Smart home device remote upgrade method, trusted authentication method and storage medium

Abstract

The present disclosure provides a method and system for remote upgrading of smart home devices, a trusted authentication method and apparatus, a device and a storage medium. The method for remote upgrading of smart home devices based on edge computing includes: when the server sends an upgrade instruction to the smart home device, the server first sends the smart home device firmware upgrade package to the edge computing device through a mechanism to ensure the security of the firmware upgrade, the edge computing device receives the smart home device firmware upgrade package, decrypts the received smart home device firmware upgrade package, and determines the integrity and source credibility of the decrypted smart home device firmware upgrade package. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package is transmitted to the corresponding smart home device for upgrading.

Description

Technical Field

[0001] The present disclosure relates to a method and system for remotely upgrading smart home devices, a method and apparatus for trusted authentication, equipment and storage media, and in particular to a method and system for remotely upgrading smart home devices based on edge computing, a method and apparatus for trusted authentication, equipment and storage media. Background Art

[0002] At present, the large-scale deployment of smart home devices is facing many security challenges, which have spawned the need for remote upgrades of smart home devices, which will be an indispensable part of the Internet of Things system. The effect of remote upgrades has been verified in many other fields, such as mobile phone applications. For example, manufacturers can receive new features and fix vulnerabilities of products through regular remote upgrades.

[0003] Existing remote upgrade methods for smart home device firmware include a method in which the smart home device directly interacts end-to-end with the server. Specifically, the smart home device sends a remote upgrade request to the server, or the server directly sends an upgrade instruction remotely. The server triggers the upgrade mechanism to send the encrypted firmware to the smart home device, and the smart home device decrypts the firmware to complete the upgrade.

[0004] Due to the unevenness of smart home devices, there are various remote upgrade transmission methods for existing smart home device firmware. For smart home devices with relatively high computing power, the DTLS protocol (Datagram Transport Layer Security) can be used with a signature verification mechanism to ensure the security upgrade of the firmware. For smart home devices with average computing power, the firmware can be encrypted with a simple symmetric key and then transmitted. For smart home devices with relatively weak computing power, the firmware is directly transmitted in plain text. Summary of the invention

[0005] In actual applications, the TLS protocol (Transport Layer Security Protocol) plus the signature verification mechanism is a relatively safe upgrade method. The TLS protocol has both asymmetric encryption and decryption of keys and symmetric encryption and decryption of firmware information, which ensures the confidentiality of transmitted data and the credibility of data sources. The signature verification mechanism ensures the integrity and credibility of firmware information. However, this upgrade method requires relatively high computing power of smart home devices. Currently, many IoT devices such as smart home devices are difficult to meet such computing requirements. In order to improve performance and business, some smart home device firmware is only a simple symmetric encryption or even directly transmits information in plain text when it is remotely upgraded. This is easy to be deciphered and tampered by attackers. The impact of tampering with the firmware of smart home devices is immeasurable. How to improve the security of smart home device firmware upgrades while ensuring business is particularly important.

[0006] The purpose of the present disclosure is to provide a remote upgrade method and system for smart home devices, a trusted authentication method and apparatus, a device and a storage medium based on edge computing, which can ensure the security of remote upgrade of smart home device firmware even if the computing power of the smart home device is insufficient.

[0007] According to one aspect of the present disclosure, a method for remotely upgrading smart home devices is provided, which is a method for remotely upgrading smart home devices based on edge computing, comprising: when a server sends an upgrade instruction to a smart home device, first sending a smart home device firmware upgrade package to an edge computing device through a mechanism for ensuring firmware security upgrade, the edge computing device receiving the smart home device firmware upgrade package, decrypting the received smart home device firmware upgrade package, and judging the integrity and source credibility of the decrypted smart home device firmware upgrade package; when it is judged that the smart home device firmware upgrade package is complete and the source is credible, transmitting the decrypted smart home device firmware upgrade package to the corresponding smart home device for upgrading.

[0008] According to another aspect of the present disclosure, a smart home device remote upgrade system is provided, comprising: a smart home device; a server, which issues an upgrade instruction to the smart home device; and an edge computing device, which receives a smart home device firmware upgrade package that is first sent to the edge computing device by the server when issuing the upgrade instruction to the smart home device under a mechanism to ensure firmware security upgrade, the edge computing device decrypts the received smart home device firmware upgrade package, and determines the integrity and source credibility of the decrypted smart home device firmware upgrade package, and when it is determined that the smart home device firmware upgrade package is complete and the source is credible, transmits the decrypted smart home device firmware upgrade package to the corresponding smart home device for upgrading.

[0009] According to another aspect of the present disclosure, a trusted authentication method based on edge computing is provided, including: receiving a smart home device firmware upgrade package under a mechanism for ensuring firmware security upgrades; determining whether the computing power of the corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value equivalent to the computing power corresponding to the mechanism for ensuring firmware security upgrades, and if it is lower than the threshold value, decrypting the smart home device firmware upgrade package; determining the integrity and source credibility of the decrypted smart home device firmware upgrade package, and when it is determined that the smart home device firmware upgrade package is complete and the source is credible, transmitting the decrypted smart home device firmware upgrade package to the corresponding smart home device for upgrading.

[0010] According to another aspect of the present disclosure, a trusted authentication device based on edge computing is provided, including: a unit for receiving a firmware upgrade package for a smart home device under a mechanism for ensuring secure firmware upgrades; a unit for determining whether the computing power of a corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value equivalent to the computing power corresponding to the mechanism for ensuring secure firmware upgrades, and if the computing power is lower than the threshold value, a unit for decrypting the smart home device firmware upgrade package; a unit for determining the integrity and source credibility of the decrypted smart home device firmware upgrade package, and when determining that the smart home device firmware upgrade package is complete and the source is credible, transmitting the decrypted smart home device firmware upgrade package to the corresponding smart home device for upgrading.

[0011] According to another aspect of the present disclosure, a trusted authentication device based on edge computing is provided, comprising: a memory; and a processor, configured to execute each step in the above-mentioned trusted authentication method based on edge computing.

[0012] According to another aspect of the present disclosure, a computer-readable storage medium is provided, storing a computer program, which implements the steps in the above-mentioned edge computing-based trusted authentication method when executed by a processor.

[0013] According to the present disclosure, the remote upgrade security of the firmware of the smart home device can be ensured even if the computing power of the smart home device is insufficient. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 The figure is an exemplary block diagram showing a remote upgrade system for smart home devices.

[0015] Figure 2 An exemplary flow chart of a method for remotely upgrading a smart home device.

[0016] Figure 3 The present invention is an exemplary flowchart of a trusted authentication method based on edge computing. DETAILED DESCRIPTION

[0017] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings. In addition, the present disclosure is not limited to the illustrated examples.

[0018] like Figure 1 As shown, the smart home device remote upgrade system includes a smart home device 1, an edge computing device 2 and a server 3.

[0019] The smart home device 1 is, for example, a camera, a speaker, a smoke alarm, a smart water meter, etc. installed in the home.

[0020] The edge computing device 2 is, for example, a home gateway (home router), or may be a unit integrated into a smart home device having a computing capability greater than or equal to a threshold value to be described below.

[0021] The server 3 is, for example, a server of a manufacturer producing smart home devices, and the smart home devices 1 can be, for example, a variety of smart home devices produced by the manufacturer. Alternatively, the server 3 is, for example, an application platform, and for example, the application platform customizes a variety of smart home devices produced by a certain manufacturer. Customization can be performed by connecting the application platform and a variety of smart home devices produced by a certain manufacturer.

[0022] Here, the server 3 is set to be the server of the manufacturer that produces the smart home device, the edge computing device 2 is set to be a home router, and the smart home device 1 is set to be the smart home device produced by the manufacturer.

[0023] In addition, it is assumed that the computing capabilities of various smart home devices 1 produced by the manufacturer of the smart home device, which serves as the server end 3, are pre-stored in the server, and the computing capabilities of the smart home device 1 can be included in the smart home device firmware upgrade package.

[0024] Figure 2 An exemplary flow chart of a method for remotely upgrading a smart home device.

[0025] When the smart home device 1 needs to be upgraded, the smart home device 1 sends a remote upgrade request to the server 3, and the server 3 sends an upgrade instruction to the smart home device 1 in response to the remote upgrade request, or the server 3 directly sends an upgrade instruction to the smart home device 1. Figure 2 As shown, when the server 3 sends an upgrade instruction to the smart home device 1, it first sends the smart home device firmware upgrade package to the edge computing device 2 through a mechanism to ensure firmware security upgrade. Here, the mechanism to ensure firmware security upgrade is, for example, a TLS protocol plus signature verification mechanism. Here, it is assumed that the server 3 is bridged with the edge computing device 2, and the server 3 sends the public key to the edge computing device 2 in advance.

[0026] When the smart home device 1 sends a remote upgrade request to the server 3 , for example, the user makes the request through an interface of the server 3 in a computer or a mobile phone.

[0027] The edge computing device 2 receives the smart home device firmware upgrade package and decrypts it, and determines the integrity and source credibility of the decrypted smart home device firmware upgrade package. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package can be transmitted to the corresponding smart home device 1 for upgrading. The decrypted smart home device firmware upgrade package can also be subjected to simple symmetric encryption that can be decrypted by the corresponding smart home device and then transmitted to the corresponding smart home device for upgrading. When it is determined that the smart home device firmware upgrade package is incomplete and / or the source is untrustworthy, the smart home device firmware upgrade package is not transmitted to the corresponding smart home device 1.

[0028] Figure 3 2 is an exemplary flow chart of a trusted authentication method based on edge computing. Here, it is assumed that the trusted authentication method based on edge computing is executed in the edge computing device 2, for example.

[0029] like Figure 3 As shown, the edge computing device 2 receives the firmware upgrade package of the smart home device under the mechanism of ensuring the security upgrade of the firmware. As mentioned above, the mechanism of ensuring the security upgrade of the firmware is, for example, a mechanism of TLS protocol plus signature verification.

[0030] The edge computing device 2 determines whether the computing power of the corresponding smart home device 1 contained in the received smart home device firmware upgrade package is lower than the threshold value corresponding to the computing power corresponding to the mechanism for ensuring firmware security upgrade. If it is lower than the threshold value, the smart home device firmware upgrade package is decrypted. If it is higher than or equal to the threshold value, the smart home device firmware upgrade package is not decrypted but directly transmitted to the corresponding smart home device 1. The steps related to the threshold value here can also be combined into the above-mentioned smart home device remote upgrade method.

[0031] Next, as described above, the edge computing device 2 determines the integrity and source credibility of the decrypted smart home device firmware upgrade package. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package can be transmitted to the corresponding smart home device for upgrading. The decrypted smart home device firmware upgrade package can also be subjected to simple symmetric encryption that can be decrypted by the corresponding smart home device and then transmitted to the corresponding smart home device for upgrading. When it is determined that the smart home device firmware upgrade package is incomplete and / or the source is untrustworthy, the smart home device firmware upgrade package is not transmitted to the corresponding smart home device 1.

[0032] When the smart home device 1 is performing a firmware upgrade, the firmware of the smart home device 1 is not decrypted, and the decryption mechanism is triggered at startup.

[0033] In this way, when the server 3 sends the smart home device firmware upgrade package to the smart home device 1, it can send the smart home device firmware upgrade package to the edge computing device 2 through a mechanism such as TLS protocol signature verification, that is, through a secure transmission method.

[0034] In addition, relying on the powerful edge computing power of the edge computing device 2, operations with large computing volume are migrated from the smart home device 1 with computing power lower than the above threshold, such as the general or relatively weak computing power, to the edge computing device 2. The decryption of the asymmetric key is completed by the edge computing device 2, and the smart home device 1 with general or relatively weak computing power only needs to accept the instruction to complete the relevant upgrade function operation. In this way, the security of the firmware of the smart home device 1 is guaranteed without the computing power of the smart home device 1 with general or relatively weak computing power.

[0035] Moreover, the edge computing device 2 can also unpack the firmware upgrade package of the smart home device 1 and perform simple symmetric encryption operations. In this way, even if an attacker obtains the smart home device firmware upgrade package from the smart home device 1, he cannot unpack it, which can effectively prevent the attacker from performing firmware unpacking analysis and further improve security.

[0036] Those skilled in the art should know that the edge computing-based trusted authentication of one aspect of the present disclosure can be implemented as a device, method, apparatus, or computer-readable medium (e.g., non-transient storage medium) as a computer program product. Therefore, it can be implemented in various forms, such as a complete hardware embodiment, a complete software embodiment (including firmware, resident software, microprogram code, etc.), or it can also be implemented as a software and hardware implementation. In addition, the present disclosure can also be implemented as a computer program product in any tangible media form, which has a computer-usable program code stored thereon.

[0037] Regarding the trusted authentication based on edge computing of one aspect of the present disclosure, the relevant description is described with reference to the flowchart of the method according to the specific embodiment of the present disclosure. It can be understood that each block in the flowchart, and any combination of blocks in the flowchart, can be implemented using computer program instructions. These computer program instructions can be executed by a machine composed of a processor of a general-purpose computer or a special computer or other programmable data processing device, and the instructions are processed by a computer or other programmable data processing device to implement the functions or operations described in the flowchart.

[0038] The accompanying drawings show a flowchart of the architecture, functions and operations that can be implemented by the device and method of an embodiment of trusted authentication based on edge computing according to one aspect of the present disclosure. Therefore, each block in the flowchart may represent a module, segment, or portion of program code, which includes one or more executable instructions to implement a specified logical function. It should also be noted that in certain other embodiments, the functions described by the blocks may not be performed in the order shown in the figure. For example, two blocks connected in the figure may actually be executed simultaneously, or in some cases in the opposite order of the icons depending on the functions involved. It should also be noted that the blocks of the flowchart, and the combination of blocks in the flowchart, can be implemented by a system based on dedicated hardware, or by a combination of dedicated hardware and computer instructions to perform specific functions or operations.

[0039] The embodiments of the present disclosure have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or technical improvements to market technologies, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A remote upgrade method for smart home devices, which is a remote upgrade method for smart home devices based on edge computing, comprising: When the server sends an upgrade command to the smart home device, it first sends the smart home device firmware upgrade package to the edge computing device through a mechanism to ensure firmware security upgrade. The edge computing device receives the smart home device firmware upgrade package, and determines whether the computing power of the corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value corresponding to the computing power corresponding to the mechanism for ensuring firmware security upgrade. When the edge computing device determines that the value is lower than the threshold, the received smart home device firmware upgrade package is decrypted, and the integrity and source credibility of the decrypted smart home device firmware upgrade package are determined. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package is symmetric encrypted so that the corresponding smart home device can decrypt it, and then transmitted to the corresponding smart home device for upgrading. When the edge computing device determines that the computing power of the corresponding smart home device is greater than or equal to the threshold, the edge computing device does not decrypt the smart home device firmware upgrade package but directly transmits it to the corresponding smart home device.

2. The remote upgrade method for smart home devices according to claim 1, wherein: The mechanism for ensuring secure firmware upgrade is a TLS protocol plus signature verification mechanism.

3. The remote upgrade method for smart home devices according to claim 1 or 2, wherein: When the edge computing device determines that the smart home device firmware upgrade package is incomplete and / or the source is unreliable, the smart home device firmware upgrade package is not transmitted to the corresponding smart home device.

4. The remote upgrade method for smart home devices according to claim 1 or 2, wherein: The edge computing device is a home router.

5. The remote upgrade method for smart home devices according to claim 1 or 2, wherein: The server is a server of a manufacturer that produces the smart home device, and the smart home device is a plurality of smart home devices produced by the manufacturer, or The server is an application platform that customizes a variety of smart home devices produced by the manufacturer.

6. A remote upgrade system for smart home devices, comprising: Smart home devices; The server sends an upgrade instruction to the smart home device; as well as an edge computing device, receiving a smart home device firmware upgrade package under a mechanism for ensuring firmware security upgrade that is first sent to the edge computing device by the server when issuing an upgrade instruction to the smart home device, and determining whether the computing capability of the corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value equivalent to the computing capability corresponding to the mechanism for ensuring firmware security upgrade, When the edge computing device determines that the value is lower than the threshold, the received smart home device firmware upgrade package is decrypted, and the integrity and source credibility of the decrypted smart home device firmware upgrade package are determined. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package is symmetric encrypted so that the corresponding smart home device can decrypt it, and then transmitted to the corresponding smart home device for upgrading. When the edge computing device determines that the computing power of the corresponding smart home device is greater than or equal to the threshold, the edge computing device does not decrypt the smart home device firmware upgrade package but directly transmits it to the corresponding smart home device.

7. The remote upgrade system for smart home devices according to claim 6, wherein: The mechanism for ensuring secure firmware upgrade is a TLS protocol plus signature verification mechanism.

8. A trusted authentication method based on edge computing, comprising: Receive a firmware upgrade package for a smart home device from a server under a mechanism that ensures firmware security upgrades; Determine whether the computing capability of the corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value corresponding to the computing capability corresponding to the mechanism for ensuring firmware security upgrade, and if lower than the threshold value, decrypt the smart home device firmware upgrade package; Determine the integrity and source credibility of the decrypted smart home device firmware upgrade package, and when it is determined that the smart home device firmware upgrade package is complete and the source is credible, perform symmetric encryption on the decrypted smart home device firmware upgrade package so that the corresponding smart home device can decrypt it, and then transmit it to the corresponding smart home device for upgrading; When the computing capability of the corresponding smart home device is greater than or equal to the threshold, the smart home device firmware upgrade package is not decrypted but directly transmitted to the corresponding smart home device.

9. The edge computing-based trusted authentication method according to claim 8, wherein: The mechanism for ensuring secure firmware upgrade is a TLS protocol plus signature verification mechanism.

10. The edge computing-based trusted authentication method according to claim 8 or 9, wherein: When it is determined that the smart home device firmware upgrade package is incomplete and / or the source is unreliable, the smart home device firmware upgrade package is not transmitted to the corresponding smart home device.

11. A trusted authentication device based on edge computing, comprising: A unit that receives firmware upgrade packages for smart home devices from a server under a mechanism that ensures firmware security upgrades. a unit for determining whether the computing capability of the corresponding smart home device contained in the received smart home device firmware upgrade package is lower than a threshold value corresponding to the computing capability corresponding to the mechanism for ensuring firmware security upgrade, and decrypting the smart home device firmware upgrade package if the computing capability is lower than the threshold value; The integrity and source credibility of the decrypted smart home device firmware upgrade package are determined. When it is determined that the smart home device firmware upgrade package is complete and the source is credible, the decrypted smart home device firmware upgrade package is symmetrically encrypted so that the corresponding smart home device can decrypt it, and then transmitted to the corresponding smart home device for upgrading. When the computing capability of the corresponding smart home device is greater than or equal to the threshold, the smart home device firmware upgrade package is not decrypted but directly transmitted to the unit of the corresponding smart home device.

12. A trusted authentication device for edge computing, comprising: Memory, and A processor is configured to execute each step in the edge computing-based trusted authentication method described in any one of claims 8 to 10.

13. A computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the computer program implements the steps of the edge computing-based trusted authentication method described in any one of claims 8 to 10.

Images