Set-top box synchronous upgrade method, device and storage medium

Abstract

The present invention belongs to the technical field of set-top boxes, and discloses a set-top box synchronous upgrade method, device and storage medium. The method comprises: receiving set-top box identifications and version information sent by multiple set-top boxes; performing identity authentication on multiple set-top boxes according to the received set-top box identifications, and determining multiple target set-top boxes that have passed the authentication; and synchronously upgrading multiple target set-top boxes based on the version information corresponding to each target set-top box. Through the above method, identity authentication is performed according to the set-top box identification of the set-top box, which improves the server's ability to identify the set-top box, and synchronously upgrades multiple set-top boxes according to the version information, avoiding the set-top box with inconsistent versions from capturing upgrade data, and there is no need to consume manpower to upgrade the set-top box, which is convenient for operators to manage.

Description

Technical Field

[0001] The present invention relates to the technical field of set-top boxes, and in particular to a set-top box synchronous upgrading method, device and storage medium. Background Art

[0002] With the advent of the Internet era, more and more set-top boxes support network functions, and with the increase in software functions, the upgrade of set-top box software is becoming more and more frequent. At present, illegal set-top boxes can capture the key data and upgrade data packets sent by the server to the regular set-top boxes by simulating the behavior of regular set-top boxes, and the server cannot identify and prevent such illegal behavior, causing difficulties for operators to manage and causing losses to regular enterprises and operators.

[0003] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0004] The main purpose of the present invention is to provide a set-top box synchronous upgrade method, device and storage medium, aiming to solve the technical problem that illegal set-top boxes can capture key data and upgrade data packets sent by a server to regular set-top boxes by simulating the behavior of regular set-top boxes, causing difficulties for operators to manage.

[0005] To achieve the above object, the present invention provides a set-top box synchronous upgrade method, the method comprising the following steps:

[0006] Receive set-top box identification and version information sent by multiple set-top boxes;

[0007] Performing identity authentication on the multiple set-top boxes according to the received set-top box identifiers, and determining multiple target set-top boxes that have passed the authentication;

[0008] The multiple target set-top boxes are synchronously upgraded based on the version information corresponding to each target set-top box.

[0009] Optionally, the performing identity authentication on the multiple set-top boxes according to the received set-top box identifiers to determine multiple target set-top boxes that have passed the authentication includes:

[0010] Query the encrypted data corresponding to each set-top box according to the received set-top box identification;

[0011] Sending corresponding encrypted data to each set-top box, so that each set-top box generates identity data according to the received encrypted data, and feeds back the identity data;

[0012] The identity data fed back by each set-top box is authenticated according to the encrypted data corresponding to each set-top box, and multiple target set-top boxes that have passed the authentication are determined.

[0013] Optionally, the method further comprises:

[0014] Send the corresponding encrypted data to each set-top box, so that each set-top box decrypts the received encrypted data according to a preset decryption algorithm, intercepts fragments from the decrypted plaintext data according to a preset interception strategy, generates identity data according to the intercepted fragments and current time information, and feeds back the identity data.

[0015] Optionally, authenticating the identity data fed back by each set-top box according to the encrypted data corresponding to each set-top box to determine multiple target set-top boxes that have passed the authentication includes:

[0016] Decrypt the encrypted data corresponding to each set-top box according to a preset decryption algorithm to obtain the plaintext data corresponding to each set-top box;

[0017] Extracting fragment data from the plaintext data according to a preset extraction strategy;

[0018] obtaining a reference segment and reference time data from the identity data;

[0019] Verifying the reference time data;

[0020] After verification, the segment data is compared with the reference segment to obtain a comparison result;

[0021] A plurality of target set-top boxes that have passed the authentication are determined according to the comparison result.

[0022] Optionally, before receiving the set-top box identifications and version information sent by the plurality of set-top boxes, the method further includes:

[0023] Interacting with a set-top box to be activated in a connected state, and obtaining an activation code and a target set-top box identifier corresponding to the set-top box to be activated;

[0024] Verifying the activation code;

[0025] After the verification is passed, the target set-top box identification and the generated random number are combined to obtain identification data;

[0026] Randomly selecting a target encryption algorithm to encrypt the identification data, obtaining encrypted data corresponding to the target set-top box identification, and storing the encrypted data corresponding to the target set-top box identification;

[0027] The decryption algorithm identifier corresponding to the target encryption algorithm is sent to the set-top box to be activated, so that the set-top box to be activated presets the corresponding decryption algorithm according to the decryption algorithm identifier.

[0028] Optionally, the method further comprises:

[0029] Upon receiving a decryption algorithm verification instruction sent by an activated set-top box, querying contact information corresponding to the activated set-top box;

[0030] The decryption algorithm identifier corresponding to the activated set-top box is sent to the device corresponding to the contact information.

[0031] Optionally, the synchronously upgrading the multiple target set-top boxes based on version information corresponding to each target set-top box includes:

[0032] Generate incremental data corresponding to each target set-top box based on version information corresponding to each target set-top box and the latest version data;

[0033] The corresponding incremental data is sent to each target set-top box, so that each target set-top box is synchronously upgraded according to the incremental data.

[0034] In addition, to achieve the above object, the present invention also proposes a set-top box synchronous upgrade method, which is applied to a set-top box. The set-top box synchronous upgrade method includes:

[0035] Sending a current set-top box identifier and current version information to a server, so that the server queries the corresponding current encrypted data according to the current set-top box identifier and feeds back the current encrypted data;

[0036] Decrypting the current encrypted data according to a preset decryption algorithm, intercepting segments from the decrypted plaintext data according to a preset interception strategy, and generating current identity data according to the intercepted segments and current time information;

[0037] Sending the current identity data to the server, so that the server authenticates the current identity data according to the current encrypted data, and when the authentication is passed, generating current incremental data according to the current version information and the latest version data, and feeding back the current incremental data;

[0038] A synchronous upgrade is performed according to the current incremental data.

[0039] In addition, to achieve the above object, the present invention also provides a set-top box synchronous upgrade device, the set-top box synchronous upgrade device includes a server or a set-top box;

[0040] The server comprises: a memory, a processor, and a set-top box synchronization upgrade program stored in the memory and executable on the processor, wherein the set-top box synchronization upgrade program is configured to implement the set-top box synchronization upgrade method as described above;

[0041] The set-top box includes: a memory, a processor, and a set-top box synchronization upgrade program stored in the memory and executable on the processor, wherein the set-top box synchronization upgrade program is configured to implement the set-top box synchronization upgrade method applied to the set-top box as described above.

[0042] In addition, to achieve the above purpose, the present invention also proposes a storage medium, on which a set-top box synchronization upgrade program is stored. When the set-top box synchronization upgrade program is executed by a processor, the set-top box synchronization upgrade method as described above is implemented.

[0043] The present invention receives set-top box identifications and version information sent by multiple set-top boxes; performs identity authentication on multiple set-top boxes according to the received set-top box identifications, determines multiple target set-top boxes that have passed the authentication; and synchronously upgrades multiple target set-top boxes based on the version information corresponding to each target set-top box. In the above manner, identity authentication is performed according to the set-top box identification of the set-top box, which improves the server's ability to identify the set-top box, and synchronously upgrades multiple set-top boxes according to the version information, avoiding the set-top box with inconsistent versions from capturing upgrade data, and does not need to consume manpower to upgrade the set-top box, which is convenient for operators to manage. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is a structural schematic diagram of a set-top box synchronous upgrade device in a hardware operating environment involved in an embodiment of the present invention;

[0045] Figure 2 A schematic diagram of a flow chart of a first embodiment of a method for synchronously upgrading a set-top box according to the present invention;

[0046] Figure 3 It is a structural schematic diagram of the set-top box synchronous upgrade system of the present invention;

[0047] Figure 4 A schematic diagram of a flow chart of a second embodiment of a method for synchronously upgrading a set-top box according to the present invention;

[0048] Figure 5 A first schematic diagram of interactive signaling of the set-top box synchronous upgrade method of the present invention;

[0049] Figure 6 A schematic diagram of a flow chart of a third embodiment of a method for synchronously upgrading a set-top box according to the present invention;

[0050] Figure 7 A second schematic diagram of interactive signaling of the set-top box synchronous upgrade method of the present invention;

[0051] Figure 8 1 is a flow chart of a fourth embodiment of a method for synchronously upgrading a set-top box according to the present invention.

[0052] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0053] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0054] Reference Figure 1 , Figure 1 The present invention is a schematic diagram of a set-top box synchronous upgrade device structure in a hardware operating environment according to an embodiment of the present invention.

[0055] like Figure 1 As shown, the set-top box synchronous upgrade device is a server or a set-top box, which may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a wireless fidelity (Wireless-Fidelity, Wi-Fi) interface). The memory 1005 may be a high-speed random access memory (Random Access Memory, RAM), or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk storage. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0056] Those skilled in the art will understand that Figure 1 The structure shown in the figure does not constitute a limitation on the set-top box synchronous upgrade device, and may include more or less components than shown in the figure, or combine certain components, or arrange the components differently.

[0057] like Figure 1 As shown, the memory 1005 as a storage medium may include an operating system, a network communication module, a user interface module, and a set-top box synchronization upgrade program.

[0058] exist Figure 1In the set-top box synchronization upgrade device shown, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the set-top box synchronization upgrade device of the present invention can be set in the set-top box synchronization upgrade device, and the set-top box synchronization upgrade device calls the set-top box synchronization upgrade program stored in the memory 1005 through the processor 1001, and executes the set-top box synchronization upgrade method provided by the embodiment of the present invention.

[0059] The embodiment of the present invention provides a method for synchronously upgrading a set-top box, referring to Figure 2 , Figure 2 It is a flowchart of the first embodiment of the set-top box synchronous upgrade method of the present invention.

[0060] In this embodiment, the set-top box synchronous upgrade method includes the following steps:

[0061] Step S10: receiving set-top box identifications and version information sent by multiple set-top boxes.

[0062] It can be understood that the execution subject of this embodiment is the server. Figure 3 , Figure 3 The schematic diagram of the structure of the set-top box synchronous upgrade system of the present invention is that the server communicates with n set-top boxes at the same time. When the server releases a new version of software, it sends an upgrade notification to each set-top box. When each set-top box receives the upgrade notification, it sends a set-top box identifier and version information to the server. The set-top box identifier is a unique identification code of the set-top box, such as STBID, etc. It can also be a unique identifier of the home user corresponding to the set-top box, such as the user ID number, telephone number, etc. The version information is the version number of the software currently used by the set-top box.

[0063] Step S20: performing identity authentication on the plurality of set-top boxes according to the received set-top box identifications, and determining a plurality of target set-top boxes that have passed the authentication.

[0064] It should be noted that the set-top box is authenticated based on the set-top box identification to screen out illegal set-top boxes. Optionally, the server stores the unique identification code of the activated regular set-top box, and the set-top box identification of each set-top box is compared with the stored unique identification code, and the set-top box with the consistent comparison is used as the target set-top box that has passed the authentication. Optionally, the corresponding activation location is queried according to the set-top box identification, the current location information of the set-top box is obtained, the location information is matched with the activation location, and the set-top box with successful matching is used as the target set-top box that has passed the authentication. Optionally, the corresponding encrypted data is queried according to the set-top box identification, returned to the set-top box for decryption, and decrypted on the server, and it is verified whether the result of the set-top box decryption is consistent with the result of the server decryption, and the set-top box with the consistent decryption result is used as the target set-top box that has passed the authentication.

[0065] Step S30: synchronously upgrading the multiple target set-top boxes based on the version information corresponding to each target set-top box.

[0066] It should be understood that the synchronous upgrade is performed according to the version information of each target set-top box, so that the synchronous upgrade is more accurate, the success rate of the set-top box upgrade is improved, and on the other hand, the set-top box with inconsistent versions is prevented from capturing the upgrade data. Optionally, installation packages corresponding to different version numbers are pre-stored, and the corresponding installation packages are obtained according to the version information of each target set-top box, and the corresponding installation packages are sent to each target set-top box, so as to perform synchronous upgrade.

[0067] Furthermore, in order to prevent set-top boxes with inconsistent versions from capturing upgrade data, the step S30 includes: generating incremental data corresponding to each target set-top box based on the version information corresponding to each target set-top box and the latest version data; and sending the corresponding incremental data to each target set-top box so that each target set-top box is synchronously upgraded according to the incremental data.

[0068] It should be noted that an illegal set-top box may copy the set-top box identification and version information of a regular set-top box, imitate a regular set-top box to communicate with the server, and thus obtain upgrade data. Through the method of this embodiment, the server only sends incremental data to the set-top box. Even if the illegal set-top box captures the incremental data, the software update in the illegal set-top box will fail due to the inconsistency of the local software version, thus preventing the illegal set-top box from obtaining the upgrade data packet and facilitating management by operators.

[0069] This embodiment receives set-top box identifications and version information sent by multiple set-top boxes; performs identity authentication on multiple set-top boxes according to the received set-top box identifications, and determines multiple target set-top boxes that have passed the authentication; and synchronously upgrades multiple target set-top boxes based on the version information corresponding to each target set-top box. In the above manner, identity authentication is performed according to the set-top box identification of the set-top box, which improves the server's ability to identify the set-top box, and synchronously upgrades multiple set-top boxes according to the version information, avoiding the capture of upgrade data by set-top boxes with inconsistent versions, and there is no need to spend manpower to upgrade the set-top box, which is convenient for operators to manage.

[0070] refer to Figure 4 , Figure 4 1 is a flow chart of a second embodiment of a method for synchronously upgrading a set-top box according to the present invention.

[0071] Based on the first embodiment, step S20 of the set-top box synchronous upgrade method of this embodiment includes:

[0072] Step S201: query the encrypted data corresponding to each set-top box according to the received set-top box identification.

[0073] It should be understood that the server stores the encrypted data of the activated set-top boxes in advance. Optionally, the encrypted data of different set-top boxes are encrypted by the same encryption algorithm; optionally, the encrypted data of different set-top boxes are encrypted by different encryption algorithms.

[0074] Step S202: Sending corresponding encrypted data to each set-top box, so that each set-top box generates identity data according to the received encrypted data, and feeds back the identity data.

[0075] It should be noted that the encrypted data is sent to the set-top box, which decrypts the encrypted data according to a decryption algorithm set by itself, generates identity data according to the decrypted data, and sends the identity data to the server for authentication.

[0076] Step S203: authenticating the identity data fed back by each set-top box according to the encrypted data corresponding to each set-top box, and determining a plurality of target set-top boxes that have passed the authentication.

[0077] In a specific implementation, the server decrypts the encrypted data according to a pre-agreed decryption algorithm, and authenticates the identity data according to the decryption result, thereby determining multiple target set-top boxes that have passed the authentication. Optionally, the server pre-agreed on the same decryption algorithm with all regular set-top boxes. Optionally, the decryption algorithms pre-agreed on by the server and different set-top boxes are different, and the server decrypts the encrypted data corresponding to each set-top box according to the decryption algorithm agreed with each set-top box, and authenticates the identity data fed back by each set-top box according to the decryption result, thereby determining multiple target set-top boxes that have passed the authentication.

[0078] Furthermore, in order to improve communication security, the method also includes: sending corresponding encrypted data to each set-top box, so that each set-top box decrypts the received encrypted data according to a preset decryption algorithm, intercepts fragments from the decrypted plaintext data according to a preset interception strategy, generates identity data according to the intercepted fragments and current time information, and feeds back the identity data.

[0079] It should be understood that the preset decryption algorithm is a decryption algorithm pre-agreed between the set-top box and the server. In the specific implementation, the set-top box interacts with the server in the activation stage and sets the corresponding decryption algorithm. The preset interception strategy can be to intercept m bytes of the head, intercept k bytes of the tail, intercept f bytes after the pth byte, intercept multiple bytes of multiple positions and splice them, wherein m, k, p, and f are integers greater than 0. This embodiment does not limit the specific method of the preset interception strategy. Specifically, the set-top box splices the intercepted fragments with the current time information to generate identity data. This embodiment sets the decryption algorithm of the set-top box, the fragment interception strategy, and generates identity data in combination with time information, which improves the difficulty of illegal set-top boxes capturing encrypted data and identity data cracking the decryption method. At the same time, the identity data has timeliness, which avoids illegal set-top boxes from performing identity authentication based on historically captured identity data.

[0080] Specifically, the step S203 includes: decrypting the encrypted data corresponding to each set-top box according to a preset decryption algorithm to obtain the plaintext data corresponding to each set-top box; intercepting fragment data from the plaintext data according to a preset interception strategy; obtaining a reference fragment and reference time data from the identity data; verifying the reference time data; after the verification is passed, comparing the fragment data with the reference fragment to obtain a comparison result; and determining multiple target set-top boxes that have passed the authentication according to the comparison result.

[0081] It should be noted that, optionally, the server and all regular set-top boxes pre-agree on the same preset decryption algorithm. Optionally, the decryption algorithms pre-agreement between the server and different set-top boxes are different. The server stores preset decryption algorithms corresponding to different set-top boxes, queries the decryption algorithms of each set-top box to decrypt the encrypted data corresponding to each set-top box, and obtains the plaintext data corresponding to each set-top box. The server and the set-top box adopt the same interception strategy, and intercept fragment data from the plaintext data according to the preset interception strategy. The fragments and time in the identity data are separated, and the reference time data is verified, specifically including: the server determines whether the reference time data is within a certain time range based on its own time, for example, whether the reference time data is within the first five minutes of the server's own time. If so, the verification is passed. The plaintext fragment intercepted by the set-top box is compared with the plaintext fragment intercepted by the server. If they are consistent, the authentication is passed.

[0082] In the specific implementation, refer to Figure 5 , Figure 5 This is a first schematic diagram of interactive signaling of the set-top box synchronous upgrade method of the present invention. Figure 5The figure shows a set-top box upgrade process of an example of the present invention: in the upgrade stage, the set-top box sends a set-top box identification and version information to the server; the server queries the encrypted data corresponding to the set-top box identification, and sends the encrypted data to the set-top box; the set-top box decrypts the encrypted data according to its own preset decryption algorithm, and intercepts a fragment from the decrypted plaintext data, combines the intercepted fragment with its own current time information to generate identity data, and sends it to the server; the server decrypts the encrypted data obtained by the query in the same way, and intercepts a fragment from the decrypted plaintext data; the server verifies the time information contained in the identity data; after the verification is passed, the server compares the fragment intercepted by itself with the fragment contained in the identity data, if they are consistent, the identity authentication is passed; after the identity authentication is passed, incremental data is generated according to the version information of the set-top box, and the incremental data is sent to the set-top box; the set-top box completes the software upgrade according to the incremental data.

[0083] In this embodiment, the encrypted data corresponding to each set-top box is queried according to the received set-top box identification; the corresponding encrypted data is sent to each set-top box, so that each set-top box generates identity data according to the received encrypted data and feeds back the identity data; the identity data fed back by each set-top box is authenticated according to the encrypted data corresponding to each set-top box, and multiple target set-top boxes that have passed the authentication are determined. In the above manner, the set-top box generates identity data according to the encrypted data, and the server authenticates the identity data according to the encrypted data, which further improves the server's ability to identify the set-top box, prevents illegal set-top boxes from obtaining upgrade data packets from the server, and the server sends encrypted data to the set-top box, which improves the communication security between the server and the set-top box.

[0084] refer to Figure 6 , Figure 6 1 is a flow chart of a third embodiment of a method for synchronously upgrading a set-top box according to the present invention.

[0085] Based on the above second embodiment, the set-top box synchronous upgrade method of this embodiment further includes, before step S10:

[0086] Step S01: interacting with a set-top box to be activated that is in a connected state, and obtaining an activation code and a target set-top box identifier corresponding to the set-top box to be activated.

[0087] It should be understood that, during the activation phase, the set-top box establishes a connection with the server and sends an activation code and a target set-top box identifier to the server.

[0088] Step S02: verifying the activation code.

[0089] Step S03: After the verification is passed, the target set-top box identification and the generated random number are combined to obtain identification data.

[0090] It should be noted that the server has a random number generation function, and generates a random number for each set-top box to be activated. After the activation code is verified, the target set-top box identification and the random number are concatenated to obtain identification data.

[0091] Step S04: randomly selecting a target encryption algorithm to encrypt the identification data, obtaining encrypted data corresponding to the target set-top box identification, and storing the encrypted data corresponding to the target set-top box identification.

[0092] It is understandable that the server selects an encryption algorithm from the encryption algorithm library for each set-top box to be activated, encrypts identification data consisting of the target set-top box identification and the random number, and stores the target set-top box identification and the encrypted data in correspondence.

[0093] Step S05: sending a decryption algorithm identifier corresponding to the target encryption algorithm to the set-top box to be activated, so that the set-top box to be activated presets a corresponding decryption algorithm according to the decryption algorithm identifier.

[0094] It should be noted that the encryption algorithm is used to encrypt plain text into cipher text, and the corresponding decryption algorithm is used to decrypt the cipher text into plain text. The server determines the decryption algorithm corresponding to the target encryption algorithm, and sends the decryption algorithm identifier of the decryption algorithm to the set-top box to be activated, so that the set-top box to be activated and the server synchronize the decryption algorithm during the activation stage.

[0095] Furthermore, the method further includes: upon receiving a decryption algorithm verification instruction issued by an activated set-top box, querying contact information corresponding to the activated set-top box; and sending a decryption algorithm identifier corresponding to the activated set-top box to a device corresponding to the contact information.

[0096] It should be understood that the server stores contact information corresponding to each activated set-top box, such as a telephone number. After an activated set-top box issues a decryption algorithm verification instruction, the server sends a decryption algorithm identifier corresponding to the activated set-top box to the device corresponding to the contact information, so that the staff or owner can adjust the decryption algorithm set in the set-top box according to the decryption algorithm identifier, thereby protecting the rights and interests of the enterprise or family, providing an active authentication adjustment method, and avoiding the set-top box being excluded from the upgrade scope after being mistakenly detected by the server.

[0097] It should be noted that, refer to Figure 7 , Figure 7 This is a second schematic diagram of interactive signaling of the set-top box synchronous upgrade method of the present invention. Figure 7The set-top box activation process of an example of the present invention is shown in the figure: the set-top box establishes a connection with the server; the set-top box sends an activation code and a set-top box identifier to the server; the server verifies the activation code; after the verification is passed, a random number is generated, and the data synthesized by the set-top box identifier and the random number array is encrypted to generate encrypted data; the set-top box identifier and the encrypted data are stored accordingly; the server sends a decryption algorithm identifier corresponding to the encryption algorithm used for encryption to the set-top box; the set-top box presets a decryption algorithm corresponding to the decryption algorithm identifier to achieve synchronous setting of the decryption algorithm.

[0098] This embodiment interacts with the set-top box to be activated in a connected state to obtain the activation code and the target set-top box identification corresponding to the set-top box to be activated; verifies the activation code; after the verification is passed, combines the set-top box identification and the generated random number to obtain identification data; randomly selects a target encryption algorithm to encrypt the identification data to obtain the encrypted data corresponding to the target set-top box identification, and stores the encrypted data corresponding to the target set-top box identification; sends the decryption algorithm identification corresponding to the target encryption algorithm to the set-top box to be activated, so that the set-top box to be activated presets the corresponding decryption algorithm according to the decryption algorithm identification. In the above manner, the encrypted data is stored in the set-top box activation stage, and the decryption algorithm is synchronously set with the set-top box, providing data support for the subsequent identity authentication of the set-top box, improving the server's ability to identify the set-top box, and preventing illegal set-top boxes from obtaining upgrade data packets from the server.

[0099] In addition, an embodiment of the present invention further provides a storage medium, on which a set-top box synchronization upgrade program is stored. When the set-top box synchronization upgrade program is executed by a processor, the set-top box synchronization upgrade method described above is implemented.

[0100] Since the storage medium adopts all the technical solutions of all the above embodiments, it has at least all the beneficial effects brought by the technical solutions of the above embodiments, which will not be described one by one here.

[0101] Reference Figure 8 , Figure 8 FIG. 4 is a flow chart of a fourth embodiment of a method for synchronously upgrading a set-top box according to the present invention. Figure 8 As shown, the set-top box synchronous upgrade method proposed in the embodiment of the present invention is applied to the set-top box, comprising:

[0102] Step S1: sending a current set-top box identifier and current version information to a server, so that the server queries the corresponding current encrypted data according to the current set-top box identifier and feeds back the current encrypted data.

[0103] It should be understood that in this embodiment, the upgrade process is initiated by the set-top box. When the set-top box automatically detects that an update is required or receives an upgrade instruction input by the user, it sends the current set-top box identification and current version information to the server and receives the current encrypted data fed back by the server.

[0104] Step S2: decrypt the current encrypted data according to a preset decryption algorithm, extract fragments from the decrypted plaintext data according to a preset interception strategy, and generate current identity data according to the intercepted fragments and current time information.

[0105] Step S3: Send the current identity data to the server so that the server authenticates the current identity data according to the current encrypted data. When the authentication is successful, the server generates current incremental data according to the current version information and the latest version data, and feeds back the current incremental data.

[0106] Specifically, the server decrypts the current encrypted data according to a preset decryption algorithm to obtain plaintext data, intercepts the fragment data from the plaintext data according to a preset interception strategy, obtains the reference fragment and reference time data from the current identity data, verifies the reference time data, and after the verification is passed, compares the fragment data with the reference fragment to obtain a comparison result, and determines whether the authentication is passed according to the comparison result, wherein if the fragment data is consistent with the reference fragment, the authentication is passed. The decryption algorithm and interception strategy adopted by the server and the set-top box are consistent.

[0107] Step S4: Perform synchronous upgrade according to the current incremental data.

[0108] In this embodiment, the set-top box obtains encrypted data from the server, decrypts the encrypted data, captures fragments, and combines it with time information to generate identity data, which is sent to the server for authentication. This increases the difficulty for illegal set-top boxes to capture encrypted data and identity data and crack the decryption method. At the same time, the identity data is time-sensitive, which avoids illegal set-top boxes from performing identity authentication based on historically captured identity data, making it easier for operators to manage.

[0109] It should be noted that the workflow described above is merely illustrative and does not limit the scope of protection of the present invention. In practical applications, technicians in this field can select part or all of them according to actual needs to achieve the purpose of the present embodiment, and no limitation is made here.

[0110] In addition, for technical details not fully described in this embodiment, reference may be made to the set-top box synchronous upgrade method provided in any embodiment of the present invention, and will not be repeated here.

[0111] In addition, it should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0112] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0113] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as a read-only memory (ROM) / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0114] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A method for synchronously upgrading a set-top box, characterized in that: The set-top box synchronous upgrade method comprises: Receive set-top box identification and version information sent by multiple set-top boxes; Performing identity authentication on the multiple set-top boxes according to the received set-top box identifiers, and determining multiple target set-top boxes that have passed the authentication; Synchronously upgrading the multiple target set-top boxes based on version information corresponding to each target set-top box; The step of performing identity authentication on the plurality of set-top boxes according to the received set-top box identifications to determine the plurality of target set-top boxes that have passed the authentication includes: Query the encrypted data corresponding to each set-top box according to the received set-top box identification; Sending corresponding encrypted data to each set-top box, so that each set-top box generates identity data according to the received encrypted data, and feeds back the identity data; Authenticate the identity data fed back by each set-top box according to the encrypted data corresponding to each set-top box, and determine multiple target set-top boxes that have passed the authentication; Wherein, the method further comprises: Sending corresponding encrypted data to each set-top box, so that each set-top box decrypts the received encrypted data according to a preset decryption algorithm, intercepts segments from the decrypted plaintext data according to a preset interception strategy, generates identity data according to the intercepted segments and current time information, and feeds back the identity data, wherein the preset interception strategy is intercepting m bytes of the head, intercepting k bytes of the tail, intercepting f bytes after the pth byte, intercepting multiple bytes at multiple positions and splicing them, wherein m, k, p, and f are integers greater than 0; The step of authenticating the identity data fed back by each set-top box according to the encrypted data corresponding to each set-top box, and determining multiple target set-top boxes that have passed the authentication, includes: Decrypt the encrypted data corresponding to each set-top box according to a preset decryption algorithm to obtain the plaintext data corresponding to each set-top box; Extracting fragment data from the plaintext data according to a preset extraction strategy; obtaining a reference segment and reference time data from the identity data; Verifying the reference time data; After verification, the segment data is compared with the reference segment to obtain a comparison result; A plurality of target set-top boxes that have passed the authentication are determined according to the comparison result.

2. The set-top box synchronous upgrade method according to claim 1, characterized in that: Before receiving the set-top box identifications and version information sent by the plurality of set-top boxes, the method further comprises: Interacting with a set-top box to be activated in a connected state, and obtaining an activation code and a target set-top box identifier corresponding to the set-top box to be activated; Verifying the activation code; After the verification is passed, the target set-top box identification and the generated random number are combined to obtain identification data; Randomly selecting a target encryption algorithm to encrypt the identification data, obtaining encrypted data corresponding to the target set-top box identification, and storing the encrypted data corresponding to the target set-top box identification; The decryption algorithm identifier corresponding to the target encryption algorithm is sent to the set-top box to be activated, so that the set-top box to be activated presets the corresponding decryption algorithm according to the decryption algorithm identifier.

3. The set-top box synchronous upgrade method according to claim 2, characterized in that: The method further comprises: Upon receiving a decryption algorithm verification instruction sent by an activated set-top box, querying contact information corresponding to the activated set-top box; The decryption algorithm identifier corresponding to the activated set-top box is sent to the device corresponding to the contact information.

4. The method for synchronously upgrading a set-top box according to any one of claims 1 to 3, characterized in that: The synchronously upgrading the multiple target set-top boxes based on the version information corresponding to each target set-top box includes: Generate incremental data corresponding to each target set-top box based on version information corresponding to each target set-top box and the latest version data; The corresponding incremental data is sent to each target set-top box, so that each target set-top box is synchronously upgraded according to the incremental data.

5. A set-top box synchronous upgrade method, applied to a set-top box, characterized in that: The set-top box synchronous upgrade method comprises: Sending a current set-top box identifier and current version information to a server, so that the server queries the corresponding current encrypted data according to the current set-top box identifier and feeds back the current encrypted data; Decrypt the current encrypted data according to a preset decryption algorithm, extract segments from the decrypted plaintext data according to a preset interception strategy, and generate current identity data according to the intercepted segments and current time information, wherein the preset interception strategy is to intercept m bytes at the head, intercept k bytes at the tail, intercept f bytes after the pth byte, intercept multiple bytes at multiple positions and concatenate them, wherein m, k, p, and f are integers greater than 0; Sending the current identity data to the server, so that the server authenticates the current identity data according to the current encrypted data, and when the authentication is passed, generating current incremental data according to the current version information and the latest version data, and feeding back the current incremental data; A synchronous upgrade is performed according to the current incremental data.

6. A set-top box synchronous upgrade device, characterized in that: The set-top box synchronous upgrade device is a server or a set-top box; The server comprises: a memory, a processor, and a set-top box synchronization upgrade program stored in the memory and executable on the processor, wherein the set-top box synchronization upgrade program is configured to implement the set-top box synchronization upgrade method according to any one of claims 1 to 4; The set-top box comprises: a memory, a processor and a set-top box synchronization upgrade program stored in the memory and executable on the processor, wherein the set-top box synchronization upgrade program is configured to implement the set-top box synchronization upgrade method according to claim 5.

7. A storage medium, characterized in that: The storage medium stores a set-top box synchronization upgrade program, and when the set-top box synchronization upgrade program is executed by the processor, the set-top box synchronization upgrade method according to any one of claims 1 to 4 or claim 5 is implemented.

Images