Security chip firmware updating method and device

Abstract

The invention provides a security chip firmware updating method and device. The method is applied to a security chip in a local device, and comprises the following steps: obtaining firmware update data of the security chip sent by the local network device, the firmware update data being data downloaded by the local network device from a certificate authority CA, and the firmware update data comprising a signed firmware update packet; performing security verification on the firmware update package by using a public key infrastructure (PKI) security mechanism; and under the condition that the firmware update package passes the security verification, performing firmware update by using the firmware update package. Based on setting of a PKI architecture, the security chip does not need to establish real-time network connection with the CA, namely the cloud, in the firmware updating process, the problem that in the background art, the working pressure of the cloud is increased based on multiple times of network connection and multiple times of password establishment is avoided, the stability of upgrading transmission is improved, and the firmware updating time of the security chip is shortened.

Description

Technical field [0001] The present disclosure relates to the field of software technology, and in particular to a method and device for updating security chip firmware. Background technique [0002] With the continuous development of science and technology, a variety of security chips have been applied to IoT (The Intern et of Things, Internet of Things) devices for security verification of network data received by IoT devices. At present, the remote update of the firmware of the security chip is mainly implemented using standard processes defined in TSM (Trusted Service Manager) and GP (Global Platform, Global Platform Organization) specification 1. [0003] Specifically, after the developer updates the firmware of the security chip, the firmware update package of the security chip is published on the TSM platform. The TSM platform establishes a real-time connection with the security chip in the IoT device, and uses the newly created key to encrypt the firmware update package. Th...

AI Technical Summary

Problems solved by technology

[0004] IoT devices and local network devices are usually connected using wireless networks. It is difficult to establish stable and fast data transmission based on wireless networks, resulting in network interruption between the security chip and the TSM platform. The TSM platform needs to re-establish a network connection with the security chip to establish a new network. The key encrypts the firmware update package before it can be sent to the security chip

Multiple network connections and multiple key establishments increase the working pressure of the TSM platform, prolong the firmware update time of the security chip, and reduce the user experience

Images