WO2013182155A1 - Firmware version upgrade method and system - Google Patents

Description

 Method and system for upgrading firmware version

 The present invention relates to the field of mobile terminals, and in particular to firmware upgrade techniques.

Background technique

 A mobile terminal, also known as a mobile communication terminal, refers to a portable mobile computer device, and in a broad sense, includes a mobile phone, a data card, a tablet computer, and the like.

 Firmware refers to the software that is the most basic and lowest-level work of a digital product. It is usually stored in the EEPROM or FLASH chip of the device and can be upgraded by the user through a specific firmware upgrade tool.

 The firmware upgrade tool refers to the auxiliary software used to upgrade the firmware version on the mobile terminal.

 Since the firmware version is closely related to the terminal hardware, the firmware of the early mobile terminal is generally only available from the manufacturer. The manufacturer will undergo detailed testing and verification before releasing the firmware version to ensure that the firmware version is well matched with the mobile terminal and its function meets the requirements of users and operators.

 With the development of smart mobile terminals and their operating systems, especially the development of open source Android operating systems, in addition to terminal manufacturers, a large number of individuals or third-party companies have begun to develop and provide mobile terminal firmware.

 The firmware version provided by such non-terminal vendors may have the following problems:

 1. Since this version is often a more general version and is not specifically tested and verified for a specific hardware configuration, there is no guarantee that it will be well matched to the terminal device;

 2. The firmware version may contain malicious programs such as malicious hidden programs and viruses, and security cannot be guaranteed;

 3, can not meet the operator's customization requirements, custom mobile terminals usually have special requirements for the firmware version, such as: require a built-in specific application, can only access a specific operator's mobile network. In this case, the operator usually does not allow the user to upgrade the terminal firmware at will.

The current common firmware upgrade methods are usually: PC side upgrade tool and mobile terminal establish data transmission channel (USB, virtual serial port, network port, etc.); and pre-stored in the PC side storage medium The version file is sequentially transmitted to the data receiving module of the mobile terminal, and the data receiving module transfers the received data to the storage medium of the mobile terminal. The process does not verify the legality of the upgrade tool used, nor does it verify the legality of the firmware version, and there is no firmware legality mechanism on the mobile terminal.

Summary of the invention

 The embodiment of the present invention provides a method and a system for upgrading a firmware version, which can overcome the problem that the firmware upgrade technology cannot verify the validity of the firmware version, and thus the problem that the firmware version to be upgraded matches the mobile terminal to be upgraded cannot be guaranteed.

 According to an embodiment of the present invention, a method for upgrading a firmware version is provided, including: the upgrade tool performs version validity check processing on the firmware version to be upgraded, and sends the handshake authentication information to the mobile according to the version validity check result. Terminal

 The mobile terminal performs the handshake verification process on the upgrade tool by using the handshake authentication information, and receives the firmware version to be upgraded delivered by the upgrade tool when the handshake verification is successful.

 The mobile terminal performs version legality verification processing on the received firmware version to be upgraded, when the version validity check result is a legal firmware version.

 Preferably, each version file of the firmware version to be upgraded has a digital signature, and the upgrade tool uses a pre-stored signature key to verify the digital signature of each version file, if each of the firmware versions to be upgraded If the version file is successfully verified, it is determined that the firmware version to be upgraded is a legal firmware version.

 Preferably, when the upgrade tool determines that the firmware version to be upgraded is a legal firmware version, handshake authentication information including a handshake authentication command and handshake authentication data is generated and sent to the mobile terminal.

 Preferably, after receiving the handshake authentication information, the mobile terminal decrypts the ciphertext data in the handshake authentication data by using a pre-stored handshake key, and obtains plaintext data and plaintext data in the handshake authentication data. A match is made to determine that the mobile terminal successfully handshaking with the upgrade tool.

 Preferably, the method further comprises:

After the mobile terminal determines that it has successfully handshake with the upgrade tool, it switches to the upgrade mode according to the mode switching information from the upgrade tool, so as to receive the firmware version delivered by the upgrade tool. Preferably, the mobile terminal performs digital signature verification on each version file of the firmware version to be upgraded by using the pre-stored signature key. If each version file is successfully verified, it is determined that the firmware version to be upgraded is Legal firmware version.

 Preferably, the method further comprises:

 The mobile terminal replaces the current firmware version with the firmware version to be upgraded, and performs version legality verification processing on the firmware version to be upgraded during the restart using the firmware version to be upgraded. .

 According to another embodiment of the present invention, there is provided an anti-firmware upgrade system, including an upgrade tool and a mobile terminal, wherein:

 The upgrade tool is configured to: perform a version legality verification process on the upgraded firmware version, and send handshake authentication information to the mobile terminal according to the version validity check result;

 The mobile terminal is configured to perform handshake check processing on the upgrade tool by using the handshake authentication information, and receive the firmware version to be upgraded by the upgrade tool when the handshake verification is successful, and receive the firmware to be upgraded. The version performs the version validity check processing. When the version validity check result is the legal firmware version, the firmware version is upgraded.

 Preferably, the upgrade tool comprises:

 a signature verification module, configured to: perform digital signature verification on each version file of the firmware version to be upgraded by using a pre-stored signature key, and if the verification of each version file is successful, determine the firmware to be upgraded. The version is the legal firmware version;

 The handshake verification module is configured to: when it is determined that the firmware version to be upgraded is a legal firmware version, generate handshake authentication information including a handshake authentication command and handshake authentication data, and send the handshake authentication information to the mobile terminal.

 Preferably, the mobile terminal includes:

 The handshake authentication module is configured to: after receiving the handshake authentication information, decrypt the ciphertext data in the handshake authentication data by using a pre-stored handshake key, and obtain the plaintext data and the handshake authentication data. The plaintext data in the match is matched to determine that the mobile terminal successfully handshaking with the upgrade tool;

The signature verification module is configured to: perform digital signature verification on each version file of the firmware version to be upgraded by using the pre-stored signature key, and if each version file is verified successfully, The firmware version to be upgraded is a legal firmware version.

 The embodiment of the invention further provides a mobile terminal, including:

 The handshake authentication module is configured to: perform handshake verification processing on the upgrade tool by using the handshake authentication information sent by the upgrade tool, and receive the firmware version to be upgraded delivered by the upgrade tool when the handshake verification is successful, where The handshake authentication information includes a validity check result of the version to be upgraded;

 The signature verification module is configured to: perform version verification processing on the received firmware version to be upgraded, and perform firmware version upgrade when the version validity check result is a legal firmware version;

 Upgrade the agent module, set to interact with the upgrade tool.

 Preferably, the handshake authentication module is configured to: after receiving the handshake authentication information, decrypt the ciphertext data in the handshake authentication data by using a pre-stored handshake key, and decrypt the obtained plaintext data. Matching with the plaintext data in the handshake authentication data to determine whether the mobile terminal and the upgrade tool successfully handshake.

 Preferably, the signature verification module is configured to: perform digital signature verification on each version file of the received firmware version to be upgraded by using a pre-stored signature key, and if each version file is verified successfully, It is determined that the firmware version to be upgraded is a legal firmware version.

The embodiment of the invention can prevent the mobile terminal from being upgraded to the illegal firmware version, improve the security of the mobile terminal upgrade process, and effectively ensure that the interests of the terminal user and the operator are not infringed by the illegal firmware. BRIEF abstract

 1 is a block diagram of a method for upgrading a firmware version according to an embodiment of the present invention;

 2 is a flowchart of firmware version upgrade provided by an embodiment of the present invention;

 3 is a structural diagram of a mobile terminal according to an embodiment of the present invention;

4 is a structural diagram of an upgrade tool provided by an embodiment of the present invention; FIG. 5 is a structural diagram of a digital signature component after a version file according to an embodiment of the present invention.

Preferred embodiment of the invention

 The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings. It should be noted that the features in the embodiments and the embodiments of the present application can be arbitrarily combined with each other without conflict.

 Embodiments of the present invention provide a method and system for preventing a mobile terminal from being upgraded to an illegal firmware version based on encryption technology and digital signature technology. 1 is a block diagram of a method for preventing a mobile terminal from being upgraded to an illegal firmware version according to an embodiment of the present invention. As shown in FIG. 1, the method includes:

 Step 101: The upgrade tool verifies the legality of the firmware version to be upgraded stored on the master device. The firmware version to be upgraded has multiple version files, each of which has a digital signature, and the upgrade tool verifies the digital signature of each version file by using a pre-stored signature key. When each version file of the firmware version to be upgraded is successfully verified, the upgrade tool determines that the firmware version to be upgraded is a legal firmware version.

 Step 102: The upgrade tool and the mobile terminal mutually authenticate by handshake.

 First, after the upgrade tool determines that the firmware version to be upgraded stored on the master device is a legal firmware version, the handshake authentication information including the handshake authentication command and the handshake authentication data is sent to the mobile terminal.

 Secondly, after receiving the handshake authentication information, the mobile terminal checks the handshake authentication data therein, and feeds back the handshake verification result to the upgrade tool. When the handshake verification is successful, the mobile terminal determines that the upgrade tool is a legal upgrade tool, otherwise the upgrade tool is determined to be an illegal upgrade tool.

 Then, the upgrade tool receives the handshake authentication result from the mobile terminal, and if successful, sends the mode switch information to the mobile terminal to notify the mobile terminal to switch to the upgrade mode.

 Finally, after receiving the mode switching information, the mobile terminal checks whether the handshake authentication is successful. If successful, the mobile terminal cuts into the upgrade mode.

 Step 103: The upgrade tool transmits the firmware version to be upgraded to the mobile terminal.

The firmware version to be upgraded has multiple version files, and the upgrade tool delivers the multiple version files to the mobile terminal in turn. Step 104: The mobile terminal sequentially receives the plurality of version files, and performs verification on the received version file.

 The mobile terminal performs digital signature verification on each version file of the firmware version to be upgraded by using the pre-stored signature key. If each version file is successfully verified, it is determined that the firmware version to be upgraded is a legal firmware version. .

 Step 105: The mobile terminal replaces the old version with the received firmware version to be upgraded.

 The upgrade tool notifies the mobile terminal that all version files are delivered, and the mobile terminal is required to replace the old version. At this time, the mobile terminal replaces the current version with the firmware version to be upgraded stored in the spare storage area.

 Step 106: The mobile terminal restarts to complete the upgrade process.

 The upgrade tool notifies the mobile terminal to exit the upgrade mode and restart. At this point, the mobile terminal restarts with the new firmware version, and the digital signature verification of each version file of the firmware version is still performed during the startup process, and the upgrade process is completed.

 It can be seen from steps 101 to 106 that the embodiments of the present invention achieve the goal of preventing illegal firmware upgrade by the following four technical means:

 1. The upgrade tool performs signature verification on each version file of the firmware version.

 The upgrade tool running on the master device will perform signature verification on the version files of the firmware version saved on the master device before performing the upgrade operation. If the signature information does not exist or the signature information fails to be verified, it is not allowed. Mobile terminal upgrade. Therefore, it is possible to effectively prevent illegal firmware version upgrades of unknown source at the level of the upgrade tool.

The mobile terminal is in the forbidden upgrade state when the mobile terminal is normally started. The upgrade tool sends the handshake authentication information before the firmware sends the firmware version to the mobile terminal. The mobile terminal checks the handshake authentication information. If the verification fails, the upgrade tool is considered to be an illegal upgrade tool, and the mobile terminal maintains the upgrade prohibition state, and the subsequent upgrade action is not allowed. Therefore, the user can be prevented from using the illegal upgrade tool to bypass the signature verification process for the version file.

 3. The mobile terminal checks the version files of the firmware version.

During the upgrade process, each time the mobile terminal receives a version file, it will verify the digital signature of the version file. If it fails, the upgrade process will be stopped. Therefore, it can prevent illegal tools from bypassing the mobile terminal. The end authentication mechanism performs a firmware upgrade.

 4. The verification of each version file of the firmware version during the startup process of the mobile terminal.

 The digital signature of the version file is verified during the startup of the mobile terminal. If no digital signature information or digital signature verification fails, the user is prompted and enters the upgrade mode until the upgrade to the legal digital signature version. Therefore, it is possible to prevent the mobile terminal from being upgraded to an illegal firmware version by directly burning the storage medium.

 FIG. 2 is a flowchart of an implementation of preventing an upgrade of a mobile terminal to an illegal firmware version according to an embodiment of the present invention. As shown in FIG. 2, the method includes:

 Step 201: The upgrade tool performs validity verification on each version file of the firmware version stored on the master device by using the signature key paired with the key used by the digital signature of the mobile terminal manufacturer and the corresponding digest algorithm.

 Step 202: If the version files of all the firmware versions are valid, the upgrade tool sends the handshake authentication command and the handshake authentication information of the handshake authentication data to the mobile terminal, where the handshake authentication data includes the plaintext before encryption and the encrypted Cipher text.

 Step 203: After receiving the handshake authentication command, the mobile terminal decrypts the ciphertext data by using the stored handshake key, and checks whether the decrypted data is consistent with the received plaintext data. If they match, the internal handshake success flag is set to true, and the message of successful handshake is fed back to the upgrade tool.

 Step 204: After the upgrade tool receives the handshake verification result, it checks whether the handshake is successful. If successful, the mode switching information is sent to the mobile terminal, and the mobile terminal is notified to switch to the upgrade mode.

 Step 205: After receiving the mode switching information, the mobile terminal checks whether the handshake success flag is true.

 Step 206: If true, switch to the upgrade mode, and feed back the information about the mode switch success to the upgrade tool.

 Step 207: The upgrade tool receives and detects feedback information of the mode switching information. If the handover is successful, the first version file of the firmware version is delivered to the mobile terminal.

Step 208: The mobile terminal receives the version file, temporarily stores the spare storage area, and verifies the digital signature of the version file. If it is legal, it will send feedback to the upgrade tool that the version file is successfully received. Interest.

 Step 209: The version files in the firmware version are sent one by one, and after all the delivery is completed, the upgrade tool notifies the mobile terminal that all the version files are delivered, and the mobile terminal is required to replace the old version.

 Step 210: The mobile terminal replaces the current version with the firmware version stored in the spare storage area, and feeds back the version replacement result to the upgrade tool.

 Step 211: The upgrade tool checks the version replacement information. If the replacement is successful, the mobile terminal is notified to exit the upgrade mode and restart.

 Step 212: The mobile terminal restarts with the new firmware version. During the restart process, it is detected whether the digital signature of each version file is legal. If it is legal, it will start normally and the upgrade process is completed.

 Step 213: If the version file is abnormal during the restart of the mobile terminal, the user is prompted, and the upgrade mode is automatically entered. Until the terminal is upgraded to the legal firmware version.

 In the above process, the steps to prevent illegal firmware upgrades are as follows:

 1. In step 201, the upgrade tool verifies the legality of each version file of the firmware version, and if the verification fails, the upgrade process is aborted, thereby preventing unsigned illegal firmware upgrade.

 2. In steps 202-205, the upgrade tool will handshake with the mobile terminal to prevent the unauthenticated illegal upgrade tool from upgrading the mobile terminal.

 3. In step 208, the mobile terminal checks the validity of the received version file to ensure that the received version file is legal.

 4. In step 213, when the mobile terminal is restarted for the first time after the upgrade is completed, the signature verification module that is solidified in the ROM of the mobile terminal is used to perform digital signature verification on each version file loaded, and if not successful, the mobile terminal automatically enters. Upgrade mode, waiting for handshake authentication, until upgrading to a legal version.

 The embodiment of the invention further provides a system for preventing a mobile terminal from upgrading to an illegal firmware version, including a mobile terminal and an upgrade tool running on a master control device (such as a PC), mutual authentication by the mobile terminal and the upgrade tool, and two The verification of each version file of the upgraded firmware version implements the function of preventing the device from being upgraded to an illegal firmware version.

The mobile terminal is configured to perform handshake check processing on the upgrade tool by using the handshake authentication information, and receive the firmware version to be upgraded delivered by the upgrade tool according to the handshake verification result, and the received firmware to be upgraded The firmware version is verified by the version validity check. As a result, the firmware version is upgraded. FIG. 3 is a structural diagram of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 3, the method includes:

 The handshake authentication module is configured to decrypt the ciphertext data in the handshake authentication data by using the pre-stored handshake key after receiving the handshake authentication information, and obtain the plaintext data and the handshake authentication data. The plaintext data is matched to determine that the mobile terminal successfully handshaking with the upgrade tool;

 The signature verification module is configured to perform digital signature verification on each version file of the firmware version to be upgraded by using the pre-stored signature key. If each version file is successfully verified, the firmware to be upgraded is determined. The version is the legal firmware version;

 Upgrade the agent module, set to interact with the upgrade tool;

 Other service function modules are set to implement other service functions such as short message service and call service.

 The upgrade tool is configured to perform version legality verification processing on the firmware version to be upgraded, and send handshake authentication information to the mobile terminal according to the verification result of the version validity. 4 is a structural diagram of an upgrade tool provided by an embodiment of the present invention. As shown in FIG. 4, the method includes:

 The signature verification module is configured to perform digital signature verification on each version file of the upgrade firmware version by using the pre-stored signature key. If the verification of each version file is successful, it is determined that the firmware version to be upgraded is Legal firmware version;

 The handshake verification module is configured to: when determining that the firmware version to be upgraded is a legal firmware version, generate handshake authentication information including a handshake authentication command and handshake authentication data, and send the handshake authentication information to the mobile terminal; and the data transmission module is configured to be to be upgraded firmware The version is sent to the mobile terminal;

The command transceiver module is configured to receive an instruction from the mobile terminal or send an instruction to the mobile terminal. The master device is responsible for providing the operating environment of the upgrade tool and providing data channels for data interaction with the mobile terminal. The upgrade tool runs on the master device, and is responsible for verifying the validity of the firmware version file, performing handshake authentication with the terminal, and sending the version file stored on the master device to the mobile terminal. The mobile terminal is responsible for shaking hands with the upgrade tool, receiving the version file delivered by the upgrade tool, verifying the validity of the received version file, and writing the legal version file to the storage medium of the mobile terminal. The firmware version can consist of multiple version files, which are divided into legal and illegal versions. Figure 5 is the invention The digital signature in the version file provided by the embodiment constitutes a structural diagram, and each version file of the legal version includes digital signature information of the terminal manufacturer, and the illegal version does not include. Affecting the illegal firmware version used by the mobile terminal, thereby effectively protecting the normal operation and use of the mobile terminal, and protecting the interests of the user and the operator.

 One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program instructing the associated hardware, such as a read-only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware or in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

 Although the invention has been described in detail above, the invention is not limited thereto, and various modifications may be made by those skilled in the art in accordance with the principles of the invention. Therefore, modifications in accordance with the principles of the invention should be understood as falling within the scope of the invention.

Industrial applicability

 The embodiment of the invention can prevent the mobile terminal from being upgraded to the illegal firmware version, improve the security of the mobile terminal upgrade process, and effectively ensure that the interests of the terminal user and the operator are not infringed by the illegal firmware.

Claims

Claim  1. A method for upgrading a firmware version, including:  The upgrade tool performs the version validity check processing on the upgraded firmware version, and sends the handshake authentication information to the mobile terminal according to the version validity check result.  The mobile terminal performs the handshake verification process on the upgrade tool by using the handshake authentication information, and receives the firmware version to be upgraded delivered by the upgrade tool when the handshake verification is successful.  The mobile terminal performs version legality verification processing on the received firmware version to be upgraded, and performs firmware version upgrade when the version legality verification result is a legal firmware version.  2. The method according to claim 1, wherein each version file of the firmware version to be upgraded has a digital signature, and the step of the upgrade tool performing a version legality verification process on the upgrade firmware version includes: an upgrade tool The digital signature of each version file is verified by using the pre-stored signature key. If each version file of the firmware version to be upgraded is successfully verified, it is determined that the firmware version to be upgraded is a legal firmware version.  The method of claim 2, wherein the upgrading tool sends the handshake authentication information to the mobile terminal according to the version validity check result: when the upgrade tool determines that the firmware version to be upgraded is When the legal firmware version is generated, handshake authentication information including a handshake authentication command and handshake authentication data is generated and sent to the mobile terminal.  The method according to claim 3, wherein the step of performing handshake check processing on the upgrade tool by using the handshake authentication information by the mobile terminal comprises: after the mobile terminal receives the handshake authentication information, Decrypting the ciphertext data in the handshake authentication data by using the pre-stored handshake key, and decrypting the decrypted plaintext data and the plaintext number in the handshake authentication data 5. The method of claim 4, further comprising:  After the mobile terminal determines that the handshake with the upgrade tool is successful, the mobile terminal switches to the upgrade mode according to the mode switching information from the upgrade tool, so as to receive the firmware version delivered by the upgrade tool. The method according to claim 5, wherein the step of the mobile terminal performing a version legality verification process on the received firmware version to be upgraded comprises: using the pre-stored signature key by the mobile terminal, Perform digital signature verification on each version of the received firmware version to be upgraded. If the verification of each version file is successful, it is determined that the firmware version to be upgraded is a legal firmware version. 7. The method of any of claims 1-6, further comprising:  The mobile terminal replaces the current firmware version with the firmware version to be upgraded, and performs version legality verification processing on the firmware version to be upgraded during the restart using the firmware version to be upgraded.  8. A firmware version upgrade system, including an upgrade tool and a mobile terminal, wherein: the upgrade tool is configured to: perform a version legality verification process on the firmware version to be upgraded, and perform handshake authentication information according to the version validity check result. Sent to the mobile terminal;  The mobile terminal is configured to: perform handshake check processing on the upgrade tool by using the handshake authentication information, and receive the firmware version to be upgraded delivered by the upgrade tool when the handshake verification is successful, and the received firmware is received. Upgrade the firmware version for version legality verification. When the version validity check result is the legal firmware version, upgrade the firmware version.  9. The system according to claim 8, wherein the upgrade tool comprises:  a signature verification module, configured to: perform digital signature verification on each version file of the firmware version to be upgraded by using a pre-stored signature key, and if the verification of each version file is successful, determine the firmware to be upgraded. The version is the legal firmware version;  The handshake verification module is configured to: when it is determined that the firmware version to be upgraded is a legal firmware version, generate handshake authentication information including a handshake authentication command and handshake authentication data, and send the handshake authentication information to the mobile terminal.  The system of claim 9, wherein the mobile terminal comprises:  The handshake authentication module is configured to: after receiving the handshake authentication information, decrypt the ciphertext data in the handshake authentication data by using a pre-stored handshake key, and decrypt the decrypted plaintext data with the handshake Matching the plaintext data in the authentication data to determine whether the mobile terminal successfully upgrades with the upgrade tool;  a signature verification module, configured to: perform digital signature verification on each version file of the firmware version to be upgraded by using a pre-stored signature key, and if each version file is verified successfully, determine the to-be-determined The upgrade firmware version is the legal firmware version. 11. A mobile terminal, comprising: The handshake authentication module is configured to: perform handshake verification processing on the upgrade tool by using the handshake authentication information sent by the upgrade tool, and receive the firmware version to be upgraded delivered by the upgrade tool when the handshake verification is successful, where The handshake authentication information includes a validity check result of the version to be upgraded;  The signature verification module is configured to: perform version verification processing on the received firmware version to be upgraded, and perform firmware version upgrade when the version validity check result is a legal firmware version;  Upgrade the agent module, set to interact with the upgrade tool.  12. The mobile terminal of claim 11, wherein  The handshake authentication module is configured to: after receiving the handshake authentication information, decrypt the ciphertext data in the handshake authentication data by using a pre-stored handshake key, and decrypt the decrypted plaintext data with the The plaintext data in the handshake authentication data is matched to determine whether the mobile terminal and the upgrade tool successfully handshake.  13. The mobile terminal of claim 11, wherein  The signature verification module is configured to: perform digital signature verification on each version file of the received firmware version to be upgraded by using a pre-stored signature key, and if each version file is successfully verified, determine the The firmware version to be upgraded is the legal firmware version.