Method and system for preventing set top box software from malicious upgrade

Abstract

The invention provides a method for preventing set top box software from malicious upgrade, comprising the steps as follows: step 10, encapsulating upgrade data by adopting RSA asymmetric cryptographic algorithm via a front end and transmitting the encapsulated data to a set top box; step 20, authenticating data received by the set top box, and entering a step 30 if the authentication is successful; otherwise, quitting the upgrade; step 30, analyzing the data received by the set top box to obtain upgrade data and performing upgrade according to the upgrade data. The invention further provides a system for preventing set top box software from malicious upgrade, comprising a data encapsulation module, an authentication module and an upgrade module. The method and the system of the invention improve safety of data and effectively prevent illegal operation.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and system for preventing malicious upgrade of set-top box software. Background technique [0002] At this stage, set-top box software upgrades are generally implemented through online over-the-air upgrades (OTA), USB upgrades, or serial port upgrades. From the header control information of the received upgrade data, the manufacturer ID, hardware version, and software version are analyzed. And compare it with the information of the running software of the current set-top box, and perform the upgrade operation if the comparison is successful, otherwise the upgrade cannot be completed. Due to the low confidentiality of information such as manufacturer ID, hardware version, and software version, it is easy to leak, and it is easy to cause an illegally generated malicious program to upgrade and destroy all set-top box software in operation. [0003] The existing appl...

AI Technical Summary

Problems solved by technology

[0002] At this stage, set-top box software upgrades are generally implemented through online over-the-air upgrades (OTA), USB upgrades, or serial port upgrades. From the header control information of the received upgrade data, the manufacturer ID, hardware version, and software version are analyzed. And compare it with the information of the running software of the current set-top box, and perform the upgrade operation if the comparison is successful, otherwise the upgrade cannot be completed

Due to the low confidentiality of manufacturer ID, hardware version, software version and other information, it is easy to leak, and it is easy to cause an illegally generated malicious program to upgrade and destroy all set-top box software in operation.

[0003] The existing application number is 200710119226.3 Chinese patent "set-top box software upgrade method and upgrade system", the method includes the following steps: the set-top box sends an upgrade package download request carrying upgrade parameters to the upgrade service device; receiving the upgrade service device returns The upgrade package, the upgrade package summary and the encryption summary obtained after the summary of the upgrade package is encrypted; the encryption summary is sent to the subscriber identification module for decryption, and when the upgrade package summary is the same as the decryption result, the upgrade package is installed, Compared with this application document, the entire process of this patent is more complicated, and data transmission is performed multiple times, which increases the possibility of being intercepted during data transmission and causes security risks.

Images