Upgrade verification method, device, terminal and system

Abstract

The invention discloses an upgrade verification method, device, terminal and system. The method comprises the steps that the terminal sends an upgrade query request to a control server; the control server sends upgrading and downloading information to the terminal, the upgrading and downloading information comprises a downloading address of an upgrading package, upgrading version information and first verification information, and the first verification information is used for verifying a downloading source of the upgrading package; the terminal sends a download request of an upgrade package corresponding to the upgrade version information to a download server based on the download address; the download server sends an upgrade package and second verification information to the terminal, wherein the second verification information is used for verifying the type and the upgrade version of the upgrade package; the terminal verifies the first verification information; when the verificationis passed, the terminal verifies the second verification information; and when the second verification information passes the verification, the terminal executes an upgrade operation based on the upgrade package.

Description

technical field [0001] The present invention relates to the technical field of Internet communication, in particular to an upgrade verification method, device, terminal and system. Background technique [0002] With the rapid development of Internet technology and computer technology, terminal devices with various application functions have been widely used. In order to optimize various applications on the terminal device, it is often necessary to upgrade the applications on the terminal online. For example, a car with OTA (Over-the-Air) function can upgrade the car's ECU (Electronic Control Unit, Electronic Control Unit) online through the Internet to achieve ECU performance optimization and upgrade. [0003] At present, in the processing process based on the upgrade download service, it is often necessary to verify the digital signature of the information transmitted in the upgrade process to avoid problems such as information tampering. Specifically, the existing upgrad...

AI Technical Summary

Problems solved by technology

The above-mentioned upgrade verification process only checks the legitimacy of the download of the upgrade package. If hackers invade the control server, they may maliciously construct the upgrade package of the old version containing more security holes as the upgrade package of the new version, or transfer other malicious The upgrade package is disguised as a new version of the upgrade package, causing the terminal to roll back to the old version with more security vulnerabilities, or flashing abnormal upgrade packages, etc.

Images