Upgrading method and device of private cloud server and computer program product

Abstract

The invention provides a private cloud server upgrading method and device and a computer program product, and the method comprises the steps that a private cloud server sends an upgrade package verification key and a first transmission key to a target client, so that the target client sends the upgrade package verification key and the first transmission key to a supplier server, the upgrade patch verification key is an encryption key of a firmware upgrade patch generated by the private cloud server, and the first transmission key is a transmission key of an external network port of the private cloud server; and under the condition that the external network of the private cloud server receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted by the external network of the private cloud server to perform firmware upgrade. And the encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server by adopting the upgrade package verification key and the first transmission key, so that the problem that the private cloud server is easily invaded during firmware upgrade is solved.

Description

Technical Field

[0001] The present invention relates to the field of private cloud upgrades, and in particular to a method, device, computer-readable storage medium and computer program product for upgrading a private cloud server. Background Art

[0002] With the rapid development of IoT technology, the number of devices owned by families continues to increase, and the concept of smart home hubs has emerged. The home hub can unify the control of devices within the home, coordinate the status of different devices, and control devices through a unified entrance and exit. As people pay more and more attention to personal privacy, devices such as home private cloud hubs have emerged. Instead of going through the device supplier's server, private servers in their own homes can be used as a transfer station for remote control, storing all data controlled by users in their own homes. However, with the iteration of devices, how to upgrade the functions of private clouds while protecting user privacy and security has become the next issue. Summary of the invention

[0003] The main purpose of the present application is to provide a method, device, computer-readable storage medium and computer program product for upgrading a private cloud server, so as to at least solve the problem in the prior art that the firmware of a private cloud server is easily invaded during upgrading.

[0004] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a method for upgrading a private cloud server is provided, including: the private cloud server sends an upgrade package verification key and a first transmission key to a target client, so that the target client sends the upgrade package verification key and the first transmission key to a supplier server, the upgrade package verification key is an encryption key of a firmware upgrade package generated by the private cloud server, the first transmission key is a transmission key of an external network port of the private cloud server, and the target client is a client registered with the supplier server and bound to the private cloud server; when the private cloud server receives the encrypted firmware upgrade package sent by the supplier server on the external network and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the external network of the private cloud server for firmware upgrade, and the encrypted firmware upgrade package is obtained by the supplier server encrypting the firmware upgrade package using the upgrade package verification key and the first transmission key.

[0005] Optionally, after the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, the method also includes: when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and fails to decrypt the encrypted firmware upgrade package, the private cloud server does not receive data from the private cloud server's external network.

[0006] Optionally, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, including: the private cloud server receives a second transmission key uploaded by the target client, the second transmission key is a transmission key generated by the supplier server in response to a firmware upgrade request and sent to the target client, and the firmware upgrade request is a request issued by the target client when a new device is added or a firmware upgrade is required; the private cloud server uses the second transmission key to encrypt the upgrade package verification key and the first transmission key to obtain encrypted information; the private cloud server sends the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server.

[0007] Optionally, the generation process of the encrypted firmware upgrade package includes: the supplier server decrypts the encrypted information through the second transmission key to obtain the upgrade package verification key and the first transmission key; the supplier server uses the upgrade package verification key to encrypt the firmware upgrade package to obtain a primary encrypted firmware upgrade package, and uses the second transmission key to perform a secondary encryption on the primary encrypted firmware upgrade package to obtain the encrypted firmware upgrade package.

[0008] Optionally, the private cloud server receives a second transmission key uploaded by the target client, including: the private cloud server receives the second transmission key and a first firmware upgrade verification ID uploaded by the target client, the first firmware upgrade verification ID being the ID of the firmware upgrade package sent by the supplier server to the target client; the external network of the private cloud server receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, including: the external network of the private cloud server receives the encrypted firmware upgrade package and the second firmware upgrade verification ID sent by the supplier server, the second firmware upgrade verification ID being the ID of the firmware upgrade package in the encrypted firmware upgrade package; when the second firmware upgrade verification ID is the same as the first firmware upgrade verification ID, it is determined that the ID verification is successful; when the ID verification is successful, the external network of the private cloud server decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package.

[0009] Optionally, the private cloud server receives a second transmission key uploaded by the target client, including: the private cloud server receives an obfuscated transmission key uploaded by the target client, the obfuscated transmission key is obtained by the supplier server encrypting the second transmission key using an obfuscated encryption algorithm and sending the encrypted key to the target client; the private cloud server decrypts the obfuscated transmission key using a decryption algorithm corresponding to the obfuscated encryption algorithm to obtain the second transmission key.

[0010] Optionally, the private cloud server sends the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server, including: the private cloud server converts the encrypted information into a QR code, so that the target client recognizes the QR code and sends the recognition result to the supplier server; or, the private cloud server converts the encrypted information into a string, so that the target client forwards the string to the supplier server.

[0011] According to another aspect of the present application, an upgrade device for a private cloud server is provided, comprising: a sending unit, used for the private cloud server to send an upgrade package verification key and a first transmission key to a target client, so that the target client sends the upgrade package verification key and the first transmission key to a supplier server, the upgrade package verification key is an encryption key of a firmware upgrade package generated by the private cloud server, the first transmission key is a transmission key of an external network port of the private cloud server, and the target client is a client registered with the supplier server and bound to the private cloud server; a receiving unit, used for receiving an encrypted firmware upgrade package sent by the supplier server in the external network of the private cloud server and decrypting the encrypted firmware upgrade package to obtain the firmware upgrade package, and when the private cloud server receives the firmware upgrade package transmitted from the external network of the private cloud server for firmware upgrade, the encrypted firmware upgrade package is obtained by the supplier server encrypting the firmware upgrade package using the upgrade package verification key and the first transmission key.

[0012] According to another aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute any one of the methods described.

[0013] According to another aspect of the present application, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor, any one of the methods described above is implemented.

[0014] By applying the technical solution of the present application, in the upgrade method of the above-mentioned private cloud server, the private cloud server forwards the upgrade package verification key and the first transmission key to the supplier server through the bound client, so that the supplier server uses the upgrade package verification key and the first transmission key to encrypt the firmware upgrade package to obtain the encrypted firmware upgrade package, and then the encrypted firmware upgrade package sent by the supplier server can be received through the external network of the private cloud server, and the upgrade package verification key and the first transmission key are used to decrypt the package. If the decryption is successful, the decrypted firmware upgrade package is transmitted to the private cloud server for firmware upgrade, otherwise it is retained in the external network of the private cloud server to prevent the private cloud server from being invaded, thereby ensuring the data security of the private cloud server and solving the problem that the private cloud server is easily invaded during the firmware upgrade in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 A hardware structure block diagram of a mobile terminal for executing a method for upgrading a private cloud server provided in an embodiment of the present application is shown;

[0016] Figure 2A schematic diagram of a process for upgrading a private cloud server provided according to an embodiment of the present application is shown;

[0017] Figure 3 A schematic diagram of a communication connection relationship of a private cloud server provided according to an embodiment of the present application is shown;

[0018] Figure 4 A schematic diagram of a process flow of another private cloud server upgrade method provided according to an embodiment of the present application is shown;

[0019] Figure 5 A structural block diagram of an upgrade device for a private cloud server provided according to an embodiment of the present application is shown.

[0020] The above drawings include the following reference numerals:

[0021] 102, processor; 104, memory; 106, transmission device; 108, input and output devices. DETAILED DESCRIPTION

[0022] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] As introduced in the background technology, the firmware of a private cloud server in the prior art is easily invaded during upgrading. To solve this technical problem, the embodiments of the present application provide a method, device, computer-readable storage medium and computer program product for upgrading a private cloud server.

[0026] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0027] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking running on a mobile terminal as an example, Figure 1 FIG. 1 is a hardware structure block diagram of a mobile terminal of a private cloud server upgrade method according to an embodiment of the present invention. Figure 1 As shown, the mobile terminal may include one or more ( Figure 1 Only one is shown in the figure) a processor 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the mobile terminal may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the mobile terminal. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0028] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the upgrade method of the private cloud server in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, the above method is implemented. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories can be connected to the mobile terminal via a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof. The transmission device 106 is used to receive or send data via a network. The above-mentioned specific network examples may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0029] In this embodiment, a method for upgrading a private cloud server running on a mobile terminal, a computer terminal or a similar computing device is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in an order different from that shown here.

[0030] Figure 2 1 is a flow chart of a method for upgrading a private cloud server according to an embodiment of the present application. Figure 2 As shown, the method comprises the following steps:

[0031] Step S201, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0032] In step S202, when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade. The encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server using the upgrade package verification key and the first transmission key.

[0033] In the upgrade method of the above-mentioned private cloud server, the private cloud server forwards the upgrade package verification key and the first transmission key to the supplier server through the bound client, so that the supplier server uses the upgrade package verification key and the first transmission key to encrypt the above-mentioned firmware upgrade package to obtain the encrypted firmware upgrade package, and then the encrypted firmware upgrade package sent by the supplier server can be received through the external network of the private cloud server, and the upgrade package verification key and the first transmission key are used to decrypt the package. If the decryption is successful, the decrypted firmware upgrade package will be transmitted to the private cloud server for firmware upgrade, otherwise it will be retained in the external network of the private cloud server to prevent the private cloud server from being invaded, thereby ensuring the data security of the private cloud server and solving the problem of the private cloud server being easily invaded during firmware upgrade in the prior art.

[0034] In order to prevent malicious programs from being injected in disguise, in an optional implementation manner, after the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, the method further includes:

[0035] Step S301, when the external network of the private cloud server receives the encrypted firmware upgrade package sent by the supplier server and fails to decrypt the encrypted firmware upgrade package, the private cloud server does not receive data from the external network of the private cloud server.

[0036] In the above implementation, if the decryption of the encrypted firmware upgrade package fails, it indicates that the encrypted firmware upgrade package is not encrypted by the upgrade package verification key and the first transmission key generated by the private cloud server. In this case, the encrypted firmware upgrade package is considered to be intrusion data. The private cloud server does not receive the encrypted firmware upgrade package to prevent malicious programs from disguising and injecting it. The private cloud server does not expose the port to the external network isolation layer of the private cloud server, so that the external network isolation layer of the private cloud server blocks the intrusion data outside the private cloud server.

[0037] In order to achieve secure interaction, in an optional implementation, the above step S201 includes:

[0038] Step S2011, the private cloud server receives the second transmission key uploaded by the target client, where the second transmission key is a transmission key generated by the supplier server in response to a firmware upgrade request and sent to the target client, where the firmware upgrade request is a request sent by the target client when a new device is added or a firmware upgrade is required;

[0039] Step S2012, the private cloud server uses the second transmission key to encrypt the upgrade package verification key and the first transmission key to obtain encrypted information;

[0040] Step S2013: The private cloud server sends the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server.

[0041] In the above implementation, when a user adds a new device or needs a firmware upgrade, the user can directly request a new firmware from the service provider in the target client (app). This behavior can only be initiated by the owner of the private server. The supplier server generates and sends a second transmission key to the target client in response to the firmware upgrade request. When the user receives the second transmission key, he switches to his own local area network, opens the login management page of the user's private server, selects the firmware upgrade function on the page after logging in, and sends the instructions sent by the server to the private server through NFC, Bluetooth, local area network connection, etc. The private cloud server can use the second transmission key to encrypt the upgrade package verification key and the first transmission key to obtain encrypted information, and forward the encrypted information to the supplier server through the target client. Before the supplier server sends the firmware upgrade package to the private server, the supplier server and the private server interact through the target client to avoid key leakage and prevent data intrusion.

[0042] In order to obtain a qualified encrypted firmware upgrade package, in an optional implementation, the generation process of the encrypted firmware upgrade package includes:

[0043] Step S401, the supplier server decrypts the encrypted information using the second transmission key to obtain the upgrade package verification key and the first transmission key;

[0044] Step S402: the supplier server encrypts the firmware upgrade package using the upgrade package verification key to obtain a primary encrypted firmware upgrade package, and uses the second transmission key to perform secondary encryption on the primary encrypted firmware upgrade package to obtain the encrypted firmware upgrade package.

[0045] In the above implementation, in order to prevent the upgrade package verification key and the first transmission key from being leaked, the private cloud server uses the second transmission key to encrypt the upgrade package verification key and the first transmission key, and only the second transmission key of the supplier server can successfully decrypt and obtain the upgrade package verification key and the first transmission key. The firmware upgrade package can be encrypted by the upgrade package verification key and the first transmission key to obtain the encrypted firmware upgrade package. Only data encrypted by the upgrade package verification key and the first transmission key can be transmitted to the private cloud server.

[0046] In order to ensure that the correct firmware upgrade package is sent, in an optional implementation,

[0047] The above step S2011 includes:

[0048] Step S20111, the private cloud server receives the second transmission key and the first firmware upgrade verification ID uploaded by the target client, where the first firmware upgrade verification ID is the ID of the firmware upgrade package sent by the supplier server to the target client;

[0049] The above step S202 includes:

[0050] Step S2021, the external network of the private cloud server receives the encrypted firmware upgrade package and the second firmware upgrade verification ID sent by the supplier server, where the second firmware upgrade verification ID is the ID of the firmware upgrade package in the encrypted firmware upgrade package;

[0051] Step S2022, when the second firmware upgrade verification ID is the same as the first firmware upgrade verification ID, determining that the ID verification is successful;

[0052] Step S2023, when the ID verification is successful, the external network of the private cloud server decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package.

[0053] In the above implementation, while the above-mentioned supplier server sends the second transmission key, it can also send the first firmware upgrade verification ID corresponding to the firmware upgrade request to the private cloud server. Before the external network of the above-mentioned private cloud server decrypts the above-mentioned encrypted firmware upgrade package to obtain the above-mentioned firmware upgrade package, the second firmware upgrade verification ID issued together with the above-mentioned encrypted firmware upgrade package is compared with the first firmware upgrade verification ID. If the two are the same, the ID verification is successful, indicating that the sent firmware upgrade package is the firmware upgrade package corresponding to the firmware upgrade request, thereby avoiding the firmware upgrade package from being sent incorrectly, which leads to an error in the upgrade object.

[0054] In order to prevent the second transmission key from being leaked, in an optional implementation manner, the above step S2011 includes:

[0055] Step S20111, the private cloud server receives the obfuscated transmission key uploaded by the target client, where the obfuscated transmission key is obtained by the supplier server encrypting the second transmission key using an obfuscated encryption algorithm and then sending the encrypted key to the target client;

[0056] Step S20112: The private cloud server decrypts the obfuscated transmission key using the decryption algorithm corresponding to the obfuscated encryption algorithm to obtain the second transmission key.

[0057] In the above implementation, an obfuscation encryption algorithm is set in the above-mentioned supplier server, and a decryption algorithm corresponding to the obfuscation encryption algorithm is set in the above-mentioned private cloud server. The second transmission key can be encrypted by the obfuscation encryption algorithm to obtain an obfuscated transmission key. The above-mentioned private cloud server can use the decryption algorithm corresponding to the above-mentioned obfuscation encryption algorithm to decrypt the above-mentioned obfuscated transmission key, so as to avoid leakage of the second transmission key and prevent data intrusion.

[0058] In order to facilitate user operation, in an optional implementation, the above step S2013 includes:

[0059] Step S20131, the private cloud server converts the encrypted information into a QR code, so that the target client recognizes the QR code and sends the recognition result to the supplier server;

[0060] Step S20132, or the above-mentioned private cloud server converts the above-mentioned encrypted information into a string, so that the above-mentioned target client forwards the above-mentioned string to the above-mentioned supplier server.

[0061] In the above implementation, since the user needs to import the encrypted information of the intranet into the external network and upload it to the supplier server through the target client, the encrypted information is converted into a QR code or a string to facilitate user scanning or copying to realize the export of the internal and external networks.

[0062] In order to enable those skilled in the art to more clearly understand the technical solution of the present application, the implementation process of the upgrade method of the private cloud server of the present application will be described in detail below in combination with specific embodiments.

[0063] This embodiment relates to a specific method for upgrading a private cloud server. Figure 3 As shown, the user's private server is connected to multiple devices through the LAN (intranet) port, for example, device 1, device 2, device 3, etc. The external network isolation layer of the user's private server realizes encrypted communication with the supplier's server through the external network port. The user's private server can selectively expose the port to communicate with the external network isolation layer, such as Figure 4 As shown, the following steps are included:

[0064] 1. When a user adds a new device or needs a firmware upgrade, he can now request new firmware directly from the service provider in the app. This behavior can only be initiated by the owner of the private server.

[0065] 2. When the service provider receives a firmware upgrade request, it will send an AES-encrypted firmware upgrade verification ID to the mobile phone or app bound to the primary home user, with a validity period of 30 minutes or other, as well as an obfuscated transmission key generated by the server.

[0066] 3. When the user receives this verification information, he switches to his own LAN, opens the login management page of the user's private server, selects the firmware upgrade function on the page after logging in, and sends the instructions sent by the server to the private server via NFC, Bluetooth, LAN connection, etc.

[0067] 4. The private server uses the internal decryption key to decrypt the firmware upgrade verification ID and transmission key generated by the server, and uses the obfuscated transmission key generated by the server to decrypt the key. The private server also uses the key to encrypt the verification ID, the upgrade package verification key, the transmission key corresponding to the external network port (generated immediately), and the external network communication port that is about to be exposed.

[0068] 5. After the private cloud generates the above encrypted information, it will generate a QR code or string to display to the user. Use the app to scan the code or copy it to upload the encrypted information generated by the private cloud server to the server.

[0069] 6. When the server receives the encrypted information, it will use the encryption key it generated for the first time to decrypt it. After the decryption is successful, it will obtain the communication port of the private cloud exposed to the external network, use the private cloud's upgrade package verification key to encrypt the upgrade package, use the encryption key generated by the private cloud to re-encrypt the communication information, and transmit the firmware package to the private cloud.

[0070] 7. The private cloud will store communication data in an isolated external network isolation layer. If it fails to pass the verification, it will not be copied to the private server.

[0071] 8. After the isolation layer receives the encrypted firmware package, it parses and verifies the firmware package and verifies the firmware package verification ID.

[0072] 9. After verification, the firmware upgrade package is transferred to the private server body for firmware upgrade.

[0073] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0074] The embodiment of the present application also provides an upgrade device for a private cloud server. It should be noted that the upgrade device for the private cloud server in the embodiment of the present application can be used to execute the upgrade method for the private cloud server provided in the embodiment of the present application. The device is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0075] The following introduces the upgrade device of the private cloud server provided in the embodiment of the present application.

[0076] Figure 5 1 is a structural block diagram of an upgrade device for a private cloud server according to an embodiment of the present application. Figure 5 As shown, the device comprises:

[0077] The sending unit 10 is used for the private cloud server to send the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0078] The receiving unit 20 is used to receive the encrypted firmware upgrade package sent by the above-mentioned supplier server in the external network of the above-mentioned private cloud server and decrypt the above-mentioned encrypted firmware upgrade package to obtain the above-mentioned firmware upgrade package. The above-mentioned private cloud server receives the above-mentioned firmware upgrade package transmitted from the external network of the above-mentioned private cloud server for firmware upgrade. The above-mentioned encrypted firmware upgrade package is obtained by encrypting the above-mentioned firmware upgrade package by the above-mentioned supplier server using the above-mentioned upgrade package verification key and the above-mentioned first transmission key.

[0079] In the upgrade device of the above-mentioned private cloud server, the private cloud server forwards the upgrade package verification key and the first transmission key to the supplier server through the bound client, so that the supplier server uses the upgrade package verification key and the first transmission key to encrypt the above-mentioned firmware upgrade package to obtain the encrypted firmware upgrade package, and then the encrypted firmware upgrade package sent by the supplier server can be received through the external network of the private cloud server, and the upgrade package verification key and the first transmission key are used to decrypt the package. If the decryption is successful, the decrypted firmware upgrade package will be transmitted to the private cloud server for firmware upgrade, otherwise it will be retained in the external network of the private cloud server to prevent the private cloud server from being invaded, thereby ensuring the data security of the private cloud server and solving the problem that the private cloud server is easily invaded during firmware upgrade in the prior art.

[0080] In order to prevent malicious programs from being injected in disguise, in an optional implementation manner, the above-mentioned device further includes:

[0081] A blocking unit is used for not receiving data from the external network of the private cloud server after the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server. In the event that the external network of the private cloud server fails to receive the encrypted firmware upgrade package sent by the supplier server and decrypt the encrypted firmware upgrade package, the private cloud server does not receive data from the external network of the private cloud server.

[0082] In the above implementation, if the decryption of the encrypted firmware upgrade package fails, it indicates that the encrypted firmware upgrade package is not encrypted by the upgrade package verification key and the first transmission key generated by the private cloud server. In this case, the encrypted firmware upgrade package is considered to be intrusion data. The private cloud server does not receive the encrypted firmware upgrade package to prevent malicious programs from disguising and injecting it. The private cloud server does not expose the port to the external network isolation layer of the private cloud server, so that the external network isolation layer of the private cloud server blocks the intrusion data outside the private cloud server.

[0083] In order to achieve secure interaction, in an optional implementation manner, the sending unit includes:

[0084] A first receiving module is used for the private cloud server to receive a second transmission key uploaded by the target client, where the second transmission key is a transmission key generated by the supplier server in response to a firmware upgrade request and sent to the target client, where the firmware upgrade request is a request issued by the target client when a new device is added or a firmware upgrade is required;

[0085] A first encryption module, used for the private cloud server to encrypt the upgrade package verification key and the first transmission key using the second transmission key to obtain encrypted information;

[0086] The sending module is used for the private cloud server to send the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server.

[0087] In the above implementation, when a user adds a new device or needs a firmware upgrade, the user can directly request a new firmware from the service provider in the target client (app). This behavior can only be initiated by the owner of the private server. The supplier server generates and sends a second transmission key to the target client in response to the firmware upgrade request. When the user receives the second transmission key, he switches to his own local area network, opens the login management page of the user's private server, selects the firmware upgrade function on the page after logging in, and sends the instructions sent by the server to the private server through NFC, Bluetooth, local area network connection, etc. The private cloud server can use the second transmission key to encrypt the upgrade package verification key and the first transmission key to obtain encrypted information, and forward the encrypted information to the supplier server through the target client. Before the supplier server sends the firmware upgrade package to the private server, the supplier server and the private server interact through the target client to avoid key leakage and prevent data intrusion.

[0088] In order to obtain a qualified encrypted firmware upgrade package, in an optional implementation, the receiving unit includes:

[0089] A first decryption module, used for the supplier server to decrypt the encrypted information using the second transmission key to obtain the upgrade package verification key and the first transmission key;

[0090] The second encryption module is used for the above-mentioned supplier server to encrypt the above-mentioned firmware upgrade package with the above-mentioned upgrade package verification key to obtain a once-encrypted firmware upgrade package, and to use the above-mentioned second transmission key to perform a second encryption on the above-mentioned once-encrypted firmware upgrade package to obtain the above-mentioned encrypted firmware upgrade package.

[0091] In the above implementation, in order to prevent the upgrade package verification key and the first transmission key from being leaked, the private cloud server uses the second transmission key to encrypt the upgrade package verification key and the first transmission key, and only the second transmission key of the supplier server can successfully decrypt and obtain the upgrade package verification key and the first transmission key. The firmware upgrade package can be encrypted by the upgrade package verification key and the first transmission key to obtain the encrypted firmware upgrade package. Only data encrypted by the upgrade package verification key and the first transmission key can be transmitted to the private cloud server.

[0092] In order to ensure that the correct firmware upgrade package is sent, in an optional implementation,

[0093] The first receiving module comprises:

[0094] A first receiving submodule, used for the private cloud server to receive the second transmission key and the first firmware upgrade verification ID uploaded by the target client, where the first firmware upgrade verification ID is the ID of the firmware upgrade package sent by the supplier server to the target client;

[0095] The receiving unit comprises:

[0096] A second receiving module is used for receiving the encrypted firmware upgrade package and the second firmware upgrade verification ID sent by the supplier server through the external network of the private cloud server, where the second firmware upgrade verification ID is the ID of the firmware upgrade package in the encrypted firmware upgrade package;

[0097] A determination module, configured to determine that the ID verification is successful when the second firmware upgrade verification ID is the same as the first firmware upgrade verification ID;

[0098] The second decryption module is used to decrypt the encrypted firmware upgrade package through the external network of the private cloud server to obtain the firmware upgrade package when the ID verification is successful.

[0099] In the above implementation, while the above-mentioned supplier server sends the second transmission key, it can also send the first firmware upgrade verification ID corresponding to the firmware upgrade request to the private cloud server. Before the external network of the above-mentioned private cloud server decrypts the above-mentioned encrypted firmware upgrade package to obtain the above-mentioned firmware upgrade package, the second firmware upgrade verification ID issued together with the above-mentioned encrypted firmware upgrade package is compared with the first firmware upgrade verification ID. If the two are the same, the ID verification is successful, indicating that the sent firmware upgrade package is the firmware upgrade package corresponding to the firmware upgrade request, thereby avoiding the firmware upgrade package from being sent incorrectly, which leads to an error in the upgrade object.

[0100] In order to prevent the second transmission key from being leaked, in an optional implementation manner, the first receiving module includes:

[0101] A second receiving submodule is used for the private cloud server to receive the obfuscated transmission key uploaded by the target client, where the obfuscated transmission key is obtained by the supplier server encrypting the second transmission key using an obfuscated encryption algorithm and then sending the encrypted key to the target client;

[0102] The decryption submodule is used for the private cloud server to decrypt the obfuscated transmission key using the decryption algorithm corresponding to the obfuscated encryption algorithm to obtain the second transmission key.

[0103] In the above implementation, an obfuscation encryption algorithm is set in the above-mentioned supplier server, and a decryption algorithm corresponding to the obfuscation encryption algorithm is set in the above-mentioned private cloud server. The second transmission key can be encrypted by the obfuscation encryption algorithm to obtain an obfuscated transmission key. The above-mentioned private cloud server can use the decryption algorithm corresponding to the above-mentioned obfuscation encryption algorithm to decrypt the above-mentioned obfuscated transmission key, so as to avoid leakage of the second transmission key and prevent data intrusion.

[0104] In order to facilitate user operation, in an optional implementation, the sending module includes:

[0105] A first conversion submodule, configured for the private cloud server to convert the encrypted information into a QR code, so that the target client can recognize the QR code and send the recognition result to the supplier server;

[0106] The second conversion submodule is used for or the above-mentioned private cloud server to convert the above-mentioned encrypted information into a character string, so that the above-mentioned target client forwards the above-mentioned character string to the above-mentioned supplier server.

[0107] In the above implementation, since the user needs to import the encrypted information of the intranet into the external network and upload it to the supplier server through the target client, the encrypted information is converted into a QR code or a string to facilitate user scanning or copying to realize the export of the internal and external networks.

[0108] The upgrade device of the private cloud server includes a processor and a memory. The sending unit and the receiving unit are stored in the memory as program units, and the processor executes the program units stored in the memory to implement the corresponding functions. The modules are all located in the same processor; or, the modules are located in different processors in any combination.

[0109] The processor includes a kernel, which retrieves the corresponding program unit from the memory. One or more kernels can be set to solve the problem of easy intrusion during firmware upgrade of private cloud servers in the prior art by adjusting kernel parameters.

[0110] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0111] An embodiment of the present invention provides a computer-readable storage medium, which includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute the upgrade method of the private cloud server.

[0112] Specifically, the upgrade method of the private cloud server includes:

[0113] Step S201, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0114] In step S202, when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade. The encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server using the upgrade package verification key and the first transmission key.

[0115] An embodiment of the present invention provides a processor, which is used to run a program, wherein the upgrade method of the private cloud server is executed when the program is running.

[0116] Specifically, the upgrade method of the private cloud server includes:

[0117] Step S201, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0118] In step S202, when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade. The encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server using the upgrade package verification key and the first transmission key.

[0119] An embodiment of the present invention provides a device, the device including a processor, a memory, and a program stored in the memory and executable on the processor, and when the processor executes the program, at least the following steps are implemented:

[0120] Step S201, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0121] In step S202, when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade. The encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server using the upgrade package verification key and the first transmission key.

[0122] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program for initializing at least the following method steps:

[0123] Step S201, the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the above-mentioned target client sends the upgrade package verification key and the first transmission key to the supplier server, the above-mentioned upgrade package verification key is the encryption key of the firmware upgrade package generated by the above-mentioned private cloud server, the above-mentioned first transmission key is the transmission key of the external network port of the above-mentioned private cloud server, and the above-mentioned target client is a client registered with the above-mentioned supplier server and bound to the above-mentioned private cloud server;

[0124] In step S202, when the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade. The encrypted firmware upgrade package is obtained by encrypting the firmware upgrade package by the supplier server using the upgrade package verification key and the first transmission key.

[0125] Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order than here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0126] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0127] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0128] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0129] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0130] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0131] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0132] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0133] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0134] From the above description, it can be seen that the above embodiments of the present application achieve the following technical effects:

[0135] 1) In the upgrade method of the private cloud server of the present application, the private cloud server forwards the upgrade package verification key and the first transmission key to the supplier server through the bound client, so that the supplier server uses the upgrade package verification key and the first transmission key to encrypt the above-mentioned firmware upgrade package to obtain the encrypted firmware upgrade package, and then the encrypted firmware upgrade package sent by the supplier server can be received through the external network of the private cloud server, and the upgrade package verification key and the first transmission key are used to decrypt the package. If the decryption is successful, the decrypted firmware upgrade package will be transmitted to the private cloud server for firmware upgrade, otherwise it will be retained in the external network of the private cloud server to prevent the private cloud server from being invaded, thereby ensuring the data security of the private cloud server and solving the problem that the private cloud server is easily invaded during the firmware upgrade in the prior art.

[0136] 2) In the upgrade device of the private cloud server of the present application, the private cloud server forwards the upgrade package verification key and the first transmission key to the supplier server through the bound client, so that the supplier server uses the upgrade package verification key and the first transmission key to encrypt the above-mentioned firmware upgrade package to obtain the encrypted firmware upgrade package, and then the encrypted firmware upgrade package sent by the supplier server can be received through the external network of the private cloud server, and the upgrade package verification key and the first transmission key are used to decrypt the package. If the decryption is successful, the decrypted firmware upgrade package will be transmitted to the private cloud server for firmware upgrade, otherwise it will be retained in the external network of the private cloud server to prevent the private cloud server from being invaded, thereby ensuring the data security of the private cloud server and solving the problem of the private cloud server being easily invaded during the firmware upgrade in the prior art.

[0137] The above description is only the preferred embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A method for upgrading a private cloud server, characterized in that: include: The private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, the upgrade package verification key is the encryption key of the firmware upgrade package generated by the private cloud server, the first transmission key is the transmission key of the external network port of the private cloud server, and the target client is a client registered with the supplier server and bound to the private cloud server; In a case where the private cloud server's external network receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, the private cloud server receives the firmware upgrade package transmitted from the private cloud server's external network to perform a firmware upgrade, and the encrypted firmware upgrade package is obtained by the supplier server encrypting the firmware upgrade package using the upgrade package verification key and the first transmission key.

2. The method according to claim 1, characterized in that After the private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, the method further includes: In the case that the external network of the private cloud server receives the encrypted firmware upgrade package sent by the supplier server and fails to decrypt the encrypted firmware upgrade package, the private cloud server does not receive data from the external network of the private cloud server.

3. The method according to claim 1, characterized in that The private cloud server sends the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, including: The private cloud server receives a second transmission key uploaded by the target client, where the second transmission key is a transmission key generated by the supplier server in response to a firmware upgrade request and sent to the target client, where the firmware upgrade request is a request issued by the target client when a new device is added or a firmware upgrade is required; The private cloud server uses the second transmission key to encrypt the upgrade package verification key and the first transmission key to obtain encrypted information; The private cloud server sends the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server.

4. The method according to claim 3, characterized in that The generation process of the encrypted firmware upgrade package includes: The supplier server decrypts the encrypted information using the second transmission key to obtain the upgrade package verification key and the first transmission key; The supplier server uses the upgrade package verification key to encrypt the firmware upgrade package to obtain a primary encrypted firmware upgrade package, and uses the second transmission key to perform a secondary encryption on the primary encrypted firmware upgrade package to obtain the encrypted firmware upgrade package.

5. The method according to claim 3, characterized in that: The private cloud server receives the second transmission key uploaded by the target client, including: The private cloud server receives the second transmission key and the first firmware upgrade verification ID uploaded by the target client, where the first firmware upgrade verification ID is the ID of the firmware upgrade package sent by the supplier server to the target client; The external network of the private cloud server receives the encrypted firmware upgrade package sent by the supplier server and decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package, including: The external network of the private cloud server receives the encrypted firmware upgrade package and the second firmware upgrade verification ID sent by the supplier server, where the second firmware upgrade verification ID is the ID of the firmware upgrade package in the encrypted firmware upgrade package; If the second firmware upgrade verification ID is the same as the first firmware upgrade verification ID, determining that the ID verification is successful; When the ID verification is successful, the external network of the private cloud server decrypts the encrypted firmware upgrade package to obtain the firmware upgrade package.

6. The method according to claim 3, characterized in that The private cloud server receives the second transmission key uploaded by the target client, including: The private cloud server receives the obfuscated transmission key uploaded by the target client, where the obfuscated transmission key is obtained by the supplier server encrypting the second transmission key using an obfuscated encryption algorithm and then sending the encrypted key to the target client; The private cloud server uses a decryption algorithm corresponding to the obfuscated encryption algorithm to decrypt the obfuscated transmission key to obtain the second transmission key.

7. The method according to claim 3, characterized in that The private cloud server sends the encrypted information to the target client, so that the target client forwards the encrypted information to the supplier server, including: The private cloud server converts the encrypted information into a QR code, so that the target client recognizes the QR code and sends the recognition result to the supplier server; Alternatively, the private cloud server converts the encrypted information into a character string, so that the target client forwards the character string to the supplier server.

8. An upgrade device for a private cloud server, characterized in that: include: A sending unit, used for the private cloud server to send the upgrade package verification key and the first transmission key to the target client, so that the target client sends the upgrade package verification key and the first transmission key to the supplier server, the upgrade package verification key is the encryption key of the firmware upgrade package generated by the private cloud server, the first transmission key is the transmission key of the external network port of the private cloud server, and the target client is a client registered with the supplier server and bound to the private cloud server; A receiving unit is used to receive the encrypted firmware upgrade package sent by the supplier server on the external network of the private cloud server and decrypt the encrypted firmware upgrade package to obtain the firmware upgrade package. The private cloud server receives the firmware upgrade package transmitted from the external network of the private cloud server for firmware upgrade. The encrypted firmware upgrade package is obtained by the supplier server encrypting the firmware upgrade package using the upgrade package verification key and the first transmission key.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the method according to any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images