A controllable firmware upgrade device and method
By introducing unique keys and random algorithms into the elevator firmware upgrade tool, the firmware and permissions are encrypted and decrypted, solving the problem of tools being prone to loss and piracy, ensuring the security of interests of manufacturers, reducing costs and improving convenience.
Patent Information
- Application Number
- CN202111352435.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-11-22
- Publication Date
- 2024-12-27
- Estimated Expiration
- 2041-11-22
AI Technical Summary
Existing elevator firmware upgrade tools are prone to loss, pirated versions, and authorized users may use them in violation of regulations, resulting in losses of the manufacturer's interests and lack of effective control measures.
A controllable firmware upgrade device is designed, using a memory that supports FATFS file system, including a unique firmware key, a random number of key and a permission level key. It connects to the computer via USB, and uses encryption modules and decryption modules to realize firmware and Encryption and decryption of permissions, combined with the random algorithm update key, ensure permission control of firmware upgrade and debugging functions.
It realizes permission control of firmware upgrade and debugging functions, prevents tools from being illegally used, reduces costs, improves convenience, and can still control the scope and number of usage after the tool is lost, protecting the interests of the manufacturer.
Smart Images
Figure CN113900695B_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of elevators, and in particular relates to a controllable firmware upgrading device and method thereof. Background Art
[0002] As the industry develops, elevator components are becoming more and more integrated and intelligent. There may be bugs in the program of the components before they leave the factory. Customers may temporarily add non-standard functions later. Manufacturers generally provide dedicated firmware upgrade tools to the corresponding authorized persons to achieve firmware upgrades. The ladder needs to be debugged by professional technicians from installation to normal use, and the manufacturer will also provide debugging tools to the corresponding authorized persons. There is a difference between the firmware upgrade authority and the debugging personnel authority. In order to facilitate management and control, some manufacturers use hardware-independent and firmware-independent methods for firmware upgrade tools and debugging tools, and some use hardware-unified and firmware-independent methods to achieve this.
[0003] The tool may be lost, and the person who gets the tool will have the ability to operate the manufacturer's ladder; the tool may be pirated, and the universal tool may enter the market through illegal channels, causing the manufacturer to lose more post-market; the tool may be used illegally by the authorized person, for example, when a firmware with added value is only allowed to be updated and used in a certain project but not in other projects, the manufacturer will face direct loss of interests. In view of the above possibilities, if the manufacturer does not further control these tools, it will inevitably lead to the loss of its own interests.
[0004] Therefore, there is an urgent need for a controllable firmware upgrade device and method. Summary of the invention
[0005] In order to solve the defects in the prior art, the present invention provides a controllable firmware upgrade device and method.
[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:
[0007] The invention provides a controllable firmware upgrade device, comprising an upgrade device and a computer end, wherein the upgrade device comprises a memory supporting a FATFS file system, a judgment module, a decryption module and an execution module; a unique firmware key, a random number key and a unique authority level key are arranged in the memory, a USB port is further arranged on the upgrade device, the upgrade device is electrically connected to the computer end through the USB port, an application module is arranged on the computer end, the application module is used for performing an encryption operation according to the unique firmware key provided by the upgrade device to generate an encrypted firmware file, performing an encryption operation according to the random number key provided by the upgrade device to generate an encrypted number file, and performing an encryption operation according to the unique level authority key to generate an encrypted authority level file; an output end of the judgment module is electrically connected to an input end of the decryption module, the judgment module is used for querying whether there is an encrypted number file in the memory, and if so, triggering the decryption module; an output end of the decryption module is electrically connected to an output end of the execution module, the decryption module is used for performing a decryption operation on the encrypted number file, after the decryption is successful, loading the set upgrade number value, deleting the encrypted number file, and then performing a decryption operation on the encrypted firmware file, and triggering the execution module after the decryption is successful; the execution module is used for performing an upgrade and / or regulation operation.
[0008] As a preferred technical solution of the present invention, the application module includes an encryption module, which is used to perform encryption operations according to a unique firmware key provided by an upgrade device to generate an encrypted firmware file, perform encryption operations according to a random number key provided by the upgrade device to generate an encrypted number file, and perform encryption operations according to a unique authority level key provided by the upgrade device to generate an encrypted authority level file.
[0009] As a preferred technical solution of the present invention, the application module also includes an authority level determination module; the module determines the authority level of the upgrade device according to the imported authority level file.
[0010] As a preferred technical solution of the present invention, the upgrading device interacts with the elevator components through a communication interface, and the communication interface is at least one of CAN, RS232, RS485, Ethernet, and Bluetooth.
[0011] As a preferred technical solution of the present invention, the present invention also provides a controllable firmware upgrade method, using a controllable firmware upgrade device, including a firmware loading step, which specifically includes the following steps:
[0012] S41, when the upgrade device is powered on for the first time, a unique firmware key, a unique permission level key, and a number key are generated at the same time, and the permission level is initialized to none and the number of upgrades is equal to 0;
[0013] S42, each time after power-on, the upgrade device will actively query whether there is an encryption number or permission level file in the memory, if yes, it will enter S43, if not, it will enter S44;
[0014] S43, decryption operation of the upgrade times or permission level file, after successful decryption, load the set upgrade times and permission level values, delete the encrypted times or permission level file to facilitate the next import of times and permission level files, and use a random algorithm to update the times key to prevent the user from reloading the upgrade times with the same file after the upgrade times are used up, and then enter S44;
[0015] S44. Enter the system application.
[0016] As a preferred technical solution of the present invention, including the steps of firmware upgrade and firmware times during the upgrade process, it specifically includes the following steps:
[0017] S51, the upgrade device system starts;
[0018] S52, executing the upgrade module operation;
[0019] S53, judging whether the firmware needs to be upgraded through the human-machine interface; if yes, proceeding to S54, if not, returning to S52;
[0020] S54, determine whether the current upgrade times meet the requirement of being greater than 0; if yes, proceed to S55, if not, return to S52;
[0021] S55, using the firmware key to decrypt the encrypted firmware in blocks, and perform block-by-block update operations on the elevator components. Each time a file block is updated, enter S56 for corresponding judgment;
[0022] S56, judging whether the firmware upgrade is complete according to the upgrade progress bar of S55, if not, return to S55 to continue the upgrade, if the upgrade is complete, proceed to S57;
[0023] S57: Subtract one from the upgrade times. After the operation is completed, return to S52.
[0024] As a preferred technical solution of the present invention, a firmware upgrade function and a debugging function permission confirmation process is included, which specifically includes the following steps:
[0025] S61, power on initialization;
[0026] S62, the human-machine interface displays a module selection window, prompting the user to select an upgrade module or a debug module;
[0027] S63, based on the input, the human-machine interface prompts the user to select an upgrade module, then enters S64, otherwise enters S66;
[0028] S64, judging according to the authority of the upgrade device; if the upgrade authority is satisfied, entering the upgrade module S65; if not satisfied, returning to S62;
[0029] S65, enter the upgrade module;
[0030] S66, based on the input, the human-machine interface prompts the user to select a debugging module, if yes, then go to S67, otherwise go to S62;
[0031] S67, judging according to the authority of the upgrade device; if the debugging authority is satisfied, entering the debugging module S68; if not satisfied, returning to S62;
[0032] S68, enter the debugging module.
[0033] Compared with the prior art, the present invention has the following beneficial effects:
[0034] The present invention integrates the firmware upgrade function and the debugging function, uses the authority level to determine the corresponding operation authority; uses the firmware key to achieve a one-to-one correspondence between the encrypted firmware and the upgrade device; uses the number key to achieve a one-to-one correspondence between the number of upgrades and the upgrade device; uses the random algorithm of the number key to achieve the variability of the number key; not only does it unify the firmware upgrade device and the debugging device, reduce the cost and improve the convenience, but also, under the condition that the tool is lost, the manufacturer still has the ability to control the use scope and number of uses of the device to prevent its own interests from being damaged. BRIEF DESCRIPTION OF THE DRAWINGS
[0035] Figure 1 It is the system structure diagram;
[0036] Figure 2 This is the principle diagram of how to encrypt the firmware and upgrade times on the computer side;
[0037] Figure 3 It is a schematic diagram of the decryption implementation of the firmware and upgrade times on the upgrade device side;
[0038] Figure 4 This is the firmware loading workflow diagram;
[0039] Figure 5 It is a workflow diagram of firmware upgrade and firmware times during the upgrade process;
[0040] Figure 6 This is a flowchart for confirming the permissions of the firmware upgrade function and the debugging function of the upgrade device. DETAILED DESCRIPTION
[0041] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.
[0042] Example 1
[0043] In order to achieve the purpose of the present invention, Figures 1 to 3 As shown, in this embodiment, a controllable firmware upgrade device is provided, including an upgrade device and a computer terminal, the upgrade device includes a memory supporting the FATFS file system, a judgment module, a decryption module and an execution module; the memory is provided with a unique firmware key, a random number key, and a unique permission level key, the upgrade device is also provided with a USB port, the upgrade device is electrically connected to the computer terminal through the USB port, the computer terminal is provided with an application module, the application module is used to perform an encryption operation according to the unique firmware key provided by the upgrade device to generate an encrypted firmware file, perform an encryption operation according to the random number key provided by the upgrade device to generate an encrypted The invention relates to a method for generating an encrypted permission level file by performing an encryption operation according to a unique level authority key; the output end of the judgment module is electrically connected to the input end of the decryption module, and the judgment module is used to query whether there is an encrypted number of times file in the memory, and if so, trigger the decryption module; the output end of the decryption module is electrically connected to the output end of the execution module, and the decryption module is used to decrypt the encrypted number of times file, and after the decryption is successful, load the set upgrade number value, delete the encrypted number of times file, and then decrypt the encrypted firmware file, and trigger the execution module after the decryption is successful; the execution module is used to perform upgrade and / or regulation operations.
[0044] The application module includes an encryption module, which is used to perform encryption operations according to a unique firmware key provided by an upgrade device to generate an encrypted firmware file, perform encryption operations according to a random number key provided by the upgrade device to generate an encrypted number file, and perform encryption operations according to a unique authority level key provided by the upgrade device to generate an encrypted authority level file.
[0045] The application module also includes a permission level determination module; the permission level determined by the upgrade device is determined according to the imported permission level file.
[0046] The upgrade device interacts with the elevator components through a communication interface, and the communication interface is CAN, RS232, RS485, Ethernet, and Bluetooth.
[0047] like Figure 4 As shown, this embodiment also provides a controllable firmware upgrade method, using a controllable firmware upgrade device, including a firmware loading step, which specifically includes the following steps:
[0048] S41, when the upgrade device is powered on for the first time, a unique firmware key, a unique permission level key, and a number key are generated at the same time, and the permission level is initialized to none and the number of upgrades is equal to 0;
[0049] S42, each time after power-on, the upgrade device will actively query whether there is an encryption number or permission level file in the memory, if yes, it will enter S43, if not, it will enter S44;
[0050] S43, decryption operation of the upgrade times or permission level file, after successful decryption, load the set upgrade times and permission level values, delete the encrypted times or permission level file to facilitate the next import of times and permission level files, and use a random algorithm to update the times key to prevent the user from reloading the upgrade times with the same file after the upgrade times are used up, and then enter S44;
[0051] S44. Enter the system application.
[0052] like Figure 5 As shown, this embodiment includes the steps of firmware upgrade and firmware upgrade times during the upgrade process, which specifically include the following steps:
[0053] S51, the upgrade device system starts;
[0054] S52, executing the upgrade module operation;
[0055] S53, judging whether the firmware needs to be upgraded through the human-machine interface; if yes, proceeding to S54, if not, returning to S52;
[0056] S54, determine whether the current upgrade times meet the requirement of being greater than 0; if yes, proceed to S55, if not, return to S52;
[0057] S55, using the firmware key to decrypt the encrypted firmware in blocks, and perform block-by-block update operations on the elevator components. Each time a file block is updated, enter S56 for corresponding judgment;
[0058] S56, judging whether the firmware upgrade is complete according to the upgrade progress bar of S55, if not, return to S55 to continue the upgrade, if the upgrade is complete, proceed to S57;
[0059] S57: Subtract one from the upgrade times. After the operation is completed, return to S52.
[0060] like Figure 6 As shown, this embodiment includes a firmware upgrade function and a debugging function permission confirmation process, which specifically includes the following steps:
[0061] S61, power on initialization;
[0062] S62, the human-machine interface displays a module selection window, prompting the user to select an upgrade module or a debug module;
[0063] S63, based on the input, the human-machine interface prompts the user to select an upgrade module, then enters S64, otherwise enters S66;
[0064] S64, judging according to the authority of the upgrade device; if the upgrade authority is satisfied, entering the upgrade module S65; if not satisfied, returning to S62;
[0065] S65, enter the upgrade module;
[0066] S66, based on the input, the human-machine interface prompts the user to select a debugging module, if yes, then go to S67, otherwise go to S62;
[0067] S67, judging according to the authority of the upgrade device; if the debugging authority is satisfied, entering the debugging module S68; if not satisfied, returning to S62;
[0068] S68, enter the debugging module.
[0069] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A controllable firmware upgrade device, characterized in that: The invention comprises an upgrade device and a computer terminal, wherein the upgrade device comprises a memory supporting a FATFS file system, a judgment module, a decryption module and an execution module; the memory is provided with a unique firmware key, a random number key and a unique permission level key, the upgrade device is also provided with a USB port, the upgrade device is electrically connected to the computer terminal through the USB port, the computer terminal is provided with an application module, the application module is used to perform an encryption operation according to the unique firmware key provided by the upgrade device to generate an encrypted firmware file, perform an encryption operation according to the random number key provided by the upgrade device to generate an encrypted number file, and perform an encryption operation according to the unique level permission key to generate an encrypted permission level file; the output end of the judgment module is electrically connected to the input end of the decryption module, the judgment module is used to query whether there is an encrypted number file in the memory, and if so, trigger the decryption module; the output end of the decryption module is electrically connected to the output end of the execution module, the decryption module is used to perform a decryption operation on the encrypted number file, after the decryption is successful, load the set upgrade number value, delete the encrypted number file, and then perform a decryption operation on the encrypted firmware file, and trigger the execution module after the decryption is successful; the execution module is used to perform an upgrade and / or regulation operation; The firmware upgrade method of the firmware upgrade device includes the steps of firmware upgrade and firmware times being applied during the upgrade process, which specifically includes the following steps: S51, the upgrade device system starts; S52, executing the upgrade module operation; S53, judging whether the firmware needs to be upgraded through the human-machine interface; if yes, proceeding to S54, if not, returning to S52; S54, determine whether the current upgrade times meet the requirement of being greater than 0; if yes, proceed to S55, if not, return to S52; S55, using the firmware key to decrypt the encrypted firmware in blocks, and perform block-by-block update operations on the elevator components. Each time a file block is updated, enter S56 for corresponding judgment; S56, judging whether the firmware upgrade is complete according to the upgrade progress bar of S55, if not, return to S55 to continue the upgrade, if the upgrade is complete, proceed to S57; S57: Subtract one from the upgrade times. After the operation is completed, return to S52.
2. The controllable firmware upgrade device according to claim 1, characterized in that: The application module includes an encryption module, which is used to perform encryption operations according to a unique firmware key provided by an upgrade device to generate an encrypted firmware file, perform encryption operations according to a random number key provided by the upgrade device to generate an encrypted number file, and perform encryption operations according to a unique authority level key provided by the upgrade device to generate an encrypted authority level file.
3. The controllable firmware upgrade device according to claim 2, characterized in that: The application module also includes a permission level determination module; the permission level determined by the upgrade device is determined according to the imported permission level file.
4. The controllable firmware upgrade device according to claim 3, characterized in that: The upgrade device interacts with the elevator components through a communication interface, and the communication interface is at least one of CAN, RS232, RS485, Ethernet, and Bluetooth.
5. A controllable firmware upgrade method, using the controllable firmware upgrade device according to any one of claims 1 to 4, characterized in that: The firmware loading step includes the following steps: S41, when the upgrade device is powered on for the first time, a unique firmware key, a unique permission level key, and a number key are generated at the same time, and the permission level is initialized to none and the number of upgrades is equal to 0; S42, each time after power-on, the upgrade device will actively query whether there is an encryption number or permission level file in the memory, if yes, it will enter S43, if not, it will enter S44; S43, decryption operation of the upgrade times or permission level file, after successful decryption, load the set upgrade times and permission level values, delete the encrypted times or permission level file to facilitate the next import of times and permission level files, and use a random algorithm to update the times key to prevent the user from reloading the upgrade times with the same file after the upgrade times are used up, and then enter S44; S44. Enter the system application.
6. The controllable firmware upgrade method according to claim 5, characterized in that: The firmware upgrade and debugging function permission confirmation process includes the following steps: S61, power on initialization; S62, the human-machine interface displays a module selection window, prompting the user to select an upgrade module or a debug module; S63, based on the input, the human-machine interface prompts the user to select an upgrade module, then enter S64, otherwise enter S66; S64, judging according to the authority of the upgrade device; if the upgrade authority is satisfied, entering the upgrade module S65; if not satisfied, returning to S62; S65, enter the upgrade module; S66, based on the input, the human-machine interface prompts the user to select a debugging module, if yes, then go to S67, otherwise go to S62; S67, judging according to the authority of the upgrade device; if the debugging authority is satisfied, entering the debugging module S68; if not satisfied, returning to S62; S68, enter the debugging module.