Remote deployment implementation method and device based on security control

Abstract

The embodiment of the invention provides a remote deployment implementation method and device based on security control. Relates to the field of software security upgrading. The method comprises the following steps: uploading a to-be-upgraded file to a backup area of a platform host; sending an upgrade restart command to the platform host and receiving a response; if the response is correct and the uploading of the to-be-upgraded file is completed, copying the to-be-upgraded file in the backup area to the storage area of the platform host by using the platform host, comparing the MD5 code of the to-be-upgraded file in the backup area with the MD5 code of the to-be-upgraded file in the storage area, and if the MD5 codes are consistent, generating a copy success mark through the platform host and executing a restart operation; and after the platform host self-starting script detects the copy success mark, copying the to-be-upgraded file in the storage area to the operation area of the platform host by using the platform host, comparing the MD5 code of the to-be-upgraded file in the operation area with the MD5 code of the to-be-upgraded file in the storage area, if the MD5 codes are consistent, operating an upgrading program by using the to-be-upgraded file through the platform host to upgrade the platform host, and if the MD5 codes are consistent, upgrading the platform host. And the security and the reliability of the upgrading process are improved.

Description

Technical Field

[0001] The present disclosure relates to the field of software security upgrade, and in particular to a remote deployment implementation method and device based on security control. Background Art

[0002] With the rapid development of information technology, software upgrades are becoming more and more frequent. However, traditional software upgrade methods have security risks, such as upgrade package tampering and data leakage during the upgrade process. Since rail transit safety equipment only supports local area networks, in existing real-time operating systems, software upgrades support the use of Secure File Transfer Protocol (SFTP), which provides strong security and data integrity verification when transferring files in open networks, but also has some disadvantages. For example, in order to ensure security and data integrity verification, the encryption and decryption process during the transmission process of SFTP requires more computing resources, thereby increasing system overhead; SFTP relies on SSH connection. If the SSH connection is interrupted during the transmission process, the file transfer may fail. If the SFTP protocol is used directly to upgrade the software and overwrite the original file, the risk of upgrade failure cannot be dealt with; using the SFTP protocol alone on a 2x2oo2 secure computer platform cannot guarantee the data consistency of dual CPUs.

[0003] The present invention aims to solve the problems of data security and dual-CPU data consistency in a software upgrade process of a 2x2oo2 secure computer platform based on a real-time operating system. Summary of the invention

[0004] The present invention provides a remote deployment implementation method and apparatus, device and storage medium based on security control.

[0005] According to a first aspect of the present disclosure, a remote deployment implementation method based on security control is provided. The method comprises:

[0006] Upload the files to be upgraded to the backup area of ​​the 2x2oo2 platform host;

[0007] Send an upgrade and restart command to the 2x2oo2 platform host and receive a corresponding response;

[0008] If all the responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the files to be upgraded; if the uploading of the files to be upgraded is completed, the 2x2oo2 platform host is used to copy the files to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the backup area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host generates a copy success flag and executes a restart operation;

[0009] When the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded.

[0010] In some implementations of the first aspect, the method further includes:

[0011] During the process of uploading the file to be upgraded, an upload completion verification request packet is sent to the 2x2oo2 platform host and an upload completion verification response packet is received from the 2x2oo2 platform host;

[0012] If the MD5 code of the file to be upgraded in the upload completion verification request data packet is inconsistent with the MD5 code of the file to be upgraded in the upload completion verification response data packet, a prompt of inconsistent verification is displayed and the file corresponding to the inconsistent MD5 code is deleted using the 2x2oo2 platform host.

[0013] In some implementations of the first aspect, sending an upgrade restart command to a 2x2oo2 platform host and receiving a corresponding response includes:

[0014] Send the first upgrade and restart command to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 can perform binary processing on the first upgrade and restart command received by themselves respectively, so that CPU1 and CPU2 can make corresponding first responses to the first upgrade and restart command received by themselves at the same time;

[0015] If there is at least one first response error, the upgrade operation is terminated;

[0016] Otherwise, a secondary upgrade restart command is sent to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, so that CPU1 and CPU2 simultaneously make corresponding secondary responses to the secondary upgrade restart command received by themselves;

[0017] If the two first responses and the two second responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the file to be upgraded.

[0018] In some implementations of the first aspect, the step of CPU1 and CPU2 performing binary processing on the first upgrade and restart command received by themselves respectively includes:

[0019] CPU1 and CPU2 send the first upgrade restart command received by each other once;

[0020] The CPU1 and the CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, including:

[0021] CPU1 and CPU2 respectively send the secondary upgrade restart command received by themselves to each other once.

[0022] In some implementations of the first aspect, the method further includes:

[0023] If the upload of the files to be upgraded is not complete, use the 2x2oo2 platform host to clear all files in the backup area and perform a restart.

[0024] In some implementations of the first aspect, the method further includes:

[0025] If the MD5 code of the file to be upgraded in the backup area is inconsistent with the MD5 code of the file to be upgraded in the storage area, a copy failure flag is generated by the 2x2oo2 platform host and a restart operation is performed.

[0026] According to a second aspect of the present disclosure, a remote deployment implementation device based on security control is provided. The device includes:

[0027] The file upload module to be upgraded is used to upload the file to be upgraded to the backup area of ​​the 2x2oo2 platform host;

[0028] The upgrade and restart command sending module is used to send the upgrade and restart command to the 2x2oo2 platform host and receive the corresponding response;

[0029] The file copy module to be upgraded is used to use the 2x2oo2 platform host to determine the completion of uploading the file to be upgraded if all the responses are correct; if the uploading of the file to be upgraded is completed, the 2x2oo2 platform host is used to copy the file to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the file to be upgraded in the backup area with the MD5 code of the file to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host generates a copy success flag and executes a restart operation;

[0030] The platform host upgrade module is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host by using the 2x2oo2 platform host after the self-starting script of the 2x2oo2 platform host detects the copy success mark, and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded through the 2x2oo2 platform host.

[0031] According to a third aspect of the present disclosure, an electronic device is provided. The electronic device includes: at least one processor; and a memory connected to the at least one processor in communication; the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can perform the method described above.

[0032] According to a fourth aspect of the present disclosure, a non-transitory computer-readable storage medium storing computer instructions is provided, where the computer instructions are used to cause a computer to execute the method as described above.

[0033] In the present disclosure, files to be upgraded are uploaded to the backup area of ​​the 2x2oo2 platform host; an upgrade restart command is sent to the 2x2oo2 platform host and a corresponding response is received; if the responses are all correct, the 2x2oo2 platform host is used to determine the completion of uploading the files to be upgraded; if the uploading of the files to be upgraded is completed, the 2x2oo2 platform host is used to copy the files to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the backup area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, a copy success mark is generated by the 2x2oo2 platform host and a restart operation is performed; when the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is used to run the upgrade program using the files to be upgraded to upgrade the 2x2oo2 platform host. In this way, data security and reliability during software upgrades can be improved, data consistency of dual CPUs can be ensured, and system overhead can be reduced.

[0034] It should be understood that the contents described in the summary of the invention are not intended to limit the key or important features of the embodiments of the present disclosure, nor are they intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The above and other features, advantages and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. The accompanying drawings are used to better understand the present solution and do not constitute a limitation of the present disclosure. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements, among which:

[0036] Figure 1 A flowchart of a remote deployment implementation method based on security control provided by an embodiment of the present disclosure is shown;

[0037] Figure 2A structural diagram of a remote deployment implementation device based on security control provided by an embodiment of the present disclosure is shown;

[0038] Figure 3 A block diagram of an exemplary electronic device capable of implementing an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0040] In addition, the term "and / or" in this article is only a description of the association relationship between the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0041] In view of the problems in the background technology, the embodiments of the present disclosure provide a remote deployment implementation method and device based on security control. Specifically, the files to be upgraded are uploaded to the backup area of ​​the 2x2oo2 platform host; an upgrade and restart command is sent to the 2x2oo2 platform host and a corresponding response is received; if the responses are all correct, the 2x2oo2 platform host is used to determine the completion of the upload of the files to be upgraded; if the upload of the files to be upgraded is completed, the 2x2oo2 platform host is used to copy the files to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the backup area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, a copy success mark is generated by the 2x2oo2 platform host and a restart operation is performed; when the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is used to run the upgrade program using the files to be upgraded to upgrade the 2x2oo2 platform host. In this way, data security and reliability during software upgrades can be improved, data consistency of dual CPUs can be ensured, and system overhead can be reduced.

[0042] The following describes in detail the remote deployment implementation method and device based on security control provided by the embodiments of the present disclosure through specific embodiments in conjunction with the accompanying drawings.

[0043] Figure 1 A flowchart of a remote deployment implementation method based on security control provided by an embodiment of the present disclosure is shown. The method 100 includes the following steps:

[0044] S110, uploading the file to be upgraded to the backup area of ​​the 2x2oo2 platform host.

[0045] In some embodiments, during the upload of the file to be upgraded, an upload completion verification request packet is sent to the 2x2oo2 platform host and an upload completion verification response packet sent by the 2x2oo2 platform host is received;

[0046] If the MD5 code of the file to be upgraded in the upload completion verification request data packet is inconsistent with the MD5 code of the file to be upgraded in the upload completion verification response data packet, a prompt of inconsistent verification is displayed and the file corresponding to the inconsistent MD5 code is deleted using the 2x2oo2 platform host.

[0047] S120, sending an upgrade restart command to the 2x2oo2 platform host and receiving a corresponding response.

[0048] In some embodiments, sending an upgrade restart command to a 2x2oo2 platform host and receiving a corresponding response includes:

[0049] Send the first upgrade and restart command to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 can perform binary processing on the first upgrade and restart command received by themselves respectively, so that CPU1 and CPU2 can make corresponding first responses to the first upgrade and restart command received by themselves at the same time;

[0050] If there is at least one first response error, the upgrade operation is terminated;

[0051] Otherwise, a secondary upgrade restart command is sent to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, so that CPU1 and CPU2 simultaneously make corresponding secondary responses to the secondary upgrade restart command received by themselves;

[0052] If the two first responses and the two second responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the file to be upgraded.

[0053] In some embodiments, the steps of CPU1 and CPU2 performing binary processing on the first upgrade and restart command received by themselves respectively include:

[0054] CPU1 and CPU2 send the first upgrade restart command received by each other once;

[0055] The CPU1 and the CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, including:

[0056] CPU1 and CPU2 respectively send the secondary upgrade restart command received by themselves to each other once.

[0057] In some embodiments, CPU1 and CPU2 also perform binary processing on the maintenance requests, file update requests and MD5 codes in the upgrade program that they respectively receive. Through these binary processing, CPU1 and CPU2 can simultaneously respond to the same instruction that they respectively receive, thereby ensuring the consistency of data transmission.

[0058] S130, if all the responses are correct, the 2x2oo2 platform host is used to determine the completion status of uploading the files to be upgraded; if the uploading of the files to be upgraded is completed, the 2x2oo2 platform host is used to copy the files to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the backup area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, a copy success flag is generated by the 2x2oo2 platform host and a restart operation is performed.

[0059] In some embodiments, the method 100 further includes:

[0060] If the upload of the files to be upgraded is not complete, use the 2x2oo2 platform host to clear all files in the backup area and perform a restart.

[0061] In some embodiments, the method 100 further includes:

[0062] If the MD5 code of the file to be upgraded in the backup area is inconsistent with the MD5 code of the file to be upgraded in the storage area, a copy failure flag is generated by the 2x2oo2 platform host and a restart operation is performed.

[0063] S140, when the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded through the 2x2oo2 platform host.

[0064] In some embodiments, if the MD5 code of the file to be upgraded in the running area is inconsistent with the MD5 code of the file to be upgraded in the storage area, the upgrade of the 2x2oo2 platform host is terminated.

[0065] According to an embodiment of the present disclosure, a file to be upgraded is uploaded to a backup area of ​​a 2x2oo2 platform host; an upgrade restart command is sent to the 2x2oo2 platform host and a corresponding response is received; if all the responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the file to be upgraded; if the uploading of the file to be upgraded is completed, the 2x2oo2 platform host is used to copy the file to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the file to be upgraded in the backup area with the MD5 code of the file to be upgraded in the storage area. If the two MD5 codes are consistent, a copy success mark is generated by the 2x2oo2 platform host and a restart operation is performed; when the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the file to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the file to be upgraded in the running area with the MD5 code of the file to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is used to run the upgrade program using the file to be upgraded to upgrade the 2x2oo2 platform host. In this way, data security and reliability during software upgrades can be improved, data consistency of dual CPUs can be ensured, and system overhead can be reduced.

[0066] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should be aware that the present disclosure is not limited by the order of the actions described, because according to the present disclosure, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present disclosure.

[0067] The above is an introduction to the method embodiment. The following is a further explanation of the scheme disclosed in the present invention through an apparatus embodiment.

[0068] Figure 2 The structure diagram of a remote deployment implementation device based on security control provided by an embodiment of the present disclosure is shown. The device 200 includes:

[0069] The file uploading module 210 is used to upload the file to be upgraded to the backup area of ​​the 2x2oo2 platform host.

[0070] In some embodiments, the apparatus 200 is specifically configured to:

[0071] During the process of uploading the file to be upgraded, an upload completion verification request packet is sent to the 2x2oo2 platform host and an upload completion verification response packet is received from the 2x2oo2 platform host;

[0072] If the MD5 code of the file to be upgraded in the upload completion verification request data packet is inconsistent with the MD5 code of the file to be upgraded in the upload completion verification response data packet, a prompt of inconsistent verification is displayed and the file corresponding to the inconsistent MD5 code is deleted using the 2x2oo2 platform host.

[0073] The upgrade restart command sending module 220 is used to send an upgrade restart command to the 2x2oo2 platform host and receive a corresponding response.

[0074] In some embodiments, the upgrade restart command sending module 220 is specifically used to:

[0075] Send an upgrade and restart command to the 2x2oo2 platform host and receive a corresponding response, including:

[0076] Send the first upgrade and restart command to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 can perform binary processing on the first upgrade and restart command received by themselves respectively, so that CPU1 and CPU2 can make corresponding first responses to the first upgrade and restart command received by themselves at the same time;

[0077] If there is at least one first response error, the upgrade operation is terminated;

[0078] Otherwise, a secondary upgrade restart command is sent to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, so that CPU1 and CPU2 simultaneously make corresponding secondary responses to the secondary upgrade restart command received by themselves;

[0079] If the two first responses and the two second responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the file to be upgraded.

[0080] In some embodiments, the upgrade restart command sending module 220 is further used to:

[0081] The CPU1 and the CPU2 respectively perform binary processing on the first upgrade and restart command received by themselves, including:

[0082] CPU1 and CPU2 send the first upgrade restart command received by each other once;

[0083] The CPU1 and the CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, including:

[0084] CPU1 and CPU2 respectively send the secondary upgrade restart command received by themselves to each other once.

[0085] The file copy module 230 to be upgraded is used to use the 2x2oo2 platform host to determine the completion status of uploading the file to be upgraded if all the responses are correct; if the uploading of the file to be upgraded is completed, the 2x2oo2 platform host is used to copy the file to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the file to be upgraded in the backup area with the MD5 code of the file to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host generates a copy success flag and executes a restart operation.

[0086] In some embodiments, the to-be-upgraded file copy module 230 is specifically used for:

[0087] If the upload of the files to be upgraded is not complete, use the 2x2oo2 platform host to clear all files in the backup area and perform a restart.

[0088] In some embodiments, the to-be-upgraded file copy module 230 is further configured to:

[0089] If the MD5 code of the file to be upgraded in the backup area is inconsistent with the MD5 code of the file to be upgraded in the storage area, a copy failure flag is generated by the 2x2oo2 platform host and a restart operation is performed.

[0090] The platform host upgrade module 240 is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host by using the 2x2oo2 platform host after the self-starting script of the 2x2oo2 platform host detects the copy success mark, and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded through the 2x2oo2 platform host.

[0091] Understandably, Figure 2 Each module / unit in the illustrated device 200 has the function of implementing each step in the method 100 provided in the embodiment of the present disclosure and can achieve its corresponding technical effect. For the sake of brevity, they will not be described in detail here.

[0092] Figure 3A block diagram of an exemplary electronic device capable of implementing an embodiment of the present disclosure is shown. The electronic device 300 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device 300 may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present disclosure described and / or required herein.

[0093] like Figure 3 As shown, the electronic device 300 includes a computing unit 301, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 302 or a computer program loaded from a storage unit 308 into a random access memory (RAM) 303. In the RAM 303, various programs and data required for the operation of the electronic device 300 can also be stored. The computing unit 301, the ROM 302, and the RAM 303 are connected to each other via a bus 304. An I / O interface 305 is also connected to the bus 304.

[0094] A number of components in the electronic device 300 are connected to the I / O interface 305, including: an input unit 306, such as a keyboard, a mouse, etc.; an output unit 307, such as various types of displays, speakers, etc.; a storage unit 308, such as a disk, an optical disk, etc.; and a communication unit 309, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 309 allows the electronic device 300 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0095] The computing unit 301 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 301 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 301 performs the various methods and processes described above, such as method 100. For example, in some embodiments, the method 100 may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 308. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 300 via the ROM 302 and / or the communication unit 309. When the computer program is loaded into the RAM 303 and executed by the computing unit 301, one or more steps of the method 100 described above may be performed. Alternatively, in other embodiments, the computing unit 301 may be configured to perform the method 100 in any other appropriate manner (e.g., by means of firmware).

[0096] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0097] The program code for implementing the method of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0098] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0099] It should be noted that the present disclosure also provides a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to enable a computer to execute method 100 and achieve the corresponding technical effect achieved by executing the method in the embodiment of the present disclosure. For the sake of concise description, they are not repeated here.

[0100] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0101] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communications network). Examples of communications networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0102] A computer system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, a server of a distributed system, or a server combined with a blockchain.

[0103] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solutions disclosed in this disclosure can be achieved, and this document does not limit this.

[0104] The above specific implementations do not constitute a limitation on the protection scope of the present disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A remote deployment implementation method based on security control, characterized in that: include: Upload the files to be upgraded to the backup area of ​​the 2x2oo2 platform host; Send an upgrade and restart command to the 2x2oo2 platform host and receive a corresponding response; If all the responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the files to be upgraded; if the uploading of the files to be upgraded is completed, the 2x2oo2 platform host is used to copy the files to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the backup area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host generates a copy success flag and executes a restart operation; When the self-starting script of the 2x2oo2 platform host detects the copy success mark, the 2x2oo2 platform host is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded.

2. The method according to claim 1, characterized in that The method further comprises: During the process of uploading the file to be upgraded, an upload completion verification request packet is sent to the 2x2oo2 platform host and an upload completion verification response packet is received from the 2x2oo2 platform host; If the MD5 code of the file to be upgraded in the upload completion verification request data packet is inconsistent with the MD5 code of the file to be upgraded in the upload completion verification response data packet, a prompt of inconsistent verification is displayed and the file corresponding to the inconsistent MD5 code is deleted using the 2x2oo2 platform host.

3. The method according to claim 1, characterized in that The sending of an upgrade restart command to the 2x2oo2 platform host and receiving a corresponding response includes: Send the first upgrade and restart command to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 can perform binary processing on the first upgrade and restart command received by themselves respectively, so that CPU1 and CPU2 can make corresponding first responses to the first upgrade and restart command received by themselves at the same time; If there is at least one first response error, the upgrade operation is terminated; Otherwise, a secondary upgrade restart command is sent to CPU1 and CPU2 in the 2x2oo2 platform host respectively, so that CPU1 and CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, so that CPU1 and CPU2 simultaneously make corresponding secondary responses to the secondary upgrade restart command received by themselves; If the two first responses and the two second responses are correct, the 2x2oo2 platform host is used to determine the completion of uploading the file to be upgraded.

4. The method according to claim 3, characterized in that The CPU1 and the CPU2 respectively perform binary processing on the first upgrade and restart command received by themselves, including: CPU1 and CPU2 send the first upgrade restart command received by each other once; The CPU1 and the CPU2 respectively perform binary processing on the secondary upgrade restart command received by themselves, including: CPU1 and CPU2 respectively send the secondary upgrade restart command received by themselves to each other once.

5. The method according to claim 1, characterized in that The method further comprises: If the upload of the files to be upgraded is not complete, use the 2x2oo2 platform host to clear all files in the backup area and perform a restart.

6. The method according to claim 1, characterized in that The method further comprises: If the MD5 code of the file to be upgraded in the backup area is inconsistent with the MD5 code of the file to be upgraded in the storage area, a copy failure flag is generated by the 2x2oo2 platform host and a restart operation is performed.

7. A remote deployment implementation device based on security control, characterized in that: include: The file upload module to be upgraded is used to upload the file to be upgraded to the backup area of ​​the 2x2oo2 platform host; The upgrade and restart command sending module is used to send the upgrade and restart command to the 2x2oo2 platform host and receive the corresponding response; The file copy module to be upgraded is used to use the 2x2oo2 platform host to determine the completion of uploading the file to be upgraded if all the responses are correct; if the uploading of the file to be upgraded is completed, the 2x2oo2 platform host is used to copy the file to be upgraded in the backup area to the storage area of ​​the 2x2oo2 platform host and compare the MD5 code of the file to be upgraded in the backup area with the MD5 code of the file to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host generates a copy success flag and executes a restart operation; The platform host upgrade module is used to copy the files to be upgraded in the storage area to the running area of ​​the 2x2oo2 platform host by using the 2x2oo2 platform host after the self-starting script of the 2x2oo2 platform host detects the copy success mark, and compare the MD5 code of the files to be upgraded in the running area with the MD5 code of the files to be upgraded in the storage area. If the two MD5 codes are consistent, the 2x2oo2 platform host is upgraded by running the upgrade program using the files to be upgraded through the 2x2oo2 platform host.

8. An electronic device, characterized in that: include: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 1 to 6.

9. A non-transitory computer-readable storage medium storing computer instructions, wherein: The computer instructions are used to cause the computer to execute the method according to any one of claims 1-6.

Images