Updating method and electronic equipment

Abstract

The present disclosure discloses an update method and an electronic device, the method comprising: in response to a startup item update program, checking and recording the original state of a system file protection module; if the original state is a first state, setting the system file protection module to a second state before the startup item update program is run; wherein the system file protection module is provided with a key. The present disclosure can set the system file protection module to a second state before the startup item update program is run when the original state of the system file protection module provided with a key is a first state. By setting the state of the system file protection module, it is possible to avoid inputting an encryption password again to start the electronic device after the system of the electronic device is updated, thereby effectively improving the user experience.

Description

Technical Field

[0001] The present disclosure relates to the field of electronic technology, and in particular to an updating method and an electronic device. Background Art

[0002] Currently, after an electronic device is updated, the user is often required to enter an encryption password before the electronic device can be enabled again, resulting in a poor user experience. Summary of the invention

[0003] In view of this, the present disclosure provides the following technical solutions:

[0004] An updating method, comprising:

[0005] In response to the startup item update program, checking and recording the original state of the system file protection module;

[0006] If the original state is the first state, before the startup item update program is run, the system file protection module is set to the second state;

[0007] Wherein, the system file protection module is provided with a key.

[0008] The above method preferably further comprises:

[0009] After the startup item update program is run, checking the recorded original state;

[0010] If the original state is the first state, the system file protection module is set to the first state.

[0011] In the above method, preferably, in response to the startup item update program, checking and recording the original state of the system file protection module includes:

[0012] In response to the startup item update program, starting the first system through the first interface using the first instruction;

[0013] Check the original state of the system file protection module in the first system and record the original state.

[0014] The above method, preferably, if the original state is the first state, then before the startup item update program is run, setting the system file protection module to the second state includes:

[0015] If the original state is the first state, calling the first mode of the first module in the first system, setting the system file protection module to the second state and storing the key;

[0016] Exit the first system.

[0017] In the above method, preferably, if the original state is the first state, setting the system file protection module to the first state includes:

[0018] Using a first instruction to start the first system through a first interface;

[0019] In the first system, calling the first module to use the second mode, setting the system file protection module to the first state and inputting the key into the system file protection module;

[0020] Exit the first system.

[0021] In the above method, preferably, the checking and recording of the original state of the system file protection module includes:

[0022] Confirm the path where the system file protection module is located;

[0023] Find the information attribute table of the system file protection module according to the path;

[0024] Based on whether the specific status parameter under the information attribute table meets the preset value, the original status of the system file protection module is judged and recorded.

[0025] In the above method, preferably, judging and recording the original state of the system file protection module based on whether the specific state parameter under the information attribute table meets the preset value includes:

[0026] If the specific state parameter is the first state value, the original state of the system file protection module is the first state;

[0027] If the specific state parameter is the second state value, the original state of the system file protection module is the second state.

[0028] In the above method, preferably, the boot item update program is a BIOS FW update program.

[0029] In the above method, preferably, the system file protection module includes BitLocker.

[0030] An electronic device, comprising:

[0031] A checking and recording module, configured to check and record the original state of the system file protection module in response to a startup item update program;

[0032] The setting module is used to set the system file protection module to the second state before the startup item update program is run if the original state is the first state; wherein the system file protection module is provided with a key.

[0033] It can be seen from the above technical scheme that the present disclosure discloses an update method and an electronic device, which checks and records the original state of the system file protection module in response to the startup item update program; if the original state is the first state, the system file protection module is set to the second state before the startup item update program is run; wherein the system file protection module is provided with a key. The present disclosure can set the system file protection module to the second state before the startup item update program is run when the original state of the system file protection module provided with the key is the first state. By setting the state of the system file protection module, it is possible to avoid inputting the encryption password again to start the electronic device after the system of the electronic device is updated, thereby effectively improving the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0035] Figure 1 A method flow chart of an updating method embodiment 1 disclosed in the present disclosure;

[0036] Figure 2 A method flow chart of an updating method embodiment 2 disclosed in the present disclosure;

[0037] Figure 3 This is a structural diagram of an electronic device embodiment 1 disclosed in the present disclosure;

[0038] Figure 4 This is a schematic diagram of the structure of an electronic device embodiment 2 disclosed in the present invention. DETAILED DESCRIPTION

[0039] The technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure. The technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure.

[0040] like Figure 1 As shown, it is a method flow chart of an update method embodiment 1 disclosed in the present invention, and the method can be applied to electronic devices containing multiple updateable systems, such as mobile phones, pads, notebooks or computers.

[0041] Specifically, the method in Embodiment 1 of the present method may include the following steps:

[0042] S101, in response to a startup item update program, checking and recording an original state of a system file protection module;

[0043] In response to the startup item update program, that is, when it is detected that the system in the electronic device needs to be updated, the system file protection module is checked and the original state of the system file protection module is recorded, that is, the current state of the system file protection module is recorded.

[0044] Among them, at least a key is set in the system file protection module. The system and user data of the electronic device can be protected by the system file protection module and the key set in the system file protection module, ensuring that the electronic device will not be tampered with even if there is no participation, lost or stolen.

[0045] The original state may be the first state or the second state. Specifically, the first state indicates that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module. The second state indicates that the current system file protection module cannot encrypt and protect the electronic device.

[0046] S102: If the original state is the first state, before the startup item update program is run, the system file protection module is set to the second state; wherein the system file protection module is provided with a key.

[0047] When the original state of the system file protection module is the first state, that is, the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module, then before running the startup item update program, that is, before updating the system in the electronic device, the state of the system file protection module is set from the first state to the second state, that is, the state of the system file protection module is set so that the current system file protection module cannot encrypt and protect the electronic device, thereby ensuring that after the system in the electronic device is updated, the user does not need to enter the encryption password again to start the electronic device, effectively improving the user experience.

[0048] As can be seen from the above scheme, in an update method provided by Embodiment 1 of the present disclosure, in response to the boot-up item update program, the original state of the system file protection module is checked and recorded; if the original state is the first state, the system file protection module is set to the second state before the boot-up item update program is run; wherein the system file protection module is provided with a key. Thus, the present disclosure can set the system file protection module to the second state before the boot-up item update program is run when the original state of the system file protection module provided with the key is the first state. By setting the state of the system file protection module, it is possible to avoid inputting the encryption password again to start the electronic device after the system of the electronic device is updated, thereby effectively improving the user experience.

[0049] In one implementation, in the above step S101, in response to the startup item update program, checking and recording the original state of the system file protection module can be implemented in the following manner:

[0050] First, in response to a startup item update program, a first system is started through a first interface using a first instruction; then, an original state of a system file protection module in the first system is checked and recorded.

[0051] For example, taking the startup item update program as a BIOS FW update program and the first system as a Windows system, the system file protection module may include BitLocker. When it is detected that the BIOS FW update program needs to be updated, the Call Bootmgfw.efi instruction is used to start the Windows system through the EFI shell, and then the original status of BitLocker in the Windows system is checked and recorded.

[0052] In one implementation, in the above step S102, if the original state is the first state, the system file protection module is set to the second state before the startup item update program is run, which can be specifically implemented in the following manner:

[0053] First, if the original state is the first state, the first mode of the first module is called in the first system, the system file protection module is set to the second state and the key is stored; then, the first system is exited.

[0054] For example, if the original state of the system file protection module BitLocker is the first state, that is, the original state of BitLocker is that it can encrypt and protect the electronic device, then the first mode of the first module manage-bde, that is, the pause mode, is called in the Windows system to set BitLocker to the second state and store the key set in BitLocker.

[0055] Exiting the first system means restarting the first system, for example, restarting the Windows system by starting the \efi\boot\bootx64.efi file, wherein the \efi\boot\bootx64.efi file exists in the BIOS FW update program.

[0056] In one implementation, in the above step S101, checking and recording the original state of the system file protection module can be implemented in the following manner:

[0057] Confirm the path where the system file protection module is located, and find the information attribute table of the system file protection module according to the path; based on whether the specific state parameters under the information attribute table meet the preset values, judge and record the original state of the system file protection module.

[0058] For example, first determine the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker where the system file protection module BitLocker is located, then find the information attribute table of BitLocker according to the determined path, and judge and record the original state of the system file protection module based on whether the specific state parameters under the information attribute table meet the preset values.

[0059] If the specific state parameter is the first state value, the original state of the system file protection module is the first state; for example, when the value of the PreventDeviceEncryption key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker is 0, it means that the original state of BitLocker is the first state.

[0060] If the specific state parameter is the second state value, the original state of the system file protection module is the second state; for example, when the value of the PreventDeviceEncryption key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker is 1, it means that the original state of BitLocker is the second state.

[0061] On the basis of the above method embodiment 1, Figure 2 As shown, it is a method flow chart of an updating method embodiment 2 disclosed in the present invention, and the method can be applied to electronic devices including multiple updateable systems, such as mobile phones, pads, notebooks or computers.

[0062] Specifically, the method in this embodiment 2 may include the following steps:

[0063] S101, in response to a startup item update program, checking and recording an original state of a system file protection module;

[0064] S102, if the original state is the first state, setting the system file protection module to the second state before the startup item update program is run; wherein the system file protection module is provided with a key;

[0065] S103, after the startup item update program is run, checking the original state of the record;

[0066] After the startup item update program is completed, that is, after the system in the electronic device is updated, the original state of the recorded system file protection module is checked.

[0067] For example, after the BIOS FW update program is completed, the recorded original status of BitLocker is checked.

[0068] S104: If the original state is the first state, set the system file protection module to the first state.

[0069] When the recorded original state of the system file protection module is the first state, that is, the recorded state of the system file protection module is that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module, the state of the system file protection module is set from the second state to the first state.

[0070] For example, if the original state of BitLocker is the first state, the state of BitLocker is set from the second state to the first state.

[0071] To summarize, based on the above-mentioned method embodiment 1, this embodiment, after the startup item update program is run, if the original state of the system file protection module is the first state, then the system file protection module is set to the first state from the second state set before the startup item update program is run. By setting the system file protection module to the first state after the startup item update program is run, it can be ensured that after the system of the electronic device is updated, the electronic device can be encrypted and protected by the system file protection module, thereby improving the security of the electronic device.

[0072] In one implementation, if the original state in step S104 is the first state, the system file protection module is set to the first state, which can be implemented in the following manner:

[0073] The first system is started through the first interface using the first instruction. In the first system, the first module is called to use the second mode, the system file protection module is set to the first state and the key is input into the system file protection module.

[0074] For example, taking the startup item update program as the BIOS FW update program and the first system as the Windows system as an example, the system file protection module may include BitLocker. After the BIOS FW update program completes the update, if the original state of BitLocker is the first state, first use the Call Bootmgfw.efi instruction to start the Windows system through the EFI shell, and then call the second mode of the first module manage-bde in the Windows system, that is, the resume mode, set BitLocker to the first state, and enter the key set in BitLocker into BitLocker.

[0075] like Figure 3 As shown, it is a schematic diagram of the structure of an electronic device embodiment 1 disclosed in the present disclosure, and the electronic device may be an electronic device including multiple updateable systems, such as a mobile phone, a pad, a notebook or a computer.

[0076] Specifically, the electronic device in this embodiment 1 may include:

[0077] The checking and recording module 301 is used to check and record the original state of the system file protection module in response to the startup item update program;

[0078] In response to the startup item update program, that is, when it is detected that the system in the electronic device needs to be updated, the system file protection module is checked and the original state of the system file protection module is recorded, that is, the current state of the system file protection module is recorded.

[0079] Among them, at least a key is set in the system file protection module. The system and user data of the electronic device can be protected by the system file protection module and the key set in the system file protection module, ensuring that the electronic device will not be tampered with even if there is no participation, lost or stolen.

[0080] The original state may be the first state or the second state. Specifically, the first state indicates that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module. The second state indicates that the current system file protection module cannot encrypt and protect the electronic device.

[0081] The setting module 302 is used to set the system file protection module to the second state before the startup item update program is run if the original state is the first state; wherein the system file protection module is provided with a key.

[0082] When the original state of the system file protection module is the first state, that is, the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module, then before running the startup item update program, that is, before updating the system in the electronic device, the state of the system file protection module is set from the first state to the second state, that is, the state of the system file protection module is set so that the current system file protection module cannot encrypt and protect the electronic device, thereby ensuring that after the system in the electronic device is updated, the user does not need to enter the encryption password again to start the electronic device, effectively improving the user experience.

[0083] As can be seen from the above scheme, in an update method provided by Embodiment 1 of the present disclosure, in response to the boot-up item update program, the original state of the system file protection module is checked and recorded; if the original state is the first state, the system file protection module is set to the second state before the boot-up item update program is run; wherein the system file protection module is provided with a key. Thus, the present disclosure can set the system file protection module to the second state before the boot-up item update program is run when the original state of the system file protection module provided with the key is the first state. By setting the state of the system file protection module, it is possible to avoid inputting the encryption password again to start the electronic device after the system of the electronic device is updated, thereby effectively improving the user experience.

[0084] In one implementation, when the checking and recording module 301 executes the startup item update program in response to the startup, and checks and records the original state of the system file protection module, it can be implemented in the following manner:

[0085] First, in response to a startup item update program, a first system is started through a first interface using a first instruction; then, an original state of a system file protection module in the first system is checked and recorded.

[0086] For example, taking the startup item update program as a BIOS FW update program and the first system as a Windows system, the system file protection module may include BitLocker. When it is detected that the BIOS FW update program needs to be updated, the Call Bootmgfw.efi instruction is used to start the Windows system through the EFI shell, and then the original status of BitLocker in the Windows system is checked and recorded.

[0087] In one implementation, when the above step setting module 302 sets the system file protection module to the second state before the startup item update program is run if the original state is the first state, it can be specifically implemented in the following manner:

[0088] First, if the original state is the first state, the first mode of the first module is called in the first system, the system file protection module is set to the second state and the key is stored; then, the first system is exited.

[0089] For example, if the original state of the system file protection module BitLocker is the first state, that is, the original state of BitLocker is that it can encrypt and protect the electronic device, then the first mode of the first module manage-bde, that is, the pause mode, is called in the Windows system to set BitLocker to the second state and store the key set in BitLocker.

[0090] Exiting the first system means restarting the first system, for example, restarting the Windows system by starting the \efi\boot\bootx64.efi file, wherein the \efi\boot\bootx64.efi file exists in the BIOS FW update program.

[0091] In one implementation, when the checking and recording module 301 checks and records the original state of the system file protection module, it can be implemented in the following manner:

[0092] Confirm the path where the system file protection module is located, and find the information attribute table of the system file protection module according to the path; based on whether the specific state parameters under the information attribute table meet the preset values, judge and record the original state of the system file protection module.

[0093] For example, first determine the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker where the system file protection module BitLocker is located, then find the information attribute table of BitLocker according to the determined path, and judge and record the original state of the system file protection module based on whether the specific state parameters under the information attribute table meet the preset values.

[0094] If the specific state parameter is the first state value, the original state of the system file protection module is the first state; for example, when the value of the PreventDeviceEncryption key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker is 0, it means that the original state of BitLocker is the first state.

[0095] If the specific state parameter is the second state value, the original state of the system file protection module is the second state; for example, when the value of the PreventDeviceEncryption key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker is 1, it means that the original state of BitLocker is the second state.

[0096] Based on the above electronic device embodiment 1, Figure 4 As shown, it is a schematic diagram of the structure of an electronic device embodiment 2 disclosed in the present disclosure, and the electronic device may be an electronic device including multiple updateable systems, such as a mobile phone, a pad, a notebook or a computer.

[0097] Specifically, the electronic device in this embodiment 2 may include:

[0098] The checking and recording module 301 is used to check and record the original state of the system file protection module in response to the startup item update program;

[0099] The setting module 302 is used to set the system file protection module to the second state before the startup item update program is run if the original state is the first state; wherein the system file protection module is provided with a key;

[0100] A viewing module 303 is used to view the original state of the record after the startup item update program is run;

[0101] After the startup item update program is completed, that is, after the system in the electronic device is updated, the original state of the recorded system file protection module is checked.

[0102] For example, after the BIOS FW update program is completed, the recorded original status of BitLocker is checked.

[0103] The setting module 302 is further configured to set the system file protection module to the first state if the original state is the first state.

[0104] When the recorded original state of the system file protection module is the first state, that is, the recorded state of the system file protection module is that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module, the state of the system file protection module is set from the second state to the first state.

[0105] For example, if the original state of BitLocker is the first state, the state of BitLocker is set from the second state to the first state.

[0106] To summarize, based on the above-mentioned method embodiment 1, this embodiment, after the startup item update program is run, if the original state of the system file protection module is the first state, then the system file protection module is set to the first state from the second state set before the startup item update program is run. By setting the system file protection module to the first state after the startup item update program is run, it can be ensured that after the system of the electronic device is updated, the electronic device can be encrypted and protected by the system file protection module, thereby improving the security of the electronic device.

[0107] In one implementation, when the setting module 302 sets the system file protection module to the first state if the original state is the first state, it can be implemented in the following manner:

[0108] The first system is started through the first interface using the first instruction. In the first system, the first module is called to use the second mode, the system file protection module is set to the first state and the key is input into the system file protection module.

[0109] For example, taking the startup item update program as the BIOS FW update program and the first system as the Windows system as an example, the system file protection module may include BitLocker. After the BIOS FW update program completes the update, if the original state of BitLocker is the first state, first use the CallBootmgfw.efi instruction to start the Windows system through the EFI shell, and then call the second mode of the first module manage-bde in the Windows system, that is, the resume mode, set BitLocker to the first state, and enter the key set in BitLocker into BitLocker.

[0110] It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the embodiments can be referred to each other. For device or system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0111] It should also be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0112] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0113] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An updating method, comprising: In response to the startup item update program, checking and recording the original state of the system file protection module; If the original state is the first state, the system file protection module is set to the second state before the startup item update program is run; the first state indicates that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module; the second state indicates that the current system file protection module cannot encrypt and protect the electronic device; Wherein, the system file protection module is provided with a key; After the startup item update program is run, checking the recorded original state; If the original state is the first state, the system file protection module is set to the first state.

2. The method according to claim 1, wherein in response to the startup item update program, checking and recording the original state of the system file protection module comprises: In response to the startup item update program, starting the first system through the first interface using the first instruction; Check the original state of the system file protection module in the first system and record the original state.

3. The method according to claim 2, wherein if the original state is the first state, before the startup item update program is run, the system file protection module is set to the second state, comprising: If the original state is the first state, calling the first mode of the first module in the first system, setting the system file protection module to the second state and storing the key; Exit the first system.

4. The method according to claim 1, wherein if the original state is the first state, setting the system file protection module to the first state comprises: Using a first instruction to start the first system through a first interface; In the first system, calling the first module to use the second mode, setting the system file protection module to the first state and inputting the key into the system file protection module; Exit the first system.

5. The method according to claim 1, wherein the checking and recording the original state of the system file protection module comprises: Confirm the path where the system file protection module is located; Find the information attribute table of the system file protection module according to the path; Based on whether the specific status parameter under the information attribute table meets the preset value, the original status of the system file protection module is judged and recorded.

6. The method according to claim 5, wherein judging and recording the original state of the system file protection module based on whether the specific state parameter under the information attribute table meets a preset value comprises: If the specific state parameter is the first state value, the original state of the system file protection module is the first state; If the specific state parameter is the second state value, the original state of the system file protection module is the second state.

7. The method according to claim 1, wherein the startup item update program is a BIOS FW update program.

8. The method according to claim 1, wherein the system file protection module comprises BitLocker.

9. An electronic device, comprising: A checking and recording module, for checking and recording the original state of the system file protection module in response to the startup item update program; A setting module is used to set the system file protection module to the second state before the startup item update program is run if the original state is the first state; the first state indicates that the electronic device can be encrypted and protected by the system file protection module and the key set in the system file protection module; the second state indicates that the current system file protection module cannot encrypt and protect the electronic device; wherein the system file protection module is set with a key; after the startup item update program is run, the recorded original state is checked; if the original state is the first state, the system file protection module is set to the first state.

Images