Home appliance firmware upgrade method and system based on security authentication

Abstract

The present invention discloses a method and system for upgrading the firmware of a home appliance based on security authentication, the method comprising: obtaining a firmware upgrade request sent by a request application of a target home appliance; performing security authentication on the firmware upgrade request based on encryption and decryption authentication rules obtained in advance through negotiation, and obtaining a security authentication result of the request application; obtaining historical communication data of the request application; and executing a firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result. It can be seen that the present invention can achieve a safer firmware upgrade, improve the working efficiency and security of the smart home system, and reduce firmware failures of home appliances.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a method and system for upgrading firmware of a household appliance based on security authentication. Background Art

[0002] With the widespread application of smart home technology and the increase in the number of devices connected to smart homes, how to improve the efficiency and security of firmware upgrades of connected devices has become an important issue. In the existing technology, most home devices do not fully perform security authentication on the upgraded program applications during firmware upgrades, nor do they make reasonable plans for the upgrades, so the efficiency and security of the upgrades are lacking. It can be seen that the existing technology has defects that need to be solved urgently. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a method and system for upgrading the firmware of a home appliance based on security authentication, which can achieve safer firmware upgrades, improve the working efficiency and security of the smart home system, and reduce firmware failures of home appliances.

[0004] In order to solve the above technical problems, the first aspect of the present invention discloses a method for upgrading firmware of a household device based on security authentication, the method comprising:

[0005] Obtain a firmware upgrade request sent by a requesting application of a target home device;

[0006] Based on the encryption and decryption authentication rules obtained in advance, the firmware upgrade request is security authenticated to obtain a security authentication result of the requesting application;

[0007] Obtaining historical communication data of the requesting application;

[0008] A firmware upgrade operation corresponding to the firmware upgrade request is performed according to the historical communication data and the security authentication result.

[0009] As an optional implementation, in the first aspect of the present invention, the security authentication of the firmware upgrade request based on the encryption and decryption authentication rules obtained in advance negotiation to obtain the security authentication result of the requesting application includes:

[0010] Obtaining a communication token exchanged by the requesting application during the first communication;

[0011] Based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application.

[0012] As an optional implementation, in the first aspect of the present invention, the decryption and authentication of the firmware upgrade request based on the communication token and the negotiated encryption algorithm to obtain the security authentication result of the requesting application includes:

[0013] Determining whether the communication token is within the validity period;

[0014] If yes, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application;

[0015] If the security authentication result is safe, the validity period of the communication token is refreshed.

[0016] As an optional embodiment, in the first aspect of the present invention, the effective time is 120 minutes.

[0017] As an optional implementation, in the first aspect of the present invention, the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data and firmware error data transmitted by the requesting application in a historical time period.

[0018] As an optional implementation, in the first aspect of the present invention, executing the firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result includes:

[0019] When the security authentication result is unsafe, refusing to execute the firmware upgrade request;

[0020] When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data;

[0021] determining security parameters of the requesting application based on the historical communication data;

[0022] Determine a priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter;

[0023] When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

[0024] As an optional implementation, in the first aspect of the present invention, determining the security parameters of the requesting application according to the historical communication data includes:

[0025] The historical communication data is input into a trained security prediction neural network model to obtain the output security parameters of the requested application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and parameters are updated based on the gradient descent algorithm until the loss function value reaches the minimum.

[0026] As an optional implementation, in the first aspect of the present invention, determining the priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter includes:

[0027] Calculate the weighted average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; wherein the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the data volume of the historical communication data.

[0028] A second aspect of an embodiment of the present invention discloses a home appliance firmware upgrade system based on security authentication, the system comprising:

[0029] A first acquisition module, used to acquire a firmware upgrade request sent by a request application of a target home device;

[0030] An authentication module, configured to perform security authentication on the firmware upgrade request based on encryption and decryption authentication rules obtained in advance through negotiation, and obtain a security authentication result of the requesting application;

[0031] A second acquisition module, used to acquire historical communication data of the requesting application;

[0032] An execution module is used to execute a firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result.

[0033] As an optional implementation, in the second aspect of the present invention, the authentication module performs security authentication on the firmware upgrade request based on the encryption and decryption authentication rules obtained in advance, and obtains the specific manner of the security authentication result of the requesting application, including:

[0034] Obtaining a communication token exchanged by the requesting application during the first communication;

[0035] Based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application.

[0036] As an optional implementation, in the second aspect of the present invention, the authentication module decrypts and authenticates the firmware upgrade request based on the communication token and the negotiated encryption algorithm, and obtains a specific method of the security authentication result of the requesting application, including:

[0037] Determining whether the communication token is within the validity period;

[0038] If yes, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application;

[0039] If the security authentication result is safe, the validity period of the communication token is refreshed.

[0040] As an optional embodiment, in the second aspect of the present invention, the effective time is 120 minutes.

[0041] As an optional implementation, in the second aspect of the present invention, the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data and firmware error data transmitted by the requesting application in a historical time period.

[0042] As an optional implementation, in the second aspect of the present invention, the specific manner in which the execution module executes the firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result includes:

[0043] When the security authentication result is unsafe, refusing to execute the firmware upgrade request;

[0044] When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data;

[0045] determining security parameters of the requesting application based on the historical communication data;

[0046] Determine a priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter;

[0047] When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

[0048] As an optional implementation, in the second aspect of the present invention, the specific manner in which the execution module determines the security parameters of the requesting application according to the historical communication data includes:

[0049] The historical communication data is input into a trained security prediction neural network model to obtain the output security parameters of the requested application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and parameters are updated based on the gradient descent algorithm until the loss function value reaches the minimum.

[0050] As an optional implementation, in the second aspect of the present invention, the specific manner in which the execution module determines the priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter includes:

[0051] Calculate the weighted average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; wherein the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the data volume of the historical communication data.

[0052] The third aspect of the present invention discloses another household appliance firmware upgrade system based on security authentication, the system comprising:

[0053] A memory storing executable program code;

[0054] a processor coupled to the memory;

[0055] The processor calls the executable program code stored in the memory to execute part or all of the steps in the method for upgrading firmware of a household device based on security authentication disclosed in the first aspect of the present invention.

[0056] The fourth aspect of the present invention discloses a computer storage medium, which stores computer instructions. When the computer instructions are called, they are used to execute some or all of the steps in the home appliance firmware upgrade method based on security authentication disclosed in the first aspect of the present invention.

[0057] Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

[0058] The present invention can use the encryption and decryption authentication rules obtained in advance to authenticate the requesting application, and perform firmware upgrades in combination with historical sending data and authentication results, thereby achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0060] Figure 1 It is a flowchart of a method for upgrading firmware of a household device based on security authentication disclosed in an embodiment of the present invention.

[0061] Figure 2 It is a structural diagram of a household appliance firmware upgrade system based on security authentication disclosed in an embodiment of the present invention.

[0062] Figure 3 It is a structural diagram of another household appliance firmware upgrade system based on security authentication disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0063] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0064] The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, product or equipment that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or equipment.

[0065] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0066] The present invention discloses a method and system for upgrading the firmware of a home appliance based on security authentication, which can authenticate the requesting application program by using the encryption and decryption authentication rules obtained by pre-negotiation, and perform the firmware upgrade in combination with the historical transmission data and the authentication result, thereby realizing a safer firmware upgrade, improving the working efficiency and security of the smart home system, and reducing the firmware failure of the home appliance. The following are detailed descriptions respectively.

[0067] Embodiment 1

[0068] See also Figure 1 , Figure 1 1 is a flowchart of a method for upgrading the firmware of a household appliance based on security authentication disclosed in an embodiment of the present invention. Figure 1 The described method for upgrading the firmware of a home appliance based on security authentication can be applied to a data processing system / data processing device / data processing server (wherein the server includes a local processing server or a cloud processing server). Figure 1 As shown, the method for upgrading the firmware of a home appliance based on security authentication may include the following operations:

[0069] 101. Obtain a firmware upgrade request sent by a request application of a target home device.

[0070] 102. Based on the encryption and decryption authentication rules obtained in advance through negotiation, security authentication is performed on the firmware upgrade request to obtain a security authentication result of the requesting application.

[0071] 103. Obtain historical communication data of the requesting application.

[0072] 104. Execute a firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result.

[0073] It can be seen that the above-mentioned embodiments of the invention can use the pre-negotiated encryption and decryption authentication rules to authenticate the requesting application, and perform firmware upgrades in combination with historical sending data and authentication results, thereby achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0074] As an optional embodiment, in the above steps, based on the encryption and decryption authentication rules obtained in advance, security authentication is performed on the firmware upgrade request to obtain the security authentication result of the requesting application, including:

[0075] Get the communication token exchanged by the requesting application during the first communication;

[0076] Based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application.

[0077] It can be seen that through the above-mentioned optional embodiments, the firmware upgrade request can be authenticated according to the communication token and the negotiated encryption algorithm, thereby assisting in achieving more secure firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0078] As an optional embodiment, in the above steps, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain the security authentication result of the requesting application, including:

[0079] Determine whether the communication token is within the valid time;

[0080] If yes, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain the security authentication result of the requesting application;

[0081] If the security authentication result is secure, refresh the validity period of the communication token.

[0082] Optionally, the encryption algorithm is an AES algorithm, an RSA algorithm, or an ECC algorithm.

[0083] It can be seen that through the above-mentioned optional embodiments, the validity of the communication token can be determined according to the effective time and the effective time can be refreshed after the authentication is passed, so that the communication authentication between the device and the upgrade information terminal remains smooth, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0084] As an optional embodiment, in the above steps, the effective time is 120 minutes.

[0085] It can be seen that through the above optional embodiments, the duration of the effective time is clarified so that the communication authentication between the device and the upgrade information terminal remains smooth, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0086] As an optional embodiment, in the above steps, the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data and firmware error data transmitted by the requesting application in a historical time period.

[0087] It can be seen that through the above optional embodiments, the content of historical communication data is clarified, so as to be used to more accurately determine the execution strategy of firmware upgrades in the future, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of smart home systems, and reducing firmware failures of home devices.

[0088] As an optional embodiment, in the above steps, executing the firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result includes:

[0089] When the security authentication result is unsafe, the firmware upgrade request is rejected;

[0090] When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data;

[0091] determining security parameters of the requesting application based on historical communication data;

[0092] Determine a priority parameter corresponding to the firmware upgrade request according to the data similarity and security parameters;

[0093] When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

[0094] It can be seen that through the above-mentioned optional embodiments, after the security authentication is passed, the priority parameters of the requesting application can be calculated based on the calculated data similarity and security parameters to achieve orderly execution between multiple upgrades, thereby assisting in achieving safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0095] As an optional embodiment, in the above step, determining the security parameters of the requesting application according to the historical communication data includes:

[0096] The historical communication data is input into the trained security prediction neural network model to obtain the output security parameters of the requested application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and updates parameters based on the gradient descent algorithm until the loss function value is minimized.

[0097] It can be seen that through the above-mentioned optional embodiments, the security parameters of the requesting application can be calculated based on the trained neural network and historical communication data, so as to assist in the orderly execution of multiple upgrades in the future, thereby assisting in achieving safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0098] As an optional embodiment, in the above steps, determining the priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter includes:

[0099] Calculate the weighted average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; optionally, the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the amount of historical communication data.

[0100] It can be seen that through the above-mentioned optional embodiments, the priority parameters of the firmware upgrade request can be determined based on the weight determination rules and weighted algorithms, so as to assist in the orderly execution of multiple upgrades in the subsequent process, thereby assisting in the realization of safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0101] Embodiment 2

[0102] See also Figure 2 , Figure 2 1 is a schematic diagram of a structure of a home appliance firmware upgrade system based on security authentication disclosed in an embodiment of the present invention. Figure 2 The described home appliance firmware upgrade system based on security authentication can be applied to a data processing system / data processing device / data processing server (wherein the server includes a local processing server or a cloud processing server). Figure 2 As shown, the home appliance firmware upgrade system based on security authentication may include:

[0103] The first acquisition module 201 is used to acquire a firmware upgrade request sent by a request application of a target home device.

[0104] The authentication module 202 is used to perform security authentication on the firmware upgrade request based on the encryption and decryption authentication rules obtained in advance, and obtain the security authentication result of the requesting application.

[0105] The second acquisition module 203 is used to acquire historical communication data of the requesting application.

[0106] The execution module 204 is used to execute the firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result.

[0107] It can be seen that the above-mentioned embodiments of the invention can use the pre-negotiated encryption and decryption authentication rules to authenticate the requesting application, and perform firmware upgrades in combination with historical sending data and authentication results, thereby achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0108] As an optional embodiment, the authentication module performs security authentication on the firmware upgrade request based on the encryption and decryption authentication rules obtained in advance, and obtains the specific method of the security authentication result of the requesting application, including:

[0109] Get the communication token exchanged by the requesting application during the first communication;

[0110] Based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application.

[0111] It can be seen that through the above-mentioned optional embodiments, the firmware upgrade request can be authenticated according to the communication token and the negotiated encryption algorithm, thereby assisting in achieving more secure firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0112] As an optional embodiment, the authentication module decrypts and authenticates the firmware upgrade request based on the communication token and the negotiated encryption algorithm, and obtains the security authentication result of the requesting application in a specific manner, including:

[0113] Determine whether the communication token is within the valid time;

[0114] If yes, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain the security authentication result of the requesting application;

[0115] If the security authentication result is secure, refresh the validity period of the communication token.

[0116] Optionally, the encryption algorithm is an AES algorithm, an RSA algorithm, or an ECC algorithm.

[0117] It can be seen that through the above-mentioned optional embodiments, the validity of the communication token can be determined according to the effective time and the effective time can be refreshed after the authentication is passed, so that the communication authentication between the device and the upgrade information terminal remains smooth, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0118] As an optional embodiment, the duration of the effective time is 120 minutes.

[0119] It can be seen that through the above optional embodiments, the duration of the effective time is clarified so that the communication authentication between the device and the upgrade information terminal remains smooth, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0120] As an optional embodiment, the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data, and firmware error data transmitted by the requesting application in a historical time period.

[0121] It can be seen that through the above optional embodiments, the content of historical communication data is clarified, so as to be used to more accurately determine the execution strategy of firmware upgrades in the future, thereby assisting in achieving safer firmware upgrades, improving the working efficiency and security of smart home systems, and reducing firmware failures of home devices.

[0122] As an optional embodiment, the specific manner in which the execution module executes the firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result includes:

[0123] When the security authentication result is unsafe, the firmware upgrade request is rejected;

[0124] When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data;

[0125] determining security parameters of the requesting application based on historical communication data;

[0126] Determine a priority parameter corresponding to the firmware upgrade request according to the data similarity and security parameters;

[0127] When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

[0128] It can be seen that through the above-mentioned optional embodiments, after the security authentication is passed, the priority parameters of the requesting application can be calculated based on the calculated data similarity and security parameters to achieve orderly execution between multiple upgrades, thereby assisting in achieving safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home devices.

[0129] As an optional embodiment, the specific manner in which the execution module determines the security parameters of the requesting application according to the historical communication data includes:

[0130] The historical communication data is input into the trained security prediction neural network model to obtain the output security parameters of the requested application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and updates parameters based on the gradient descent algorithm until the loss function value is minimized.

[0131] It can be seen that through the above-mentioned optional embodiments, the security parameters of the requesting application can be calculated based on the trained neural network and historical communication data, so as to assist in the orderly execution of multiple upgrades in the future, thereby assisting in achieving safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0132] As an optional embodiment, the specific manner in which the execution module determines the priority parameter corresponding to the firmware upgrade request according to the data similarity and the security parameter includes:

[0133] Calculate the weighted average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; optionally, the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the amount of historical communication data.

[0134] It can be seen that through the above-mentioned optional embodiments, the priority parameters of the firmware upgrade request can be determined based on the weight determination rules and weighted algorithms, so as to assist in the orderly execution of multiple upgrades in the subsequent process, thereby assisting in the realization of safer, more efficient and reasonable firmware upgrades, improving the working efficiency and security of the smart home system, and reducing firmware failures of home appliances.

[0135] Embodiment 3

[0136] See also Figure 3 , Figure 3 This is another household appliance firmware upgrade system based on security authentication disclosed in an embodiment of the present invention. Figure 3 The described home appliance firmware upgrade system based on security authentication is applied to a data processing system / data processing device / data processing server (wherein the server includes a local processing server or a cloud processing server). Figure 3 As shown, the home appliance firmware upgrade system based on security authentication may include:

[0137] A memory 301 storing executable program codes;

[0138] a processor 302 coupled to the memory 301;

[0139] The processor 302 calls the executable program code stored in the memory 301 to execute the steps of the method for upgrading the firmware of a home appliance based on security authentication described in the first embodiment.

[0140] Embodiment 4

[0141] An embodiment of the present invention discloses a computer-readable storage medium storing a computer program for electronic data exchange, wherein the computer program enables a computer to execute the steps of the method for upgrading firmware of a household appliance based on security authentication described in the first embodiment.

[0142] Embodiment 5

[0143] An embodiment of the present invention discloses a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, and the computer program is operable to enable a computer to execute the steps of the home appliance firmware upgrade method based on security authentication described in Example 1.

[0144] The above describes specific embodiments of the present specification, and other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily have to be performed in the specific order or sequential order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0145] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0146] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0147] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems, or computer program products. Therefore, the embodiments of this specification may be in the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of this specification may be in the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0148] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0149] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0150] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0151] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0152] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0153] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0154] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0155] This specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0156] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0157] Finally, it should be noted that the method and system for upgrading the firmware of a household appliance based on security authentication disclosed in the embodiment of the present invention disclose only the preferred embodiments of the present invention, which are only used to illustrate the technical solution of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, it should be understood by those skilled in the art that the technical solutions described in the aforementioned embodiments can still be modified, or some of the technical features therein can be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A method for upgrading home appliance firmware based on security authentication, characterized in that: The method comprises: Obtain a firmware upgrade request sent by a requesting application of a target home device; Based on the encryption and decryption authentication rules obtained in advance, the firmware upgrade request is security authenticated to obtain a security authentication result of the requesting application; Acquire historical communication data of the requesting application; the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data and firmware error data transmitted by the requesting application in a historical time period; Executing a firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result, including: When the security authentication result is unsafe, refusing to execute the firmware upgrade request; When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data; Input the historical communication data into a trained security prediction neural network model to obtain the output security parameters of the request application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and updates parameters based on a gradient descent algorithm until the loss function value reaches a minimum; Calculate the weighted sum average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; wherein the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the data volume of the historical communication data; When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

2. The method for upgrading home appliance firmware based on security authentication according to claim 1, characterized in that: The step of performing security authentication on the firmware upgrade request based on the encryption and decryption authentication rules obtained in advance and obtaining the security authentication result of the requesting application program includes: Obtaining a communication token exchanged by the requesting application during the first communication; Based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application.

3. The method for upgrading home appliance firmware based on security authentication according to claim 2, characterized in that: The decrypting and authenticating the firmware upgrade request based on the communication token and the negotiated encryption algorithm to obtain a security authentication result of the requesting application program includes: Determining whether the communication token is within the validity period; If yes, based on the communication token and the negotiated encryption algorithm, the firmware upgrade request is decrypted and authenticated to obtain a security authentication result of the requesting application; If the security authentication result is safe, the validity period of the communication token is refreshed.

4. The method for upgrading home appliance firmware based on security authentication according to claim 3, characterized in that: The duration of the effective time is 120 minutes.

5. A home appliance firmware upgrade system based on security authentication, characterized in that: The system comprises: A first acquisition module, used to acquire a firmware upgrade request sent by a request application of a target home device; An authentication module, configured to perform security authentication on the firmware upgrade request based on encryption and decryption authentication rules obtained in advance through negotiation, and obtain a security authentication result of the requesting application; A second acquisition module is used to acquire historical communication data of the requesting application; the historical communication data includes a plurality of calculation result data, firmware version request data, firmware download data and firmware error data transmitted by the requesting application in a historical time period; An execution module, configured to execute a firmware upgrade operation corresponding to the firmware upgrade request according to the historical communication data and the security authentication result, comprising: When the security authentication result is unsafe, refusing to execute the firmware upgrade request; When the security authentication result is safe, calculating the data similarity between the firmware data corresponding to the firmware upgrade request and the historical communication data; Input the historical communication data into a trained security prediction neural network model to obtain the output security parameters of the request application; the security prediction neural network model is a CNN structure model, which is trained by a training data set including historical communication data of multiple training program applications and corresponding program security annotations, and updates parameters based on a gradient descent algorithm until the loss function value reaches a minimum; Calculate the weighted sum average of the data similarity and the security parameter to obtain the priority parameter corresponding to the firmware upgrade request; wherein the first weight corresponding to the security parameter is greater than the second weight corresponding to the data similarity; the first weight is proportional to the prediction accuracy of the security prediction neural network model in the verification phase; the second weight is inversely proportional to the data volume of the historical communication data; When there are multiple firmware upgrade requests, the firmware upgrade operation corresponding to each firmware upgrade request is executed in order from large to small according to the priority parameter.

6. A home appliance firmware upgrade system based on security authentication, characterized in that: The system comprises: A memory storing executable program code; a processor coupled to the memory; The processor calls the executable program code stored in the memory to execute the home appliance firmware upgrade method based on security authentication as described in any one of claims 1-4.

Images