Trusted security component upgrading method, system and equipment and storage medium

Abstract

The invention belongs to the field of credible security, and provides a credible security component upgrading method, system and device and a storage medium, the upgrading method comprises the following steps: S1, DCS management software of a DCS upper computer reads a software upgrading package and verifies the software upgrading package, after verification succeeds, S2 is executed, otherwise S1 is executed again; s2, establishing a communication link between the DCS management software and the trusted DCS controller; s3, the DCS management software sends the software upgrade package to the trusted DCS controller through the communication link; s4, the trusted DCS controller receives the software upgrade package and carries out trusted verification on the software upgrade package, after the trusted verification is passed, the step S5 is executed, and otherwise, the step S1 is returned; and S5, the trusted DCS controller analyzes the software upgrade package and releases a file obtained through analysis to the target path. According to the invention, an operator does not need to directly connect the trusted DCS controller in the whole process, and centralized management and control and centralized upgrading can be realized.

Description

Technical Field

[0001] The present invention belongs to the field of trusted security, and relates to a trusted security component upgrade method, system, device and storage medium, and in particular to a trusted security component upgrade method, system, device and storage medium based on a trusted DCS controller. Background Art

[0002] Trusted Computing (TC) is a computer security architecture designed to improve the security and confidentiality of computer systems in the face of various attacks and threats. This trusted computing technology is promoted and developed by the Trusted Computing Group (TCG) and is widely used in computing and communication systems to improve the overall security of the system.

[0003] The software part of the DCS controller based on the real-time operating system with trusted functions (hereinafter referred to as the trusted DCS controller) is based on a real-time operating system that partially complies with the POSIX (Portable Operating System Interface of Unix) standard, and the hardware part uses a hardware computing architecture that combines the central processing unit (CPU) and the field-programmable gate array (FPGA). The system characteristics of the trusted DCS controller result in the software part containing a large number of different types of files such as executable files, dynamic library files, hardware driver files, and databases. The upgrade of the software part may occur at any time, and the general characteristics of the hardware result in the hardware part also facing the upgrade. Therefore, as an important part of the trusted DCS controller, the trusted function will also face the need to upgrade the trusted security components.

[0004] However, there are some potential defects and challenges in the upgrade process of trusted security components: when upgrading trusted security components, operators are required to actively connect to the trusted DCS controller whose trusted security components need to be upgraded, and then send the upgrade package of the trusted security component to the trusted DCS controller. In addition, each trusted DCS controller needs to be connected separately. The operation process is complicated, and it is impossible to centrally control and upgrade multiple trusted DCS controllers. This is inefficient and not conducive to the unified management of trusted DCS controllers.

[0005] Therefore, safely and conveniently upgrading trusted security components is an urgent problem that needs to be solved in actual production. Summary of the invention

[0006] In order to solve the above-mentioned problems of the prior art, the present invention provides a trusted security component upgrade method, system, device and storage medium, which does not require operators to directly connect to the trusted DCS controller throughout the process, and can achieve centralized control and centralized upgrade.

[0007] The present invention is achieved through the following technical solutions: In a first aspect, the present invention provides a trusted security component upgrade method, comprising: S1, the DCS management software of the DCS host computer reads the software upgrade package and verifies the software upgrade package. If the verification is successful, S2 is executed, otherwise, S1 is re-executed; wherein the software upgrade package is an upgrade package of a trusted security component of a trusted DCS controller; S2, the DCS management software establishes a communication link with the trusted DCS controller; S3, the DCS management software sends the software upgrade package to the trusted DCS controller through the communication link; S4, the trusted DCS controller receives the software upgrade package and performs trust verification on the software upgrade package. If the trust verification passes, S5 is executed, otherwise, the process returns to S1; S5, the trusted DCS controller parses the software upgrade package and releases the parsed file to a target path.

[0008] Preferably, in S1, the trusted security component includes trusted hardware driver software, trusted hardware management software and trusted agent software.

[0009] Preferably, in S1, the software upgrade package includes signature information; and verifying the software upgrade package includes: performing signature verification on the software upgrade package.

[0010] Preferably, S2 specifically includes: the DCS management software sends a communication request to the trusted DCS controller; after receiving the communication request from the DCS management software, the trusted DCS controller establishes a communication link with the DCS management software.

[0011] Preferably, in S2, the communication link is an encrypted and signed communication link.

[0012] Furthermore, in S4, the software upgrade package is authenticated by: decrypting and signing the software upgrade package using a key in a trusted chip of the trusted DCS controller.

[0013] Preferably, in S1, the software upgrade package includes path information; in S5, the target path is the path corresponding to the path information.

[0014] In a second aspect, the present invention provides a trusted security component upgrade system, comprising: The DCS management software is located on the DCS host computer and is used to read the software upgrade package and verify the software upgrade package. After successful verification, a communication link is established with the trusted DCS controller, and the software upgrade package is sent to the trusted DCS controller through the communication link; wherein the software upgrade package is an upgrade package of a trusted security component of the trusted DCS controller; The trusted DCS controller is used to receive the software upgrade package and perform trustworthy verification on the software upgrade package; after the trustworthy verification passes, the software upgrade package is parsed and the parsed file is released to the target path.

[0015] In a third aspect, the present invention provides a computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the trusted security component upgrade method as described above when executing the computer program.

[0016] In a fourth aspect, the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the trusted security component upgrade method as described above is implemented.

[0017] Compared with the prior art, the present invention has the following beneficial effects: The trusted security component upgrade method of the present invention, after successfully verifying the software upgrade package, the DCS management software directly establishes a communication link with the trusted DCS controller, and the operator does not need to directly connect to the trusted DCS controller throughout the process. The trusted security components of the trusted DCS controller can be upgraded on a large scale based on the DCS management software, and the centralized control and centralized upgrade of the trusted DCS controller can be realized. The upgrade of the trusted security component is quickly deployed using the communication link, and it takes effect quickly, which greatly improves the manageability of the trusted DCS controller, and at the same time can greatly reduce the upgrade resource overhead of the trusted DCS controller, helping the system administrator to better deploy and use the trusted function, and better enjoy the benefits brought by the trusted security component update.

[0018] Furthermore, through the encrypted and signed communication link, the confidentiality and integrity of the software upgrade package can be protected at the same time, improving the security of the communication link. Even if the software upgrade package is intercepted during transmission, unauthorized third parties cannot decrypt or tamper with the data, ensuring the security of the trusted security component upgrade and preventing unauthorized software from changing the software upgrade package, thereby effectively improving the security, operability and ease of use of the entire control system based on the trusted DCS controller. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0020] Figure 1 The figure is a flow chart of the trusted security component upgrade method of the present invention. DETAILED DESCRIPTION

[0021] The following describes the embodiments of the present invention through specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention.

[0022] It should be noted that the process equipment or devices not specifically specified in the following embodiments are all conventional equipment or devices in the art.

[0023] It should be noted that the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. Moreover, unless otherwise specified, the numbering of each method step is only a convenient tool for identifying each method step, and is not intended to limit the order of arrangement of each method step or to define the scope of the present invention. Changes or adjustments in their relative relationships should also be regarded as the scope of the present invention without substantially changing the technical content.

[0024] The present invention proposes a method for quickly upgrading a trusted security component. Based on the DCS management software of a DCS host computer, a trusted DCS controller is connected by using an encrypted and signed communication link negotiated with the DCS host computer. The DCS management software of the DCS host computer encrypts a software upgrade package of a packaged trusted security component and sends it to the trusted DCS controller. After receiving the software upgrade package, the trusted DCS controller performs trusted verification. After the trusted verification passes, the trusted security component is released to a target path. After that, the trusted DCS controller will automatically restart, directly apply the new trusted security component, and complete the upgrade.

[0025] Specifically, see Figure 1 The trusted security component upgrade method of the present invention comprises the following steps: S1, the DCS management software of the DCS host computer reads the software upgrade package and verifies the software upgrade package. If the verification is successful, S2 is executed, otherwise, S1 is re-executed; wherein the software upgrade package is an upgrade package of a trusted security component of a trusted DCS controller; S2, the DCS management software establishes a communication link with the trusted DCS controller; S3, the DCS management software sends the software upgrade package to the trusted DCS controller through the communication link; S4, the trusted DCS controller receives the software upgrade package and performs trust verification on the software upgrade package. If the trust verification passes, S5 is executed, otherwise, the process returns to S1; S5, the trusted DCS controller parses the software upgrade package and releases the parsed file to a target path.

[0026] In the trusted security component upgrade method of the present invention, after the software upgrade package is successfully verified, the DCS management software directly establishes a communication link with the trusted DCS controller, and the operator does not need to directly connect to the trusted DCS controller throughout the process. Therefore, the trusted security components of the trusted DCS controller can be upgraded on a large scale based on the DCS management software, and the centralized control and centralized upgrade of the trusted DCS controller can be realized. The trusted security components are quickly upgraded using the communication link, which greatly improves the manageability of the trusted DCS controller and greatly reduces the upgrade resource overhead of the trusted DCS controller.

[0027] In some embodiments of the present invention, the software upgrade package is stored locally on the DCS host computer, so the DCS management software can directly read the software upgrade package locally from the DCS host computer.

[0028] In the present invention, the trusted security components include trusted hardware driver software, trusted hardware management software and trusted agent software.

[0029] In the present invention, the software upgrade package includes signature information, and the DCS management software verifies the software upgrade package, specifically: the DCS management software verifies the signature of the software upgrade package.

[0030] Signature verification of the software upgrade package can ensure that the software upgrade package has not been tampered with, ensure the integrity and authenticity of the software upgrade package, and thus ensure the security and reliability of the upgraded trusted security components.

[0031] The DCS management software will establish a communication link with the trusted DCS controller only after successfully verifying the software upgrade package. If the verification is unsuccessful, the subsequent trusted security component upgrade process will not be performed.

[0032] The process of establishing a communication link between the DCS management software and the trusted DCS controller is as follows: The DCS management software sends a communication request to the trusted DCS controller; after receiving the communication request from the DCS management software, the trusted DCS controller establishes a communication link with the DCS management software.

[0033] Wherein, the communication link is an encrypted and signed communication link. In the communication link, encryption and signing are important means to ensure the security and integrity of data transmission. Encryption technology converts the transmitted data into an unreadable ciphertext form, and only the recipient with the corresponding decryption key can restore the data, thereby protecting the confidentiality of the data. In the communication link, the data is encrypted before sending, and the recipient decrypts the data after receiving it, ensuring that the data is not stolen or viewed by unauthorized third parties during the transmission process. The method of encrypting and decrypting the data at each node on the communication link can be adopted to ensure that each transmission segment of the data on the communication link is safe. This method requires that each node has encryption and decryption capabilities, and key management is relatively complex. End-to-end encryption can also be used, where the data is encrypted at the sending end and decrypted at the receiving end. The data always exists in ciphertext during the intermediate transmission process. This method simplifies key management and reduces the demand for encryption equipment.

[0034] Signature technology verifies the integrity of data by generating a digital signature of the data. The sender signs the data with a private key, and the receiver verifies the signature with a public key to ensure that the data has not been tampered with during transmission. In the communication link, the data is signed before it is sent, and the receiver verifies the signature after receiving the data to confirm the integrity and authenticity of the data. Digital signatures can also be used to verify the identity of the sender. Since only the sender has the private key, only the sender can generate a valid signature. By verifying the signature, the receiver can confirm that the data is indeed from the claimed sender.

[0035] The combined use of encryption and signature of the present invention can simultaneously protect the confidentiality and integrity of the software upgrade package and improve the security of the communication link. Even if the software upgrade package is intercepted during transmission, unauthorized third parties cannot decrypt or tamper with the data.

[0036] When the trusted DCS controller receives the software upgrade package, it decrypts and verifies the signature of the software upgrade package using the key in the trusted chip of the trusted DCS controller.

[0037] The software upgrade package of the present invention includes path information, and the target path is the path corresponding to the path information. After the trusted verification is passed, the trusted DCS controller parses the software upgrade package and releases the parsed file to the target path according to the path information. In some embodiments, the target path is the / home target.

[0038] After the trusted security component is updated, the trusted DCS controller will automatically restart and directly apply the new trusted security component to complete the upgrade process.

[0039] New security vulnerabilities or risks may be introduced during the upgrade process, especially when the upgrade involves changes to the system architecture or core components. In order to reduce security risks, it is necessary to conduct a comprehensive security assessment of the trusted DCS controller before the upgrade, and strengthen security monitoring and protection after the upgrade.

[0040] In addition, it may be necessary to suspend some or all of the business during the upgrade process to ensure the smooth progress of the upgrade. In order to reduce the impact of business interruption, it is necessary to formulate a reasonable upgrade plan and notify relevant users and business departments before the upgrade.

[0041] Example This embodiment provides a specific implementation of a trusted security component upgrade method, including the following steps: 1) The DCS management software of the DCS host computer reads the software upgrade package from the DCS host computer locally and performs signature verification on the software upgrade package. After the signature verification is successful, step 2 is executed), otherwise step 1 is re-executed); wherein, the software upgrade package is an upgrade package of a trusted security component of a trusted DCS controller, and the software upgrade package contains signature information and path information; 2) The DCS management software sends a communication request to the trusted DCS controller; after receiving the communication request sent by the DCS management software, the trusted DCS controller establishes an encrypted and signed communication link with the DCS management software; 3) The DCS management software sends the software upgrade package to the trusted DCS controller through the communication link; 4) The trusted DCS controller receives the software upgrade package and performs trust verification on the software upgrade package through the key in the certificate integrated in the trusted chip. After the trust verification passes, execute step 5). Otherwise, return to execute step 1); the trusted chip is located in the trusted DCS controller; 5) The trusted DCS controller parses the software upgrade package and releases the parsed file to the target path according to the path information in the software upgrade package; 6) After the release is completed, the trusted DCS controller restarts to apply the new trusted safety component. If the new trusted safety component can run successfully, the upgrade is successful and the upgrade of the trusted safety component is completed.

[0042] The trusted security component upgrade method of the present invention does not require operators to directly connect to the trusted DCS controller throughout the entire process, can achieve centralized control and centralized upgrade, and can be quickly deployed and quickly effective using communication links, thereby greatly improving the manageability of the trusted DCS controller and significantly reducing the upgrade resource overhead of the trusted DCS controller, helping system administrators to better deploy and utilize trusted functions and better enjoy the benefits brought by the trusted security component update.

[0043] The present invention also provides a trusted security component upgrade system, comprising: The DCS management software is located on the DCS host computer and is used to read the software upgrade package and verify the software upgrade package. After successful verification, a communication link is established with the trusted DCS controller, and the software upgrade package is sent to the trusted DCS controller through the communication link; wherein the software upgrade package is an upgrade package of the trusted security component of the trusted DCS controller; The trusted DCS controller is used to receive the software upgrade package and perform trustworthy verification on the software upgrade package; after the trustworthy verification passes, the software upgrade package is parsed and the parsed file is released to the target path.

[0044] In another embodiment of the present invention, a computer device is provided, the computer device includes a processor and a memory, the memory is used to store a computer program, the computer program includes program instructions, and the processor is used to execute the program instructions stored in the computer storage medium. The processor may be a central processing unit, or other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application-specific integrated circuits (Application Specific Integrated Circuit, ASIC), field programmable gate arrays or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. It is the computing core and control core of the terminal, which is suitable for implementing one or more instructions, and is specifically suitable for loading and executing one or more instructions in the computer storage medium to implement the corresponding method flow or corresponding function; the processor described in the embodiment of the present invention can be used for the operation of the trusted security component upgrade method.

[0045] In another embodiment of the present invention, the present invention also provides a storage medium, specifically a computer-readable storage medium (Memory), which is a memory device in a computer device for storing programs and data. It can be understood that the computer-readable storage medium here can include both built-in storage media in the computer device and, of course, extended storage media supported by the computer device. The computer-readable storage medium provides a storage space, which stores the operating system of the terminal. In addition, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space, and these instructions can be one or more computer programs (including program codes). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory. The processor can load and execute one or more instructions stored in the computer-readable storage medium to implement the corresponding steps of the trusted security component upgrade method in the above embodiment.

[0046] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, optical storage, etc.) containing computer-usable program code.

[0047] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0048] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1A function specified in one or more boxes.

[0049] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0050] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the present invention.

Claims

1. A trusted security component upgrade method, characterized in that: include: S1, the DCS management software of the DCS host computer reads the software upgrade package and verifies the software upgrade package. If the verification is successful, S2 is executed, otherwise, S1 is re-executed; wherein the software upgrade package is an upgrade package of a trusted security component of a trusted DCS controller; S2, the DCS management software establishes a communication link with the trusted DCS controller; S3, the DCS management software sends the software upgrade package to the trusted DCS controller through the communication link; S4, the trusted DCS controller receives the software upgrade package and performs trust verification on the software upgrade package. If the trust verification passes, S5 is executed, otherwise, the process returns to S1; S5, the trusted DCS controller parses the software upgrade package and releases the parsed file to a target path.

2. The trusted security component upgrade method according to claim 1, characterized in that: In S1, the trusted security components include trusted hardware driver software, trusted hardware management software and trusted agent software.

3. The trusted security component upgrade method according to claim 1, characterized in that: In S1, the software upgrade package includes signature information; verifying the software upgrade package includes: performing signature verification on the software upgrade package.

4. The trusted security component upgrade method according to claim 1, characterized in that: S2 specifically includes: the DCS management software sends a communication request to the trusted DCS controller; after receiving the communication request from the DCS management software, the trusted DCS controller establishes a communication link with the DCS management software.

5. The trusted security component upgrade method according to claim 1, characterized in that: In S2, the communication link is an encrypted and signed communication link.

6. The trusted security component upgrade method according to claim 5, characterized in that: In S4, the software upgrade package is authenticated by: decrypting and signing the software upgrade package using a key in a trusted chip of the trusted DCS controller.

7. The trusted security component upgrade method according to claim 1, characterized in that: In S1, the software upgrade package includes path information, and in S5, the target path is the path corresponding to the path information.

8. A trusted security component upgrade system, characterized in that: include: The DCS management software is located on the DCS host computer and is used to read the software upgrade package and verify the software upgrade package. After successful verification, a communication link is established with the trusted DCS controller, and the software upgrade package is sent to the trusted DCS controller through the communication link; wherein the software upgrade package is an upgrade package of a trusted security component of the trusted DCS controller; The trusted DCS controller is used to receive the software upgrade package and perform trustworthy verification on the software upgrade package; after the trustworthy verification passes, the software upgrade package is parsed and the parsed file is released to the target path.

9. A computer device, characterized in that: The method comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the trusted security component upgrade method as claimed in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the trusted security component upgrade method according to any one of claims 1 to 7 is implemented.

Images