WO2021259310A1 - 空中下载更新方法、更新服务器、终端设备和物联网系统 - Google Patents
空中下载更新方法、更新服务器、终端设备和物联网系统 Download PDFInfo
- Publication number
- WO2021259310A1 WO2021259310A1 PCT/CN2021/101769 CN2021101769W WO2021259310A1 WO 2021259310 A1 WO2021259310 A1 WO 2021259310A1 CN 2021101769 W CN2021101769 W CN 2021101769W WO 2021259310 A1 WO2021259310 A1 WO 2021259310A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- update
- data
- terminal device
- key
- encrypted
- Prior art date
Links
- 238000000034 method Methods 0.000 title claims abstract description 38
- 238000004891 communication Methods 0.000 claims description 9
- 238000012795 verification Methods 0.000 claims description 9
- 238000004364 calculation method Methods 0.000 claims description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 230000002411 adverse Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000002085 persistent effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/70—Services for machine-to-machine communication [M2M] or machine type communication [MTC]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
- G16Y10/00—Economic sectors
- G16Y10/75—Information technology; Communication
-
- G—PHYSICS
- G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
- G16Y—INFORMATION AND COMMUNICATION TECHNOLOGY SPECIALLY ADAPTED FOR THE INTERNET OF THINGS [IoT]
- G16Y40/00—IoT characterised by the purpose of the information processing
- G16Y40/50—Safety; Security of things, users, data or systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L67/125—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks involving control of end-device applications over a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L9/3066—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
- H04L9/3073—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
- H04W12/037—Protecting confidentiality, e.g. by encryption of the control plane, e.g. signalling traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0433—Key management protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/10—Integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W8/00—Network data management
- H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities
- H04W8/24—Transfer of terminal data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W8/00—Network data management
- H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities
- H04W8/24—Transfer of terminal data
- H04W8/245—Transfer of terminal data from a network towards a terminal
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
Definitions
- the present disclosure relates to the technical field of the Internet of Things, and in particular to an air download update method, an update server, terminal equipment, and an Internet of Things system.
- the embodiments of the present disclosure provide an over-the-air download update method, which is applied to an update server in an Internet of Things system, the Internet of Things system includes an update server and a terminal device, and the update server is in communication connection with the terminal device ,
- the method includes the following steps:
- the encrypted update data is sent to the terminal device, so that the terminal device uses the decrypted update key to decrypt the update data, and uses the update data to perform data update.
- the method before sending the encrypted update data to the terminal device, the method further includes:
- the update method further includes receiving a heartbeat packet periodically sent by the terminal device, and when the update server receives the heartbeat packet of the terminal device, sending the encrypted public key to the terminal device.
- the update server sends the encrypted update key to the terminal device when receiving the heartbeat packet sent by the terminal device.
- the embodiments of the present disclosure also provide an over-the-air download update method, which is applied to a terminal device in an Internet of Things system.
- the Internet of Things system includes an update server and a terminal device.
- the update server communicates with the terminal device. Connecting, the method includes the following steps:
- the method further includes:
- the integrity of the update data is verified according to the first integrity data and the second integrity data, wherein the first integrity verification data is generated by the update server according to the update data and sent to the The terminal equipment.
- using the update data to update data includes:
- the update data passes the integrity check, the update data is used to update the data.
- the update method further includes periodically sending a heartbeat packet to the update server.
- the embodiments of the present disclosure also provide an update server, which is applied to an Internet of Things system, the Internet of Things further includes a terminal device, the update server is in communication connection with the terminal device, and the update server includes:
- the first generation module is used to generate matching encrypted public key and encrypted private key
- the first sending module is configured to send the encrypted public key to the terminal device
- the first encryption module is configured to generate an update secret key, and encrypt the update secret key by the encryption private key;
- a second sending module configured to send the encrypted update key to the terminal device, so that the terminal device can use the encrypted public key to decrypt the encrypted update key
- the second encryption module is used to encrypt the update data by using the update secret key
- the third sending module is configured to send the encrypted update data to the terminal device, so that the terminal device uses the decrypted update key to decrypt the update data, and use the update data to update data .
- it also includes:
- the second generation module is used to generate the first integrity check data corresponding to the update data
- the fourth sending module is configured to send the first integrity check data to the terminal device.
- the first sending module is configured to send the encrypted public key to the terminal device when a heartbeat packet of the terminal device is received.
- the second sending module is configured to send the encrypted update key to the terminal device when receiving the heartbeat packet sent by the terminal device.
- the embodiments of the present disclosure also provide a terminal device, which is applied to an Internet of Things system, the Internet of Things system further includes an update server, the update server is in communication connection with the terminal device, and the terminal device includes:
- the first receiving module is configured to receive the encrypted public key sent by the update server
- the second receiving module is configured to receive an update secret key sent by the update server, where the update secret key is encrypted by the update service area using an encryption private key that matches the encryption public key;
- the first decryption module is configured to use the encrypted public key to decrypt the encrypted updated secret key
- the third receiving module is configured to receive update data sent by the update server, where the update data is encrypted by the update server using the update secret key;
- the second decryption module is configured to decrypt the update data by using the decrypted update secret key
- the update module is used to update the data by using the update data.
- it also includes:
- the verification module is configured to verify the integrity of the update data according to the first integrity data and the second integrity data, wherein the first integrity verification data is the update server according to the update The data is generated and sent to the terminal device.
- the terminal device further includes a sending module, configured to periodically send a heartbeat packet to the update server.
- a sending module configured to periodically send a heartbeat packet to the update server.
- the embodiments of the present disclosure also provide an Internet of Things system, including an update server and a terminal device, the update server is the update server described in any one of the above, and the terminal device is any one of the above Terminal equipment.
- FIG. 1 is a flowchart of an OTA update method provided by an embodiment of the present disclosure
- FIG. 2 is another flowchart of the OTA update method provided by an embodiment of the present disclosure
- FIG. 3 is another flowchart of the OTA update method provided by an embodiment of the present disclosure.
- Figure 4 is a schematic structural diagram of an update server provided by an embodiment of the present disclosure.
- Fig. 5 is a schematic structural diagram of a terminal device provided by an embodiment of the present disclosure.
- the present disclosure provides an OTA (Over The Air) update method, which is applied to an Internet of Things system.
- the Internet of Things system includes an update server and a terminal device. Ways to send update data to the terminal device.
- the OTA update method includes the following steps. Steps 101 to 106 are executed in the update server.
- Step 101 Generate a matching encryption public key and encryption private key.
- an asymmetric encryption algorithm such as RSA is used to generate a matching encryption public key and encryption private key.
- the encryption public key and encryption private key can be further updated regularly. Specifically, the encryption private key and the encryption public key can be changed periodically. For example, the validity period of each group of encryption public key and encryption private key is set to one week, ten days, etc., and the group of encryption public key and encryption private key It is only valid within the validity period; for another example, each time OTA upgrades, a set of encrypted public keys and encrypted private keys that are different from the previous ones can be randomly generated in the update server to improve the security of the update.
- Step 102 Send the encrypted public key to the terminal device.
- the update server After the connection between the terminal device and the update server is established, the update server sends the encrypted public key to the terminal device. Specifically, the update server may send the encrypted public key when receiving the heartbeat packet of the terminal device.
- the heartbeat packet may be periodically sent by the terminal device to the server, and is usually used to maintain a long connection between the terminal device and the server.
- the terminal device may send a heartbeat request to the server through the persistent connection channel every predetermined period, and the encrypted public key may be included in the heartbeat request.
- Step 103 Generate an update secret key, and encrypt the update secret key by the encryption private key.
- step 103 may be performed after step 102 or before step 102.
- the update key is generated by symmetric encryption such as AES in the update server, and the update key is encrypted with the encryption private key.
- Step 104 Send the encrypted update key to the terminal device, so that the terminal device uses the encryption public key to decrypt the encrypted update key.
- the update key is encrypted and sent to the terminal device, in this process, if an unauthorized user obtains the update key, then the unauthorized user obtains the encrypted update key.
- the terminal device After receiving the encrypted update key, the terminal device can decrypt the update key through the encrypted public key to obtain the true update key.
- the update server may send the encrypted update key to the IoT terminal when receiving the heartbeat packet sent by the terminal.
- Step 105 Use the update secret key to encrypt the update data.
- the update data When the update data needs to be sent to the terminal device, the update data is encrypted with the unencrypted update key. In this way, if an unauthorized user obtains the update data during the transmission of the update data, what it obtains is also encrypted Update data reduces the possibility of update data leakage.
- step 105 may be performed at any time before sending the update data to the terminal device after the update key is generated, for example, it may be performed before or after step 104.
- Step 106 Send the encrypted update data to the terminal device, so that the terminal device uses the decrypted update key to decrypt the update data, and uses the update data to update the data.
- the encrypted update data is sent to the terminal device.
- the terminal device first decrypts the update key with the encrypted public key, then uses the decrypted update key to decrypt the more detailed data, and finally , The terminal device uses the obtained update data to update the data.
- the method further includes:
- the first integrity data can be obtained by calculating the MD5 value of the updated data through the MD5 algorithm. Since the MD5 value is unique, the MD5 value calculated for the same file is the same. In this way, for the same update data, the MD5 value calculated in the update server and in the terminal device is also the same.
- the first integrity check data of the update data is updated in the update server, and then sent to the terminal device. Further, the integrity data of the received update data is calculated in the terminal device, which is the same as the above-mentioned first integrity check. The data is compared. If the two are the same, it proves that there is no problem with the update data received by the terminal device; otherwise, it proves that the received update data may be damaged or tampered. In this case, the update server needs to send the correct data to the terminal again. Updated data.
- the update data is encrypted with the update secret key
- the update server is further used to encrypt the update secret key of the update data with the encryption private key
- the terminal device is used to decrypt the update data with the encryption public key.
- update data loss it can also prevent other illegal users from directly obtaining update data, which helps reduce the possibility of update data leakage.
- the update secret key is also encrypted by the encryption public key and the encryption private key. Even if an unauthorized user obtains the update secret key, in the case of not obtaining the encryption public key Also, it is impossible to directly decrypt the update data to obtain the update data, which further improves the security.
- Steps 201 to 206 in this embodiment are executed in the terminal device.
- Step 201 Receive the encrypted public key sent by the update server.
- the encrypted public key received in this embodiment is the encrypted public key generated in step 101 of the foregoing embodiment.
- the update server uses the encrypted private key to encrypt the update secret key.
- Step 202 Receive an update secret key sent by the update server, where the update secret key is encrypted by the update service area using an encryption private key that matches the encryption public key.
- the terminal device receives the update key sent by the update server, and the update key is encrypted in the update server through step 103 described above.
- Step 203 Use the encrypted public key to decrypt the encrypted updated secret key.
- the encrypted public key After receiving the encrypted public key and the encrypted update key issued by the update server, the encrypted public key is used to decrypt the update key, and the decrypted update key can be obtained.
- Step 204 Receive update data sent by the update server, where the update data is encrypted by the update server using the update secret key.
- the update server receives the update data encrypted by using the update secret key in step 105 above. Since the update data is encrypted, even if it is obtained by an unauthorized user during the transmission process, it is an encrypted file and cannot be directly obtained. Original file.
- Step 205 Use the decrypted update key to decrypt the update data.
- the updated data is decrypted by using the decrypted update key to obtain update data that can be used for data update.
- Step 206 Use the update data to update data.
- the update operation can be completed by erasing the original data and updating the firmware of the update program.
- step 205 the method further includes:
- the integrity of the update data is verified according to the first integrity data and the second integrity data, wherein the first integrity verification data is generated by the update server according to the update data and sent to the The terminal equipment.
- the first integrity data is calculated and generated by the update server according to the sent update data
- the second integrity data is calculated and generated by the terminal device according to the decrypted update data.
- the first integrity data and the second integrity data should be the same.
- step 206 may include:
- the update data passes the integrity check, the update data is used to update the data.
- the update data passes the integrity check, that is, when the first integrity data and the second integrity data are consistent, it is proved that there is no abnormality in the update data received by the terminal device, and the update data can be used for data update .
- the technical solution of this embodiment can be summarized as: generating a matching encryption public key and encryption private key in a finer server 301, and it is also necessary to generate an update secret key X in a finer server 301, using encryption
- the private key is the update secret key X encryption, a more detailed secret key Y is obtained, and then the encrypted public key and the update secret key Y are sent to the terminal device 302.
- the terminal device 302 decrypts the update key Y with the received encrypted public key, and obtains the update key X.
- the required update data is update data A.
- the update data A is encrypted with the update secret key X to obtain the update data B.
- the integrity data C of the updated data A needs to be calculated. Further, the update data B and the integrity data C are sent to the terminal device 302.
- the terminal device 302 After receiving the update data B, the terminal device 302 uses the update key X to decrypt the update data B, and can obtain the update data A. Further, in the terminal device 302, the integrity data D of the update data A is calculated.
- the updated data A can be used to update the data of the terminal device 302. If the integrity data C and the integrity data D are inconsistent, it is proved that the updated data exists If it is abnormal, it is reported that the update of the finer server 301 has failed, and the update step needs to be performed again.
- the embodiment of the present disclosure also provides an update server, which is applied to an Internet of Things system, the Internet of Things further includes a terminal device, the update server is in communication connection with the terminal device, and the update server 400 includes:
- the first generating module 401 is used to generate a matching encrypted public key and encrypted private key
- the first sending module 402 is configured to send the encrypted public key to the terminal device
- the first encryption module 403 is configured to generate an update secret key, and encrypt the update secret key by the encryption private key;
- the second sending module 404 is configured to send the encrypted update key to the terminal device, so that the terminal device can use the encrypted public key to decrypt the encrypted update key;
- the second encryption module 405 is configured to encrypt the update data by using the update secret key
- the third sending module 406 is configured to send the encrypted update data to the terminal device, so that the terminal device uses the decrypted update key to decrypt the update data, and use the update data to perform data renew.
- it also includes:
- the second generation module is used to generate the first integrity check data corresponding to the update data
- the fourth sending module is configured to send the first integrity check data to the terminal device.
- the embodiment of the present disclosure also provides a terminal device, which is applied to an Internet of Things system, the Internet of Things system further includes an update server, the update server is in communication connection with the terminal device, and the terminal device 500 includes:
- the first receiving module 501 is configured to receive the encrypted public key sent by the update server;
- the second receiving module 502 is configured to receive an update secret key sent by the update server, where the update secret key is encrypted by the update service area using an encryption private key that matches the encryption public key;
- the first decryption module 503 is configured to use the encrypted public key to decrypt the encrypted updated secret key
- the third receiving module 504 is configured to receive update data sent by the update server, where the update data is encrypted by the update server using the update secret key;
- the second decryption module 505 is configured to decrypt the update data by using the decrypted update key
- the update module 506 is used to update the data by using the update data.
- it also includes:
- the verification module is configured to verify the integrity of the update data according to the first integrity data and the second integrity data, wherein the first integrity verification data is the update server according to the update The data is generated and sent to the terminal device.
- the update module 506 is specifically configured to use the update data to update data when the update data passes the integrity check.
- An embodiment of the present disclosure also provides an Internet of Things system, including an update server and a terminal device, the update server is the update server described in any one of the above, and the terminal device is the terminal device described in any of the above.
- the update server, terminal device, and IoT system of this embodiment can implement each step of the above OTA update method embodiment, it can at least achieve all the above technical effects, which will not be repeated here.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Databases & Information Systems (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Business, Economics & Management (AREA)
- Pure & Applied Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Algebra (AREA)
- Mathematical Analysis (AREA)
- Mathematical Optimization (AREA)
- Mathematical Physics (AREA)
- Economics (AREA)
- Development Economics (AREA)
- Accounting & Taxation (AREA)
- Medical Informatics (AREA)
- Bioethics (AREA)
- Computer Hardware Design (AREA)
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
- Information Transfer Between Computers (AREA)
Abstract
Description
Claims (16)
- 一种空中下载更新方法,应用于物联网系统中的更新服务器,所述物联网系统包括更新服务器和终端设备,所述更新服务器与所述终端设备通信连接,所述方法包括以下步骤:生成相匹配的加密公钥和加密私钥;将所述加密公钥发送至所述终端设备;生成更新秘钥,并通过所述加密私钥对所述更新秘钥加密;将加密后的所述更新秘钥发送至所述终端设备,以供所述终端设备利用所述加密公钥对加密后的所述更新秘钥解密;利用所述更新秘钥对更新数据进行加密;将加密后的更新数据发送至所述终端设备,以供所述终端设备利用解密后的所述更新秘钥解密所述更新数据,并利用所述更新数据进行数据更新。
- 如权利要求1所述的空中下载更新方法,其中,将加密后的更新数据发送至所述终端设备之前,还包括:生成所述更新数据对应的第一完整性校验数据;将所述第一完整性校验数据发送至所述终端设备。
- 如权利要求1或2所述的空中下载更新方法,还包括接收所述终端设备周期性发送的心跳包,并且在所述更新服务器接收到终端设备的心跳包时,将所述加密公钥发送至所述终端设备。
- 如权利要求3所述的空中下载更新方法,其中在通过所述加密私钥对所述更新秘钥加密之后,所述更新服务器在收到终端设备发送的心跳包时,将经过加密的更新秘钥发送至所述终端设备。
- 一种空中下载更新方法,应用于物联网系统中的终端设备,所述物联网系统包括更新服务器和终端设备,所述更新服务器与所述终端设备通信连接,所述方法包括以下步骤:接收所述更新服务器发送的加密公钥;接收所述更新服务器发送的更新秘钥,所述更新秘钥是所述更新服务区利用与所述加密公钥相匹配的加密私钥进行加密的;利用所述加密公钥对加密后的所述更新秘钥解密;接收所述更新服务器发送的更新数据,其中,所述更新数据是所述更新服务器利用所述更新秘钥进行加密的;利用解密后的所述更新秘钥对更新数据进行解密;利用所述更新数据进行数据更新。
- 如权利要求5所述的空中下载更新方法,其中,所述利用解密后的所述更新秘钥解密所述更新数据之后,还包括:计算解密后的所述更新数据的第二完整性校验数据;根据第一完整性数据和所述第二完整性数据校验所述更新数据的完整性,其中,所述第一完整性校验数据是所述更新服务器根据所述更新数据生成并发送至所述终端设备的。
- 如权利要求6所述的空中下载更新方法,其中,利用所述更新数据进行数据更新,包括:在所述更新数据通过完整性校验的情况下,利用所述更新数据进行数据更新。
- 如权利要求5至7中任一项所述的空中下载更新方法,还包括周期性地向所述更新服务器发送心跳包。
- 一种更新服务器,应用于物联网系统,所述物联网系统还包括终端设备,所述更新服务器与所述终端设备通信连接,所述更新服务器包括:第一生成模块,用于生成相匹配的加密公钥和加密私钥;第一发送模块,用于将所述加密公钥发送至所述终端设备;第一加密模块,用于生成更新秘钥,并通过所述加密私钥对所述更新秘钥加密;第二发送模块,用于将加密后的所述更新秘钥发送至所述终端设备,以供所述终端设备利用所述加密公钥对加密后的所述更新秘钥解密;第二加密模块,用于利用所述更新秘钥对更新数据进行加密;第三发送模块,用于将加密后的更新数据发送至所述终端设备,以供所述终端设备利用解密后的所述更新秘钥解密所述更新数据,并利用所述更新数据进行数据更新。
- 如权利要求9所述的更新服务器,还包括:第二生成模块,用于生成所述更新数据对应的第一完整性校验数据;第四发送模块,用于将所述第一完整性校验数据发送至所述终端设备。
- 如权利要求9或10所述的更新服务器,其中所述第一发送模块用于在接收到终端设备的心跳包时,将所述加密公钥发送至所述终端设备。
- 如权利要求11所述的更新服务器,其中所述第二发送模块用于在收到终端设备发送的心跳包时,将经过加密的更新秘钥发送至所述终端设备。
- 一种终端设备,应用于物联网系统,所述物联网系统还包括更新服务器,所述更新服务器与所述终端设备通信连接,所述终端设备包括:第一接收模块,用于接收所述更新服务器发送的加密公钥;第二接收模块,用于接收所述更新服务器发送的更新秘钥,所述更新秘钥是所述更新服务区利用与所述加密公钥相匹配的加密私钥进行加密的;第一解密模块,用于利用所述加密公钥对加密后的所述更新秘钥解密;第三接收模块,用于接收所述更新服务器发送的更新数据,其中,所述更新数据是所述更新服务器利用所述更新秘钥进行加密的;第二解密模块,用于利用解密后的所述更新秘钥对更新数据进行解密;更新模块,用于利用所述更新数据进行数据更新。
- 如权利要求13所述的终端设备,还包括:计算模块,用于计算解密后的所述更新数据的第二完整性校验数据;校验模块,用于根据第一完整性数据和所述第二完整性数据校验所述更新数据的完整性,其中,所述第一完整性校验数据是所述更新服务器根据所述更新数据生成并发送至所述终端设备的。
- 如权利要求14所述的终端设备,还包括发送模块,用于周期性地向所述更新服务器发送心跳包。
- 一种物联网系统,包括更新服务器和终端设备,所述更新服务器为权利要求9或10所述的更新服务器,所述终端设备为权利要求13或14所述的终端设备。
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US17/778,193 US12050901B2 (en) | 2020-06-23 | 2021-06-23 | Over-the-air updating method, update server, terminal device, and internet of things system |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010582268.6 | 2020-06-23 | ||
CN202010582268.6A CN113840262A (zh) | 2020-06-23 | 2020-06-23 | 空中下载更新方法、更新服务器、终端设备和物联网系统 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2021259310A1 true WO2021259310A1 (zh) | 2021-12-30 |
Family
ID=78964253
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2021/101769 WO2021259310A1 (zh) | 2020-06-23 | 2021-06-23 | 空中下载更新方法、更新服务器、终端设备和物联网系统 |
Country Status (2)
Country | Link |
---|---|
CN (1) | CN113840262A (zh) |
WO (1) | WO2021259310A1 (zh) |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106201607A (zh) * | 2016-07-04 | 2016-12-07 | 乐视控股(北京)有限公司 | 一种软件版本的升级方法及设备 |
US20180107997A1 (en) * | 2016-10-17 | 2018-04-19 | Vmware, Inc. | Managing software licensing cost information |
CN108563927A (zh) * | 2018-04-26 | 2018-09-21 | 惠州市德赛西威汽车电子股份有限公司 | 一种主机升级软件的打包加密方法 |
CN109495307A (zh) * | 2018-11-27 | 2019-03-19 | 北京车和家信息技术有限公司 | 系统升级方法、ota升级包加密方法、终端设备及车辆 |
CN109857421A (zh) * | 2018-12-17 | 2019-06-07 | 航天信息股份有限公司 | 嵌入式设备的加密升级方法及系统 |
CN109992286A (zh) * | 2019-04-02 | 2019-07-09 | 深圳创维数字技术有限公司 | 设备升级方法、服务器及计算机可读存储介质 |
CN112929871A (zh) * | 2019-12-05 | 2021-06-08 | 上海艾拉比智能科技有限公司 | Ota升级包的获取方法、电子设备以及存储介质 |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110071940A (zh) * | 2019-05-06 | 2019-07-30 | 深圳市网心科技有限公司 | 软件包加解密方法、服务器、用户设备及存储介质 |
CN110650478B (zh) * | 2019-10-12 | 2023-11-28 | 捷德(江西)技术有限公司 | Ota方法、系统、设备、se模块、程序服务器和介质 |
-
2020
- 2020-06-23 CN CN202010582268.6A patent/CN113840262A/zh active Pending
-
2021
- 2021-06-23 WO PCT/CN2021/101769 patent/WO2021259310A1/zh active Application Filing
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106201607A (zh) * | 2016-07-04 | 2016-12-07 | 乐视控股(北京)有限公司 | 一种软件版本的升级方法及设备 |
US20180107997A1 (en) * | 2016-10-17 | 2018-04-19 | Vmware, Inc. | Managing software licensing cost information |
CN108563927A (zh) * | 2018-04-26 | 2018-09-21 | 惠州市德赛西威汽车电子股份有限公司 | 一种主机升级软件的打包加密方法 |
CN109495307A (zh) * | 2018-11-27 | 2019-03-19 | 北京车和家信息技术有限公司 | 系统升级方法、ota升级包加密方法、终端设备及车辆 |
CN109857421A (zh) * | 2018-12-17 | 2019-06-07 | 航天信息股份有限公司 | 嵌入式设备的加密升级方法及系统 |
CN109992286A (zh) * | 2019-04-02 | 2019-07-09 | 深圳创维数字技术有限公司 | 设备升级方法、服务器及计算机可读存储介质 |
CN112929871A (zh) * | 2019-12-05 | 2021-06-08 | 上海艾拉比智能科技有限公司 | Ota升级包的获取方法、电子设备以及存储介质 |
Also Published As
Publication number | Publication date |
---|---|
US20230107953A1 (en) | 2023-04-06 |
CN113840262A (zh) | 2021-12-24 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP7364674B2 (ja) | 安全な無線ファームウェアアップグレード | |
EP3318043B1 (en) | Mutual authentication of confidential communication | |
US8130961B2 (en) | Method and system for client-server mutual authentication using event-based OTP | |
US7373509B2 (en) | Multi-authentication for a computing device connecting to a network | |
CN101145906B (zh) | 对单向网络中的接收终端进行合法性认证的方法及系统 | |
US20050120203A1 (en) | Methods, systems and computer program products for automatic rekeying in an authentication environment | |
JP2012050066A (ja) | セキュアなフィールドプログラマブルゲートアレイ(fpga)アーキテクチャ | |
CN104836784B (zh) | 一种信息处理方法、客户端和服务器 | |
CN114637987B (zh) | 基于平台验证的安全芯片固件下载方法及系统 | |
EP4322464A1 (en) | Information transmission method, storage medium and electronic device | |
CN114662087B (zh) | 一种多端验证的安全芯片固件更新方法及装置 | |
CN114327532A (zh) | 一种基于数字签名和加密的汽车ota升级信息安全实现方法 | |
US11405210B2 (en) | Authentication system | |
KR102591826B1 (ko) | Puf를 이용한 인증서 기반 디바이스 인증 장치 및 방법 | |
US9100374B2 (en) | Method for managing remote upgrading keys in an information security apparatus | |
WO2021259310A1 (zh) | 空中下载更新方法、更新服务器、终端设备和物联网系统 | |
KR101329789B1 (ko) | 모바일 디바이스의 데이터베이스 암호화 방법 | |
US11570008B2 (en) | Pseudonym credential configuration method and apparatus | |
US12050901B2 (en) | Over-the-air updating method, update server, terminal device, and internet of things system | |
CN110890959B (zh) | 一种账户改密的方法、系统及装置 | |
CN113553592A (zh) | 一种基于嵌入式信任根的智能设备安全代码更新方法 | |
CN112929871A (zh) | Ota升级包的获取方法、电子设备以及存储介质 | |
CN109981678B (zh) | 一种信息同步方法及装置 | |
CN114598464B (zh) | 一种数据更新方法和控制器 | |
CN114598465B (zh) | 一种数据更新方法和控制器 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 21829162 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 21829162 Country of ref document: EP Kind code of ref document: A1 |
|
32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 18.09.2023) |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 21829162 Country of ref document: EP Kind code of ref document: A1 |