided by an embodiment of the present application. The flashing package can be an application program used to store firmware codes in the terminal's memory (Read only Memory, ROM). The content is rewritten. Figure 1 includes all the partition files of the flashing package. Here, taking the Android system as an example, all files can be classified into boot boot (Little Kernel, LK) partition files, operating system Linux kernel partition files, and Android system framework partition files And user data partition files, etc., are not listed here. The flashing package in Figure 1 is not encrypted. You can directly modify any partition file in the flashing package. A flashing package with specific permissions may appear. Install it on a user terminal that cannot use the specific authority, such as installing the operator’s version of the flashing package on a common user’s terminal, which will bring losses to the operator.

Based on the above problems, the embodiments of the present application provide a flashing package encryption method, device, electronic equipment, and computer storage medium. The following describes the system architecture of the flashing package encryption method in the embodiment of the application in detail with reference to FIG. 2. FIG. 2 is The system architecture diagram of the flashing package encryption method provided by the application embodiment includes: a user terminal 210 and a server 220. The user terminal 210 can be any electronic device with a network connection function. The server 220 can have a built-in database to perform the flashing package. Encryption processing, and save the encrypted flashing package data in the database. The user terminal 210 can be connected to the server 220 by wired or wireless connection. The server 220 can obtain the identification of the user terminal 210 when decrypting the encrypted flashing package. And it is determined whether the encrypted flashing package can be decrypted and installed on the user terminal 210.

It can be seen that the above system structure can confirm whether the flashing package can be installed on the current terminal through the identification code containing the version information, which can prevent the flashing package of different versions from being mixed while protecting the security of the flashing package.

The following is a detailed description of a flashing package encryption method in an embodiment of this application with reference to Figure 3. Figure 3 is a schematic flow diagram of a flashing package encryption method provided by an embodiment of the application, which specifically includes the following steps:

Step 301: Encrypt the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data.

Wherein, each of the above-mentioned partition files corresponds to a feature data, and the above-mentioned feature data can be any fragment of the partition file. The feature data of the preset address of each partition file in the flashing package can be obtained first, and the above-mentioned preset address It is used to indicate the location of the above-mentioned feature data in the corresponding above-mentioned partition file. For example, a 256KB segment of the header of the partition file can be set as a preset address. At this time, the 256KB data of the header of each partition file is the feature data. .

Among them, the feature data of each partition file can be encrypted by an asymmetric encryption algorithm (RSA algorithm) to obtain a feature encrypted data. Specifically, take the flashing package in Figure 1 as an example for illustration. First, you can create a new ofp Format the empty file, name it rom, that is, rom.ofp file, and then read the 256KB data at the beginning of the boot partition file, and use the RSA algorithm to encrypt the feature encryption data corresponding to the boot partition file and save it to the above rom. In the front part of the ofp file, save the remaining data in the boot partition file except the above-mentioned feature data to the back part of the above-mentioned rom.ofp file. Similarly, the 256KB data of the first part of the operating system Linux kernel partition file can be sequentially saved , The partition files such as the 256KB data of the header of the Android system framework partition file and the 256KB data of the header of the user data partition file are encrypted to obtain the corresponding feature encrypted data, and the aforementioned feature encrypted data are sequentially saved to the aforementioned rom.ofp file, The remaining data except for the encrypted feature data of all the above partition files are also appended and saved to the back of the above rom.ofp file.

The above-mentioned server encrypts the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data. The characteristic data of each partition file is unique, which can avoid confusion between encrypted characteristic data and eliminates the need for partition files All of the data are encrypted, which can greatly improve the efficiency of the encryption step.

Step 302: Process the signature data of each partition file in the flashing package to obtain signature encrypted data.

Wherein, the above-mentioned signature data can be the data that comes with each of the above-mentioned partition files to indicate the source of the flashing package. It should be noted that the above-mentioned signature data is the signature data generated by the RSA algorithm, which can be represented by a character string.

Among them, the signature data of each partition file in the above flashing package can be obtained and combined to obtain a full signature data. Specifically, a full signature file AllSignatureFile can be created, and then the signature data of each partition file can be extracted and combined into A full signature data is saved in the AllSignatureFile file. The AllSignatureFile file can be additionally saved to the back of the rom.ofp file. Then, the full signature data can be encrypted by a hash algorithm to obtain the signature encrypted data, the signature The encrypted data may include version identification information. It should be noted that the above hash algorithm can be the SHA256 algorithm, the hash value used by the SHA256 algorithm is 256 bits, and 256Bit binary data can be obtained through the SHA256 algorithm, that is, 64 characters, and the 64 characters are the aforementioned signature encrypted data , Used to indicate the version information of the flashing package.

The above-mentioned server processes the signature data of each partition file in the flashing package to obtain signature encrypted data, which can encrypt the version information of the judgment flashing package, which can prevent the mixing of different versions of flashing packages.

Step 303: Process the partition identification data of each partition file in the flashing package to obtain the partition identification encrypted data.

Among them, the above-mentioned partition identification data can be a structural variable. Specifically, the partition name, partition offset address, and partition checksum of each partition file in the above-mentioned flashing package can be obtained first; and the partition name and partition of each partition file The offset address and the partition checksum are merged into structure variable data; the structure variable data is encrypted by the RSA algorithm to obtain the partition identification encrypted data. The partition offset address can be used to indicate that the partition file is in rom.ofp The location in the file, the partition checksum can be used to indicate the integrity of the partition file transmission, the structure variable data includes the identification information of each partition file, and the partition identification encrypted data can finally be saved to the database of the server , The decryption path of each partition file can be determined by calling during decryption.

The above-mentioned server processes the partition identification data of each partition file in the flashing package to obtain the encrypted data of the partition identification, which can prevent the partition files in the flashing package from being tampered with, which greatly improves the security of the flashing package.

Step 304: Determine an encrypted flashing package according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data.

Wherein, the characteristic encrypted data may be saved to the header of a preset format file, the signature encrypted data and the partition identification data may be saved to the end of the preset format file, and the preset format file is used to indicate the encrypted Brush package. The rom.ofp file finally obtained after the above steps is the above-mentioned encrypted flashing package.

In order to explain in more detail the above-mentioned flashing package encryption method, the structure of the encrypted flashing package in the embodiment of this application will be described below with reference to Figure 4. Figure 4 is a schematic diagram of the structure of an encrypted flashing package, as shown in the figure, the most The left part is the structure of the encrypted flash package, including the boot partition, the operating system Linux kernel partition, the Android system framework partition, and the user data partition. Each partition includes three parts. The first part is encrypted 256kb binary data. The second part is the remaining data in the partition, which can be converted into binary data by server compilation, and the third part is the RSA signature, which is used to verify the source of the partition file. That is, the above RSA signature can be used to determine whether the partition file is Tampering, if the flashing package is generated by OPPO company, the RSA signature here can verify whether the data of each partition is generated by OPPO company.

Among them, the RSA signature of each partition can be combined into one full signature data AllSignatureFile, and a 256-bit version of the identity signal code can be obtained according to the hash 256 algorithm. The version of the identity signal code is the signature encrypted data. It should be noted that the above flashing package structure also includes full signature data and partition identification encrypted data at the end of the flashing package. The partition identification encrypted data includes the name, offset address, file length, checksum and other information of each partition.

Through the structure of the above flashing package, the encrypted file format and the offset address of the encrypted area can be unified, so that the user terminal can use the same standard for decryption, which improves the security and convenience at the same time. Hereinafter, another method for encrypting a flashing package in an embodiment of the application will be described in detail with reference to FIG. 5. FIG. 5 is a schematic flowchart of another method for encrypting a flashing package provided by an embodiment of the application, which specifically includes the following steps:

Step 501: Encrypt the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data.

Step 502: Process the signature data of each partition file in the flashing package to obtain signature encrypted data.

Step 503: Process the partition identification data of each partition file in the flashing package to obtain the partition identification encrypted data.

Step 504: Determine an encrypted flashing package based on the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data.

Step 505: Obtain the preset version identifier of the user terminal.

Wherein, this step is performed before the user terminal installs the encrypted flashing package. The above-mentioned preset version identifier may be used to indicate the version information of the flashing package that can be installed on the user terminal, and the above-mentioned preset version identifier may include an enterprise customized version identifier. , Operator version identification, common version identification, etc., which are not specifically limited here.

Step 506: Determine whether there is a version correspondence between the version identification information and the preset version identification.

Wherein, the above version identification information can be used to indicate the version information corresponding to the current flashing package. When the above version identification information and the version of the above preset version identification are the same, it can be determined that there is a version correspondence relationship.

Wherein, when it is judged that there is a version correspondence between the above-mentioned version identification information and the above-mentioned preset version identification, step 507 can be executed; when it is judged that there is no version correspondence between the above-mentioned version identification information and the above-mentioned preset version identification, the encrypted version cannot be compared. Complete the decryption of the flashing package.

Step 507: Perform a decryption step on the encrypted flashing package to obtain the flashing package.

Wherein, the above decryption step may be sending a key to the user terminal, and the above key is an RSA password. The above RSA password may be used to decrypt the partition identification encrypted data to obtain the partition identification data of each partition file, such as partition name and offset. Address, checksum, etc., and then find the location of the corresponding partition file in the rom.ofp file according to the offset address of each partition file above, and decrypt the characteristic encrypted data of the partition file after finding the corresponding partition file , Restore the partition file, similarly, you can restore each partition file, complete the decryption of the flashing package, and get the original flashing package.

By performing a decryption step on the encrypted flashing package to obtain the flashing package, the partition identification encrypted data and the characteristic encrypted data can be decrypted, and the decryption of the flashing package can be completed safely.

Step 508: Burn the partition file to the user terminal according to the signature data.

Wherein, step 508 can be executed after decrypting the encrypted flashing package. The above-mentioned signature data includes the source information of the partition file. The above-mentioned signature data can be used to verify whether the current partition location to be installed is the partition corresponding to the signature data. If so, The installation is completed. If the verification fails, the installation cannot be completed.

By burning the partition file to the user terminal according to the signature data, it can be ensured that the data of the flashing package has not been illegally tampered with, which greatly improves the security of the flashing package.

The steps that are not described in detail above can be referred to the method steps in FIG. 3, which will not be repeated here.

Consistent with the embodiments shown in FIG. 3 and FIG. 5, please refer to FIG. 6. FIG. 6 is a schematic structural diagram of an electronic device 600 provided by an embodiment of the present application. As shown in the figure, the electronic device 600 includes an application The processor 601, the communication interface 602, and the memory 603. The application processor 601, the communication interface 602, and the memory 603 are connected to each other through a bus 604. The bus 604 may be a Peripheral Component Interconnect (PCI) bus or Extended Industry Standard Architecture (Extended Industry Standard Architecture, EISA) bus, etc. The bus 604 can be divided into an address bus, a data bus, a control bus, and so on. For ease of representation, only one thick line is used in FIG. 6, but it does not mean that there is only one bus or one type of bus. Wherein, the memory is used to store a computer program, the computer program includes program instructions, and the application processor is configured to call the program instructions to perform the following steps: Encrypting the characteristic data to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

In a possible example, in the aspect of encrypting the characteristic data of each partition file in the flashing package to obtain the characteristic encrypted data, the instructions in the program are specifically used to perform the following operations: The characteristic data of the preset address of each partition file;

The characteristic data is encrypted by an asymmetric encryption algorithm to obtain the characteristic encrypted data.

In a possible example, in the aspect of processing the signature data of each partition file in the flashing package to obtain the signature encrypted data, the instructions in the program are specifically used to perform the following operations: obtaining the flashing Combine the signature data of each partition file in the package to obtain a full signature data;

The fully signed data is encrypted by a hash algorithm to obtain the signed encrypted data, and the signed encrypted data includes version identification information.

In a possible example, in terms of processing the partition identification data of each partition file in the flashing package to obtain the partition identification encrypted data, the instructions in the program are specifically used to perform the following operations: State the partition name, partition offset address and partition checksum of each partition file in the flashing package;

Combine the partition name, partition offset address, and partition checksum of each partition file into structure variable data;

The structure variable data is encrypted by an asymmetric encryption algorithm to obtain the partition identification encrypted data.

In a possible example, in terms of determining the encrypted flashing package based on the feature encrypted data, the signature encrypted data, and the partition identification encrypted data, the instructions in the program are specifically used to perform the following operations: Save the feature encrypted data to the header of a preset format file, save the signature encrypted data and the partition identification data to the end of the preset format file, and the preset format file is used to represent the encrypted flashing package .

In a possible example, after the encrypted flashing package is determined according to the feature encrypted data, the signature encrypted data, and the partition identification encrypted data, the instructions in the program are specifically used to execute the following Operation: before the user terminal installs the encrypted flashing package, obtain the preset version identifier of the user terminal;

Judging whether the version identification information has a version correspondence with the preset version identification;

If yes, perform a decryption step on the encrypted flashing package to obtain the flashing package.

In a possible example, after the decryption step is performed on the encrypted flashing package to obtain the flashing package, the instructions in the program are specifically used to perform the following operations: burning according to the signature data Record the partition file to the user terminal.

The foregoing mainly introduces the solution of the embodiment of the present application from the perspective of the execution process on the method side. It can be understood that, in order to implement the above-mentioned functions, an electronic device includes hardware structures and/or software modules corresponding to each function. Those skilled in the art should easily realize that in combination with the units and algorithm steps of the examples described in the embodiments provided herein, this application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a certain function is executed by hardware or computer software-driven hardware depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of this application.

The embodiment of the present application may divide the electronic device into functional units according to the foregoing method examples. For example, each functional unit may be divided corresponding to each function, or two or more functions may be integrated into one processing unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit. It should be noted that the division of units in the embodiments of the present application is illustrative, and is only a logical function division, and there may be other division methods in actual implementation.

FIG. 7 is a block diagram of functional units of a device 700 for encrypting a flashing package provided in an embodiment of the application. The flashing package encryption device 700 is applied to electronic equipment. The device includes a processing unit 701, a communication unit 702, and a storage unit 703. The processing unit 701 is used to perform any step in the above method embodiment, and When performing data transmission such as sending, the communication unit 702 can be optionally invoked to complete the corresponding operation. The detailed description will be given below.

The processing unit 701 is configured to encrypt characteristic data of each partition file in the flashing package to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

In a possible example, in the aspect of encrypting the characteristic data of each partition file in the flashing package to obtain the characteristic encrypted data, the processing unit 701 is specifically configured to: obtain each partition in the flashing package Characteristic data of the preset address of the file;

In a possible example, in the aspect of processing the signature data of each partition file in the flashing package to obtain signature encrypted data, the processing unit 701 is specifically configured to: obtain each The signature data of the partition files are merged to obtain a full signature data;

In a possible example, in the aspect of processing the partition identification data of each partition file in the flashing package to obtain the encrypted data of the partition identification, the processing unit 701 is specifically configured to: obtain the information in the flashing package The partition name, partition offset address and partition checksum of each partition file;

In a possible example, in terms of determining the encrypted flashing package based on the feature encrypted data, the signature encrypted data, and the partition identification encrypted data, the processing unit 701 is specifically configured to: The encrypted data is saved to the header of a preset format file, the signature encrypted data and the partition identification data are saved to the end of the preset format file, and the preset format file is used to represent the encrypted flashing package.

In a possible example, after the encrypted flashing package is determined according to the feature encrypted data, the signature encrypted data, and the partition identification encrypted data, the processing unit 701 is further specifically configured to: Before the terminal installs the encrypted flashing package, obtain the preset version identifier of the user terminal;

In a possible example, after the decryption step is performed on the encrypted flashing package to obtain the flashing package, the processing unit 701 is further specifically configured to: burn the partition according to the signature data File to the user terminal.

An embodiment of the present application also provides a computer storage medium, wherein the computer storage medium stores a computer program for electronic data exchange, and the computer program enables a computer to execute part or all of the steps of any method as described in the above method embodiment , The above-mentioned computer includes electronic equipment.

The embodiments of the present application also provide a computer program product. The above-mentioned computer program product includes a non-transitory computer-readable storage medium storing a computer program. The above-mentioned computer program is operable to cause a computer to execute any of the methods described in the above-mentioned method embodiments. Part or all of the steps of the method. The computer program product may be a software installation package, and the above-mentioned computer includes electronic equipment.

It should be noted that for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should know that this application is not limited by the described sequence of actions. Because according to this application, some steps can be performed in other order or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by this application.

In the above-mentioned embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in an embodiment, reference may be made to related descriptions of other embodiments.

In the several embodiments provided in this application, it should be understood that the disclosed device may be implemented in other ways. For example, the device embodiments described above are merely illustrative, for example, the division of the above-mentioned units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or integrated. To another system, or some features can be ignored, or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical or other forms.

The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.

If the above integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable memory. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a memory. A number of instructions are included to enable a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the foregoing methods of the various embodiments of the present application. The aforementioned memory includes: U disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by a program instructing relevant hardware. The program can be stored in a computer-readable memory, and the memory can include: a flash disk , Read-only memory (English: Read-Only Memory, abbreviation: ROM), random access device (English: Random Access Memory, abbreviation: RAM), magnetic disk or optical disc, etc.

The embodiments of the application are described in detail above, and specific examples are used in this article to illustrate the principles and implementation of the application. The descriptions of the above embodiments are only used to help understand the methods and core ideas of the application; at the same time, for Those of ordinary skill in the art, based on the idea of the application, will have changes in the specific implementation and the scope of application. In summary, the content of this specification should not be construed as a limitation to the application.

Claims

An encryption method for flashing package, characterized in that, the method includes:

Encrypting the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

Processing the signature data of each partition file in the flashing package to obtain signature encrypted data, where the signature data is used to represent the version information of the flashing package;

Processing the partition identification data of each partition file in the flashing package to obtain partition identification encrypted data, where the partition identification data is used to indicate the type of each partition file;

The encrypted flashing package is determined according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data.
The method according to claim 1, wherein the encrypting the characteristic data of each partition file in the flashing package to obtain the characteristic encrypted data comprises:

Acquiring characteristic data of the preset address of each partition file in the flashing package;

The characteristic data is encrypted by an asymmetric encryption algorithm to obtain the characteristic encrypted data.
The method according to claim 1, wherein the processing the signature data of each partition file in the flashing package to obtain the signature encrypted data comprises:

Obtain and merge the signature data of each partition file in the flashing package to obtain a full signature data;

The fully signed data is encrypted by a hash algorithm to obtain the signed encrypted data, and the signed encrypted data includes version identification information.
The method according to claim 1, wherein the processing the partition identification data of each partition file in the flashing package to obtain the partition identification encrypted data comprises:

Acquiring the partition name, partition offset address, and partition checksum of each partition file in the flashing package;

Combine the partition name, partition offset address, and partition checksum of each partition file into structure variable data;

The structure variable data is encrypted by an asymmetric encryption algorithm to obtain the partition identification encrypted data.
The method according to any one of claims 1 to 4, wherein the determining the encrypted flashing package according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data comprises:

Save the feature encrypted data to the header of a preset format file, save the signature encrypted data and the partition identification data to the end of the preset format file, and the preset format file is used to represent the encrypted flashing package .
The method according to claim 5, wherein after the encrypted flashing package is determined according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data, the method further comprises:

Before the user terminal installs the encrypted flashing package, obtain the preset version identifier of the user terminal;

Judging whether the version identification information has a version correspondence with the preset version identification;

If yes, perform a decryption step on the encrypted flashing package to obtain the flashing package.
The method according to claim 6, wherein the preset version identification includes 256-bit binary data, and the version identification information includes 256-bit binary data; and the judging whether the version identification information is the same as the The preset version identification has version correspondence, including:

By comparing the preset version identifier and the 256-bit binary data of the version identifier information one by one, it is determined whether the version identifier information has a version correspondence relationship with the preset version identifier.
The method according to claim 6, wherein after determining whether the version identification information has a version correspondence with the preset version identification, the method further comprises:

If there is no version correspondence between the version identification information and the preset version identification, prompt information is displayed on the user terminal, and the prompt information is used to indicate that the decryption fails.
The method according to any one of claims 1 to 8, wherein the step of decrypting the encrypted flashing package is performed, and after the flashing package is obtained, the method further comprises:

Burning the partition file to the user terminal according to the signature data.
A flashing package encryption device, characterized in that the device includes a processing unit and a communication unit, wherein:

The processing unit is configured to encrypt the characteristic data of each partition file in the flashing package to obtain characteristic encrypted data, where the characteristic data includes any fragment of each partition file;

Processing the signature data of each partition file in the flashing package to obtain signature encrypted data, where the signature data is used to represent the version information of the flashing package;

Processing the partition identification data of each partition file in the flashing package to obtain partition identification encrypted data, where the partition identification data is used to indicate the type of each partition file;

The encrypted flashing package is determined according to the characteristic encrypted data, the signature encrypted data, and the partition identification encrypted data.
An electronic device, characterized by comprising a multi-core processor, a communication interface, and a memory, the multi-core processor, the communication interface, and the memory are connected to each other, wherein the memory is used to store a computer program, and the computer program includes program instructions The multi-core processor is configured to call the program instructions to execute the method according to any one of claims 1-9.
A computer storage medium, wherein the computer storage medium stores a computer program, the computer program includes program instructions, and when executed by a processor, the program instructions cause the processor to execute as claimed in claims 1-9. Any one of the methods.