Patch installation method and device

Abstract

The invention discloses a patch installation method and device, relates to the technical field of patch installation, and mainly aims to quickly install an adaptive patch pack for an operating system. According to the main technical scheme, a terminal is in communication connection with a control platform, the control platform is used for storing an off-line scanning file corresponding to a service pack issued for an operating system, and the off-line scanning file is used for indicating operating system configuration supported by the service pack; in response to the condition that a target operating system of the terminal needs to be subjected to patch installation, obtaining an offline scanning file stored in the control platform; based on the obtained offline scanning file, determining a target service pack supporting operation system configuration of the target operation system; and obtaining the target service pack, and performing patch installation on the target operating system.

Description

Technical Field

[0001] The present application relates to the technical field of patch installation, and in particular to a patch installation method and device. Background Art

[0002] Operating systems released by operating system manufacturers usually have unconsidered vulnerabilities, and these unconsidered vulnerabilities will be discovered over time. Manufacturers usually release patch packages for the discovered vulnerabilities. Therefore, during the use of the operating system, it is necessary to use the patch package to patch the operating system to repair the vulnerabilities in the operating system and improve the performance of the operating system.

[0003] Currently, when installing patches for an operating system, all patch packages released by the manufacturer for the operating system are usually downloaded and tried to be installed one by one in the operating system. This method of trying to install one by one requires continuous attempts to install a patch package that is suitable for the operating system, as the installation result of each patch package is unknown, making it difficult to quickly install a patch package that is suitable for the operating system.

[0004] Therefore, how to quickly install an adapted patch package for the operating system has become a problem that needs to be solved urgently. Summary of the invention

[0005] The present application proposes a patch installation method and device, the main purpose of which is to quickly install an adapted patch package for an operating system.

[0006] In order to achieve the above objectives, this application mainly provides the following technical solutions:

[0007] In a first aspect, the present application provides a patch installation method, which is applied to a terminal, wherein the terminal is communicatively connected to a control platform, and the control platform is used to store offline scan files corresponding to patch packages released for an operating system, and the offline scan files are used to indicate operating system configurations supported by the patch packages. The patch installation method comprises: in response to the need to install a patch for the target operating system of the terminal, obtaining the offline scan file stored by the control platform; determining a target patch package that supports the operating system configuration of the target operating system based on the obtained offline scan file; obtaining the target patch package, and performing patch installation on the target operating system.

[0008] In some embodiments of the present application, if the operating system has a built-in service with a detection function, then based on the acquired offline scan file, a target patch package that supports the operating system configuration of the target operating system is determined, including: calling the detection function of the built-in service to detect whether there is a target offline scan file in the acquired offline scan file that is the same as the operating system configuration of the target operating system; if so, determining the patch package corresponding to the target offline scan file as the target patch package that supports the operating system configuration of the target operating system.

[0009] In some embodiments of the present application, the offline scanning file indicates the operating system configuration supported by the patch package through system configuration parameters, then, the detection function of the built-in service is called to detect whether there is a target offline scanning file with the same operating system configuration as the target operating system in the obtained offline scanning file, including: calling the detection function of the built-in service to compare the system configuration parameters corresponding to each offline scanning file obtained with the system configuration parameters of the target operating system, respectively, the system configuration parameters including the operating system name and at least one of the following: operating system architecture, operating system version, operating system language; if the comparison shows that the system configuration parameters corresponding to the offline scanning file are the same as the system configuration parameters of the target operating system, then the corresponding offline scanning file is determined as the target offline scanning file.

[0010] In some embodiments of the present application, the patch installation method provided in this embodiment further includes: if it is detected that the target offline scan file does not exist, issuing a prompt that there is no patch package that supports the operating system configuration of the target operating system.

[0011] In some embodiments of the present application, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, stores an offline scan file corresponding to the new patch package. Then, obtaining the offline scan file stored by the control platform includes: obtaining the offline scan file corresponding to the new patch package stored by the control platform after the most recent patch installation of the target operating system.

[0012] In some embodiments of the present application, the offline scanning file indicates the operating system configuration supported by the patch package through system configuration parameters, and the system configuration parameters include the operating system name. Then, obtaining the offline scanning file stored by the control platform includes: determining the target operating system name of the target operating system; obtaining the offline scanning file in which the target operating system name is recorded in the offline scanning file stored by the control platform.

[0013] In some embodiments of the present application, the control platform is also used to store patch packages released for the operating system, then, obtaining the target patch package includes: obtaining the target patch package from the control platform.

[0014] In some embodiments of the present application, the patch package released for the operating system is stored in a publishing platform of the corresponding publisher, and obtaining the target patch package includes: obtaining the target patch package from the publishing platform corresponding to the target patch package.

[0015] In some embodiments of the present application, before obtaining the target patch package and patching the target operating system, the patch installation method provided in this embodiment also includes: recording the current state of the target operating system; then, if an abnormality occurs in the target operating system after obtaining the target patch package and patching the target operating system, the target operating system is rolled back to the current state.

[0016] In some embodiments of the present application, a patch installation tool corresponding to at least one patch package type is preset in the terminal. Then, obtaining the target patch package and performing patch installation on the target operating system includes: determining a repair object of the target patch package in the target operating system; and using a patch installation tool corresponding to the patch package type of the target patch package to install the target patch package into a file directory corresponding to the repair object.

[0017] In some embodiments of the present application, the patch installation method provided in this embodiment further includes: monitoring whether a patch installation instruction for the target operating system is received, and if so, determining that the target operating system of the terminal needs to be patched.

[0018] In some embodiments of the present application, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, it stores an offline scan file corresponding to the new patch package. Then, the patch installation method provided in this embodiment also includes: sending an inquiry message to the control platform at a preset time interval, and the inquiry message is used to inquire whether there is a new patch package; if confirmation information of the existence of a new patch package is received from the control platform in response to the inquiry information, it is determined that the target operating system of the terminal needs to be patched.

[0019] In some embodiments of the present application, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, it stores the offline scan file corresponding to the new patch package, and after storing the offline scan file corresponding to the new patch package, sends a patch installation prompt to the terminal. Then, the patch installation method provided in this embodiment also includes: monitoring whether the patch installation prompt issued by the control platform is received, and if received, determining that the target operating system of the terminal needs to be patched.

[0020] In the second aspect, the present application provides a patch installation method, which is applied to a patch installation system, wherein the patch installation system includes a terminal and a control platform, and the control platform is used to store offline scan files corresponding to patch packages released for operating systems, and the offline scan files are used to indicate operating system configurations supported by the patch packages. The patch installation method includes: the control platform provides the stored offline scan files to the terminal in response to the need to install a patch for the target operating system of the terminal; the terminal determines a target patch package that supports the operating system configuration of the target operating system based on the offline scan file provided by the control platform; the terminal obtains the target patch package and installs a patch on the target operating system.

[0021] In a third aspect, the present application provides a patch installation device, which is applied to a terminal, wherein the terminal is in communication connection with a control platform, wherein the control platform is used to store an offline scan file corresponding to a patch package released for an operating system, wherein the offline scan file is used to indicate an operating system configuration supported by the patch package, and the patch installation device comprises:

[0022] An acquisition module, configured to acquire an offline scan file stored in the control platform in response to the target operating system of the terminal needing to install a patch;

[0023] A determination module, configured to determine a target patch package supporting the operating system configuration of the target operating system based on the acquired offline scan file;

[0024] The installation module is used to obtain the target patch package and install the patch on the target operating system.

[0025] In a fourth aspect, the present application provides a computer-readable storage medium, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the patch installation method described in the first aspect, and / or execute the patch installation method described in the second aspect.

[0026] In a fifth aspect, the present application provides an electronic device, comprising: a memory for storing a program; a processor, coupled to the memory, for running the program to execute the patch installation method described in the first aspect, and / or, to execute the patch installation method described in the second aspect.

[0027] The patch installation method and device provided by the present application use a control platform to store offline scan files corresponding to patch packages released for the operating system, and the offline scan files are used to indicate the operating system configuration supported by the patch packages. In response to the need for patch installation for the target operating system of the terminal, the offline scan files stored in the control platform are obtained, and the target patch package supporting the operating system configuration of the target operating system is determined based on the obtained offline scan files. Then the target patch package is obtained and the patch is installed on the target operating system. It can be seen that the solution provided by the present application first uses the offline scan files corresponding to the patch packages for screening. Since the offline scan files are often small, the patch packages that support the operating system configuration of the terminal's operating system, that is, the patch packages that are adapted to the operating system, can be quickly screened out, and then the determined patch packages are used to perform targeted patch installation on the operating system. In this way, since the patch packages used to implement the patch installation of the operating system are all patch packages that are adapted to the operating system, the adapted patch packages can be quickly installed for the operating system.

[0028] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0030] Figure 1 A flowchart of a patch installation method applied to a terminal provided by an embodiment of the present application is shown;

[0031] Figure 2 A flowchart of a patch installation method applied to a patch installation system provided by an embodiment of the present application is shown;

[0032] Figure 3 A schematic diagram of the structure of a patch installation device applied to a terminal provided by an embodiment of the present application is shown;

[0033] Figure 4 A schematic diagram of the structure of a patch installation device applied to a terminal provided by another embodiment of the present application is shown;

[0034] Figure 5 A schematic structural diagram of a patch installation system provided by an embodiment of the present application is shown. DETAILED DESCRIPTION

[0035] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0036] At present, when installing patches for an operating system, all patch packages for the operating system released by the manufacturer are usually downloaded and tried to be installed one by one in the operating system. This method of trying to install one by one has the following two defects: First, since the installation result of each patch package is unknown, it is necessary to continuously try to install a patch package that is suitable for the operating system, so it is difficult to quickly install an adapted patch package for the operating system. Second, since it is necessary to continuously try to install the patch package, unnecessary resources are wasted.

[0037] After research, it was found that if before installing the patch package for the operating system, the patch package of the operating system configuration that supports the terminal operating system, that is, the patch package adapted to the operating system, is first filtered out, and then the filtered patch package is used to perform targeted patch installation on the operating system, then the adapted patch package can be quickly installed for the operating system.

[0038] Based on the above findings, the embodiment of the present application provides a technical solution for patch installation, specifically, the terminal is connected to the control platform for communication, the control platform is used to store the offline scan file corresponding to the patch package released for the operating system, and the offline scan file is used to indicate the operating system configuration supported by the patch package; in response to the terminal's target operating system needing to be patched, the offline scan file stored in the control platform is obtained; based on the obtained offline scan file, the target patch package supporting the operating system configuration of the target operating system is determined; the target patch package is obtained and the target operating system is patched. It can be seen that the solution provided by the embodiment of the present application first uses the offline scan file corresponding to the patch package for screening. Since the offline scan file is often small, the patch package that supports the operating system configuration of the terminal's operating system can be quickly screened out, and then the screened patch package is used to perform targeted patch installation on the operating system. In this way, since the patch packages used to implement the patch installation of the operating system are all patch packages that are adapted to the operating system, the adapted patch package can be quickly installed for the operating system.

[0039] The technical solution for patch installation provided in this embodiment can be applied to the operating system of any terminal, and this embodiment does not limit the type of terminal and the type of operating system. For example, the terminal may include but is not limited to a computer host. The operating system may include but is not limited to any of the following: Windows 11 system, Windows 10 system, Windows 7 system, Windows 8 system, Windows XP system, Windows Vista system, Windows Server 2003 system, Windows Server 2008 system, Windows Server 2012 system, Windows Server 2016 system.

[0040] Based on the above-mentioned technical solution for patch installation, this embodiment specifically provides a patch installation method and device. The patch installation method and device provided by this embodiment are specifically described below.

[0041] like Figure 1 As shown, an embodiment of the present application provides a patch installation method, which is applied to a terminal and may include the following steps 101 to 103:

[0042] 101. In response to the target operating system of the terminal needing to install a patch, an offline scanning file stored in a control platform is obtained.

[0043] The patch installation method provided in this embodiment is applied to the terminal, and the terminal is connected to the control platform in communication. The control platform is used to store the offline scan file corresponding to the patch package released for the operating system, and the offline scan file is used to indicate the operating system configuration supported by the patch package. In this way, when the operating system of the terminal needs to be patched, the patch package that supports the operating system configuration of the terminal's operating system can be screened out based on the offline scan file stored in the control platform, and then the screened patch package is used to perform targeted patch installation on the operating system of the terminal, thereby quickly realizing the installation of the terminal's operating system to the adapted patch package.

[0044] The patch installation method provided in this embodiment is executed in response to the target operating system of the terminal needing to perform patch installation. Therefore, the patch installation method provided in this embodiment may further include a step of determining whether the target operating system of the terminal needs to perform patch installation. This step has at least the following three implementation methods:

[0045] First, the specific execution process of determining whether the target operating system of the terminal needs to be patched may include the following steps: monitoring whether a patch installation instruction for the target operating system is received, and if so, determining that the target operating system of the terminal needs to be patched.

[0046] In this embodiment, the patch installation instruction issuing authority is opened to the terminal user, so that the user can flexibly issue the patch installation instruction based on his / her own patch installation needs, thereby realizing the user's flexible control of the timing of patch installation on the target operating system of the terminal. In order to respond to the user's patch installation needs in a timely manner, this embodiment needs to monitor whether the patch installation instruction for the target operating system is received.

[0047] If the monitoring detects that a patch installation instruction for the target operating system is received, it indicates that the user of the terminal has a need to install a patch for the target operating system of the terminal, and therefore it is determined that the target operating system of the terminal needs to be patched.

[0048] If it is monitored that no patch installation instruction for the target operating system is received, it means that the terminal user currently does not have a need to install a patch for the terminal's target operating system, so it is sufficient to continue to monitor in real time whether a patch installation instruction for the target operating system is received.

[0049] For example, when a user uses a terminal, an operating system of the terminal is abnormal, and the user suspects that the abnormality is caused by a vulnerability in the operating system, and the user issues a patch installation instruction. When the patch installation instruction is monitored, it is determined that the target operating system of the terminal needs to be patched.

[0050] The second type is that the vulnerabilities in the operating system are usually discovered slowly over time and with the use of users. In order to ensure the normal operation and security of the operating system, the manufacturer of the operating system will continuously release patch packages specifically used to repair the discovered vulnerabilities as the vulnerabilities are discovered. Therefore, in order to enable the control platform to store the offline scan files corresponding to the latest released patch packages in a timely manner, the control platform is also used to monitor in real time whether new patch packages are released for the operating system, and store the offline scan files corresponding to the new patch packages when monitoring new patch packages. In principle, when there is a new patch package, there may be vulnerabilities that can be repaired by the new patch package in the target operating system of the terminal. Therefore, in order to repair the vulnerabilities in the operating system of the terminal, the specific execution process of determining whether the target operating system of the terminal needs to be patched can include the following steps: sending an inquiry message to the control platform at a preset time interval, the inquiry message is used to inquire whether there is a new patch package; if the control platform receives confirmation information that there is a new patch package in response to the inquiry information, it is determined that the target operating system of the terminal needs to be patched.

[0051] In this embodiment, the terminal actively inquires the control platform to determine whether the target operating system of the terminal needs to be patched. The terminal can send inquiry information to the control platform in real time or at a preset time interval to inquire whether there is a new patch package on the control platform.

[0052] If the control platform receives confirmation information that a new patch package exists in response to the query information feedback, it means that there may be a vulnerability in the terminal's operating system that can be repaired by the new patch package. In order to achieve timely repair of the vulnerability, it is determined that the target operating system of the terminal needs to be patched.

[0053] If you receive confirmation information from the control platform that there is no new patch package in response to the inquiry information, it means that the manufacturer of the operating system has not yet released a new patch package, and the terminal operating system has already installed the patch based on the patch package corresponding to the offline scan file stored in the control platform. Therefore, you can continue to send inquiry information to the control platform in real time or at preset time intervals.

[0054] The third type is that the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, the offline scan file corresponding to the new patch package is stored, and in order to reduce the amount of interaction between the control platform and the terminal, the control platform sends a patch installation prompt to the terminal after storing the offline scan file corresponding to the new patch package. Therefore, the specific execution process of determining whether the target operating system of the terminal needs to be patched can include the following steps: monitoring whether the patch installation prompt issued by the control platform is received, and if received, determining that the target operating system of the terminal needs to be patched.

[0055] If the monitoring receives a patch installation prompt issued by the control platform, it means that the operating system manufacturer has released a new patch package, and there may be vulnerabilities in the terminal's target operating system that can be repaired by the new patch package. Therefore, in order to be able to repair the vulnerabilities in the target operating system in a timely manner, it is determined that the terminal's target operating system needs to be patched.

[0056] If the monitoring does not receive the patch installation prompt sent by the control platform, it means that the operating system manufacturer has probably not released a new patch package, and the terminal's target operating system has not yet had any vulnerabilities that need to be fixed. Therefore, continue to monitor whether the patch installation prompt sent by the control platform is received.

[0057] The above three methods for determining whether the target operating system of the terminal needs to be patched can be used alone or in combination of two or three, which is not limited in this embodiment. When used in combination, they complement each other to achieve timely determination that the target operating system of the terminal needs to be patched.

[0058] In the case where it is determined that the target operating system of the terminal needs to be patched, in response to the target operating system of the terminal needing to be patched, an offline scan file stored in the control platform is obtained, so as to filter out a patch package supporting the operating system configuration of the terminal's operating system based on the obtained offline scan file. The method of obtaining the offline scan file stored in the control platform may include at least the following three methods:

[0059] The first one is that, in order to avoid missing the patch package, the specific process of obtaining the offline scan files stored in the control platform may include the following steps: obtaining all offline scan files stored in the control platform.

[0060] The second is that the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, it stores the offline scan file corresponding to the new patch package. Then, the specific process of obtaining the offline scan file stored by the control platform may include the following steps: obtain the offline scan file corresponding to the new patch package stored by the control platform after the most recent patch installation of the target operating system.

[0061] Considering that the patch package that has been used to patch the target operating system does not need to be patched again, in order to reduce the amount of offline scan files obtained, only the offline scan files corresponding to the new patch package stored on the control platform after the most recent patch installation of the target operating system are obtained.

[0062] The third is that the offline scanning file indicates the operating system configuration supported by the patch package through the system configuration parameters, and the system configuration parameters include the operating system name. Then, the specific process of obtaining the offline scanning file stored in the control platform may include the following steps: determining the target operating system name of the target operating system; obtaining the offline scanning file in which the target operating system name is recorded in the offline scanning file stored in the control platform.

[0063] Considering that operating systems with different operating system names are applicable to different patch packages, in order to reduce the amount of offline scan files obtained, only the offline scan files with the target operating system name of the terminal's target operating system recorded in the offline scan files stored in the control platform are obtained.

[0064] Exemplarily, the target operating system name of the terminal's target operating system is Windows 11, and the offline scanning files stored in the control platform include offline scanning files with the operating system name Windows 11 and offline scanning files with the operating system name Windows 10. Therefore, the offline scanning files with the operating system name Windows 11 recorded in the control platform are obtained.

[0065] The above three methods for obtaining offline scan files stored in the control platform can be flexibly selected based on business needs, and can be used alone or in combination, which is not limited in this embodiment. For example, the second and third methods are used in combination, and when used in combination, that is: after the latest patch installation of the target operating system, the offline scan file corresponding to the new patch package stored in the control platform records the target operating system name of the terminal's target operating system.

[0066] 102. Based on the obtained offline scan file, determine a target patch package that supports the operating system configuration of the target operating system.

[0067] The offline scan file is the basis for selecting the patch package suitable for patch installation on the target operating system. The offline scan file is obtained to separate the determination of the target patch package from the installation of the target patch package, so that the target patch package that supports the operating system configuration of the target operating system can be determined with an offline scan file with a smaller amount of data. Therefore, after obtaining the offline scan file, it is necessary to determine the target patch package that supports the operating system configuration of the target operating system based on the obtained offline scan file. The target patch package is the patch package suitable for patch installation on the target operating system.

[0068] Methods for determining a target patch package that supports the operating system configuration of a target operating system based on the obtained offline scan file may include the following two methods:

[0069] First, if the operating system has a built-in service with a detection function, then the specific process of determining the target patch package supporting the operating system configuration of the target operating system based on the obtained offline scan file may include the following steps 102A to 102C:

[0070] 102A, calling the detection function of the built-in service to detect whether there is a target offline scan file with the same operating system configuration as the target operating system in the obtained offline scan file; if so, executing step 102B; if not, executing step 102C.

[0071] In this embodiment, if a detection mechanism for the target offline scan file is added to the terminal or the target operating system of the terminal, manual intervention will inevitably be increased and the degree of coupling between the patch installation and the operating system or the terminal will be increased. Therefore, in this embodiment, considering that the operating system usually has a built-in service with a detection function, by calling the detection function of the built-in service, it is detected whether there is a target offline scan file with the same operating system configuration as the target operating system in the obtained offline scan file, so that the detection of the target offline scan file can be achieved without adding an additional detection mechanism, thereby reducing manual intervention and lowering the degree of coupling.

[0072] Exemplarily, the target operating system of the terminal is the Windows operating system, and the built-in service with detection function built into the operating system is the "Windows Update service". When determining the target offline scanning file, the interface of the Windows Update service can be called through RPC (Remote Procedure Call) to execute step 102A through the detection function of the Windows Update service to determine the target offline scanning file.

[0073] The offline scan file indicates the operating system configuration supported by the patch package through the system configuration parameters. The system configuration parameters can be determined based on business requirements, and this embodiment does not limit this. Exemplarily, the system configuration parameters may include, but are not limited to, the operating system name and at least one of the following: operating system architecture, operating system version, and operating system language. Therefore, based on the characteristics that the offline scan file indicates the operating system configuration supported by the patch package through the system configuration parameters, the specific process of calling the detection function of the built-in service to detect whether there is a target offline scan file with the same operating system configuration as the target operating system in the acquired offline scan file may include the following steps: calling the detection function of the built-in service, and comparing the corresponding system configuration parameters of each offline scan file obtained with the system configuration parameters of the target operating system respectively; if the comparison shows that the corresponding system configuration parameters of the offline scan file are the same as the system configuration parameters of the target operating system, then the offline scan file is determined as the target offline scan file. If the comparison shows that the corresponding system configuration parameters of the offline scan file do not exist and are the same as the system configuration of the target operating system, it is determined that the target offline scan file does not exist. Among them, the specific process of calling the detection function of the built-in service to compare the corresponding system configuration parameters of each offline scanning file obtained with the system configuration parameters of the target operating system can be, for each offline scanning file, performing the following steps: calling the detection function of the built-in service to detect whether the operating system name corresponding to the offline scanning file is the same as the operating system name of the target operating system; if not, then comparing and finding out that the corresponding system configuration parameters of the offline scanning file are different from the system configuration of the target operating system; if they are the same, then continuing to detect whether the other system configuration parameters except the operating system name corresponding to the offline scanning file are compatible with the other system configuration parameters except the operating system name of the target operating system; if they are compatible, then comparing and finding out that the corresponding system configuration parameters of the offline scanning file are the same as the system configuration parameters of the target operating system; if any system configuration parameter is not compatible, then comparing and finding out that the corresponding system configuration parameters of the offline scanning file are different from the system configuration of the target operating system.

[0074] 102B. Determine the patch package corresponding to the target offline scan file as a target patch package that supports the operating system configuration of the target operating system.

[0075] If a target offline scan file exists, it means that the operating system configuration indicated by the target offline scan file is exactly the same as the operating system configuration of the target operating system of the terminal. Therefore, the patch package corresponding to the target offline scan file supports the operating system configuration of the target operating system and is suitable for patch installation on the target operating system. Therefore, the patch package corresponding to the target offline scan file is determined as the target patch package that supports the operating system configuration of the target operating system.

[0076] 102C. A prompt is issued that there is no patch package that supports the operating system configuration of the target operating system.

[0077] If the target offline scan file does not exist, it means that there is no patch package that supports the operating system configuration of the target operating system, and no patch package is suitable for the target operating system. Therefore, a prompt is issued that there is no patch package that supports the operating system configuration of the target operating system, so as to make clear the fact that no patch package is suitable for the target operating system through the prompt.

[0078] The second method is to determine the target patch package that supports the operating system configuration of the target operating system based on the obtained offline scan file. The specific process is the same as the first method above. The difference is that the detection function of the built-in service of the operating system is not called, but a new detection mechanism is set up to detect whether there is a target offline scan file that is the same as the operating system configuration of the target operating system in the obtained offline scan file. In this way, the detection of the target offline scan file is avoided, and the occupation of the built-in service of the operating system is avoided.

[0079] The above two methods for determining the target patch package supporting the operating system configuration of the target operating system based on the obtained offline scan file can be flexibly selected based on business needs, which is not limited in this embodiment.

[0080] 103. Obtain a target patch package, and install the patch on the target operating system.

[0081] In this embodiment, the target patch package supporting the operating system configuration of the target operating system determined in step 102 only clarifies which patches are suitable for the target operating system. At this time, the patch package has not been actually obtained to install the patch on the target operating system. Therefore, after determining the target patch package supporting the operating system configuration of the target operating system, it is necessary to obtain the target patch package. The method of obtaining the target patch package is related to the location of the target patch package. Therefore, the method of obtaining the target patch package can include the following two methods:

[0082] One is that the control platform is also used to store patch packages released for the operating system, then the specific process of obtaining the target patch package may include the following steps: obtaining the target patch package from the control platform.

[0083] This embodiment takes into account that if the patch package released for the operating system only exists on the publishing platform of the corresponding publisher, then the terminal must have an effective network connection with the publishing platform in order to obtain the patch package to install the patch for the terminal's target operating system. In this way, once the network between the terminal and the publishing platform is interrupted, the terminal cannot install the patch. Considering this, the control platform in this embodiment is also used to store the patch packages released for the operating system. The control platform and the terminal are usually not limited to the wide area network connection. The two can be located in the same isolated network environment. In the isolated network environment, as long as the two have an effective connection method, such as a local area network connection, a USB connection, etc., the terminal can obtain the target patch package from the control platform, thereby timely installing the patch for the terminal's target operating system.

[0084] Another is that the patch package released for the operating system is stored on the publishing platform of the corresponding publisher, then the specific process of obtaining the target patch package may include: obtaining the target patch package from the publishing platform corresponding to the target patch package. The publishing platform is usually the publisher's own platform, and the patch packages stored therein are likely to be correct and effective, so the target patch package is obtained from the publishing platform corresponding to the target patch package.

[0085] The above two methods for obtaining the target patch package can be flexibly selected based on business needs, and can be used alone or in combination, which is not limited in this embodiment. For example, when used in combination, the target patch package is first obtained from the corresponding publishing platform of the target patch package. If the target patch package is not obtained due to network abnormality, the first method is continued to be used to obtain the target patch package.

[0086] Furthermore, after determining the target patch package that supports the operating system configuration of the target operating system, in order to avoid obtaining the patch package that has been installed on the target operating system, before obtaining the target patch package, it is also possible to first determine whether the target patch package that supports the operating system configuration of the target operating system includes the patch package that has been installed on the target operating system. If so, the installed patch package will be removed from the determined target patch package.

[0087] After obtaining the target patch package, the target operating system is patched so that the patch package is installed in the target operating system to repair the corresponding vulnerability in the target operating system. In some embodiments, in order to facilitate the installation of the patch package, a patch installation tool corresponding to at least one patch package type is preset in the terminal, and the patch installation tool performs targeted installation of the patch package of the corresponding patch package type. The patch package type here can be expressed by at least one of the following factors: the manufacturer of the patch package, the programming language used by the patch package, the extension of the patch package, and the repair function of the patch package. Based on this, the specific process of patching the target operating system may include: determining the repair object of the target patch package in the target operating system; using the patch installation tool corresponding to the patch package type of the target patch package, installing the target patch package into the file directory corresponding to the repair object. The patch package usually records the objects that can be repaired by itself. Therefore, in order to realize the installation of the patch package to repair the corresponding objects, the repair object of the target patch package in the target operating system can be determined based on the repairable objects recorded in the patch package. For example, the repair object may include but is not limited to the function of the operating system. After determining the repair object, a patch installation tool corresponding to the patch package type of the target patch package is used to install the target patch package into a file directory corresponding to the repair object, so as to effectively repair the vulnerabilities existing in the repair object after the patch package is installed.

[0088] Furthermore, considering that there is a certain probability that patch installation will cause anomalies in the target operating system of the terminal, before obtaining the target patch package in step 103 and installing the patch on the target operating system, the patch installation method provided in this embodiment may also include the following steps: recording the current state of the target operating system. If anomalies occur in the target operating system after obtaining the target patch package in step 103 and installing the patch on the target operating system, the target operating system is rolled back to the current state to avoid the situation where the target operating system is unavailable due to the patch installation. Furthermore, after rolling back to the current state, a prompt indicating that the patch installation failed may be issued so that the user can perform corresponding abnormality troubleshooting based on the prompt.

[0089] The patch installation method provided in the embodiment of the present application uses a control platform to store offline scan files corresponding to patch packages released for the operating system, and the offline scan files are used to indicate the operating system configuration supported by the patch packages. In response to the need for patch installation for the target operating system of the terminal, the offline scan files stored in the control platform are obtained, and the target patch package supporting the operating system configuration of the target operating system is determined based on the obtained offline scan files. Then the target patch package is obtained and the patch is installed on the target operating system. It can be seen that the solution provided in the embodiment of the present application first uses the offline scan files corresponding to the patch packages for screening. Since the offline scan files are often small, the patch packages that support the operating system configuration of the terminal's operating system, that is, the patch packages that are adapted to the operating system, can be quickly screened out, and then the determined patch packages are used to perform targeted patch installation on the operating system. In this way, since the patch packages that are implemented to install the patch on the operating system are all patch packages that are adapted to the operating system, the adapted patch packages can be quickly installed for the operating system.

[0090] like Figure 2 As shown, an embodiment of the present application provides a patch installation method, which is applied to a patch installation system. The patch installation system includes a terminal and a control platform, and the control platform is used to store an offline scan file corresponding to a patch package released for an operating system. The offline scan file is used to indicate an operating system configuration supported by the patch package. The patch installation method may include the following steps 201 to 203:

[0091] 201. In response to a target operating system of a terminal requiring patch installation, the control platform provides a stored offline scanning file to the terminal.

[0092] In this embodiment, the control platform is used to store offline scan files corresponding to the patch packages released for the operating system, so as to provide offline scan files for the terminal to filter out the target patch packages that support the operating system configuration of the target operating system of the terminal, and install the patch for the target operating system. The offline scan files stored in the control platform can be obtained and stored in the following ways: real-time monitoring of whether a patch package is released for the operating system; if a patch package is detected, the patch package is parsed to obtain the system configuration information carried by the patch package to indicate the operating system configuration supported by the patch package, and the offline scan files corresponding to the patch package are set based on the system configuration information, and stored. It can be seen that in order to collect the offline scan files corresponding to the patch package in a timely manner, the control platform will monitor in real time whether the operating system manufacturer releases a patch package for the operating system. If the patch package is monitored to be released, it means that there is a vulnerability in the corresponding operating system that needs to be repaired by the patch package. At this time, the patch package is parsed to obtain the system configuration information carried by the patch package to indicate the operating system configuration supported by the patch package, and the offline scan files corresponding to the patch package are set based on the system configuration information, and stored.

[0093] 202. The terminal determines a target patch package that supports the operating system configuration of the target operating system based on the offline scan file provided by the control platform.

[0094] 203. The terminal obtains a target patch package and installs the patch on the target operating system.

[0095] For the detailed explanation of each step adopted in the patch installation method applied to the patch installation system provided in the embodiment of the present application, reference can be made to the corresponding detailed explanation of any of the above-mentioned embodiments of the patch installation method applied to the terminal. The corresponding detailed explanation of any of the above-mentioned embodiments of the patch installation method applied to the terminal is applicable to the corresponding steps of the patch installation method applied to the patch installation system provided in the embodiment of the present application, and therefore the specific detailed explanation will not be repeated here.

[0096] The patch installation method provided in the embodiment of the present application uses a control platform to store offline scan files corresponding to patch packages released for the operating system, and the offline scan files are used to indicate the operating system configuration supported by the patch packages. In this way, in response to the need for patch installation of the target operating system of the terminal, the stored offline scan files are provided to the terminal, so that the terminal can determine the target patch package that supports the operating system configuration of the target operating system based on the acquired offline scan files. Then the target patch package is acquired and the patch is installed on the target operating system. It can be seen that the solution provided in the embodiment of the present application first uses the offline scan files corresponding to the patch packages for screening. Since the offline scan files are often small, the patch packages that support the operating system configuration of the terminal's operating system, that is, the patch packages that are adapted to the operating system, can be quickly screened out, and then the determined patch packages are used to perform targeted patch installation on the operating system. In this way, since the patch packages that are implemented to install the patch on the operating system are all patch packages that are adapted to the operating system, the adapted patch packages can be quickly installed on the operating system.

[0097] In some embodiments of the present application, considering that the storage space in the control platform is limited, the stored expired offline scan files can be cleared. The methods for determining expired offline scan files include the following two methods: One is that the control platform has a corresponding terminal service range. For each stored offline scan file, it is determined whether all terminals within the terminal service range have used the patch package corresponding to the offline scan file for patch installation. If so, the offline scan file is determined as an expired offline scan file. The other is that the manufacturer will upgrade the corresponding patch package for the same vulnerability. For each stored offline scan file, it is determined whether the patch package of the offline scan file is in the upgraded version of the patch package; if so, the offline scan file is determined as an expired offline scan file.

[0098] An embodiment of the present application also provides a patch installation device, such as Figure 3As shown, the patch installation device is applied to a terminal, the terminal is connected to a control platform for communication, the control platform is used to store an offline scan file corresponding to a patch package released for an operating system, the offline scan file is used to indicate an operating system configuration supported by the patch package, and the patch installation device includes:

[0099] An acquisition module 31, configured to acquire an offline scan file stored in the control platform in response to the target operating system of the terminal needing to install a patch;

[0100] A determination module 32, configured to determine a target patch package supporting the operating system configuration of the target operating system based on the acquired offline scan file;

[0101] The installation module 33 is used to obtain the target patch package and install the patch on the target operating system.

[0102] The patch installation device provided in the embodiment of the present application is used to store the offline scan file corresponding to the patch package released for the operating system through the control platform, and the offline scan file is used to indicate the operating system configuration supported by the patch package. In response to the need for patch installation of the target operating system of the terminal, the offline scan file stored in the control platform is obtained, and the target patch package supporting the operating system configuration of the target operating system is determined based on the obtained offline scan file. Then the target patch package is obtained and the patch is installed on the target operating system. It can be seen that the solution provided in the embodiment of the present application first uses the offline scan file corresponding to the patch package for screening. Since the offline scan file is often small, the patch package that supports the operating system configuration of the terminal operating system, that is, the patch package that is adapted to the operating system, can be quickly screened out, and then the determined patch package is used to perform targeted patch installation on the operating system. In this way, since the patch packages that are implemented to install the patch on the operating system are all patch packages that are adapted to the operating system, the adapted patch package can be quickly installed for the operating system.

[0103] In some embodiments of the present application, Figure 4 As shown, the operating system has a built-in service with a detection function, then the determination module 32 may include:

[0104] The detection unit 321 is used to call the detection function of the built-in service to detect whether there is a target offline scanning file with the same operating system configuration as the target operating system in the offline scanning file obtained by the acquisition module 31; if so, the determination unit 322 is triggered to determine the patch package corresponding to the target offline scanning file as the target patch package that supports the operating system configuration of the target operating system.

[0105] In some embodiments of the present application, Figure 4As shown, the offline scanning file indicates the operating system configuration supported by the patch package through the system configuration parameters, then the detection unit 321 is specifically used to call the detection function of the built-in service, and compare the corresponding system configuration parameters of each offline scanning file obtained with the system configuration parameters of the target operating system, wherein the system configuration parameters include the operating system name and at least one of the following: operating system architecture, operating system version, and operating system language; if the comparison shows that the corresponding system configuration parameters of the offline scanning file are the same as the system configuration parameters of the target operating system, the corresponding offline scanning file is determined as the target offline scanning file.

[0106] In some embodiments of the present application, Figure 4 As shown, the determination module 32 may also include:

[0107] The prompting unit 323 is configured to issue a prompt indicating that there is no patch package supporting the operating system configuration of the target operating system if the detecting unit 321 detects that the target offline scanning file does not exist.

[0108] In some embodiments of the present application, Figure 4 As shown, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package. Then, the acquisition module 31 includes:

[0109] The first acquisition unit 311 is used to acquire an offline scan file corresponding to a new patch package stored in the control platform after the target operating system is most recently installed with a patch.

[0110] In some embodiments of the present application, Figure 4 As shown, the offline scanning file indicates the operating system configuration supported by the patch package through the system configuration parameter, and the system configuration parameter includes the operating system name, then the acquisition module 31 includes:

[0111] The second acquisition unit 312 is used to determine the target operating system name of the target operating system; and acquire the offline scanning file in which the target operating system name is recorded from the offline scanning files stored in the control platform.

[0112] In some embodiments of the present application, Figure 4 As shown, the control platform is also used to store patch packages released for the operating system, then the installation module 33 includes:

[0113] The third acquisition unit 331 is configured to acquire the target patch package from the control platform.

[0114] In some embodiments of the present application, Figure 4As shown, the patch package released for the operating system is stored in the release platform of the corresponding publisher, then the installation module 33 includes:

[0115] The fourth obtaining unit 332 is configured to obtain the target patch package from a publishing platform corresponding to the target patch package.

[0116] In some embodiments of the present application, Figure 4 As shown, the patch installation device provided in this embodiment may also include:

[0117] The recording module 34 is used to record the current state of the target operating system before the installation module 33 obtains the target patch package and installs the patch on the target operating system;

[0118] Then, the patch installation device provided in this embodiment may further include: a rollback module 35, which is used to roll back the target operating system to the current state if an abnormality occurs in the target operating system after the installation module 33 obtains the target patch package and installs the patch on the target operating system.

[0119] In some embodiments of the present application, Figure 4 As shown, the terminal is preset with a patch installation tool corresponding to at least one patch package type, then, the installation module 33 is specifically used to determine the repair object of the target patch package in the target operating system; use the patch installation tool corresponding to the patch package type of the target patch package to install the target patch package into the file directory corresponding to the repair object.

[0120] In some embodiments of the present application, Figure 4 As shown, the patch installation device provided in this embodiment may also include:

[0121] The first monitoring module 36 is used to monitor whether a patch installation instruction for the target operating system is received, and if so, it is determined that the target operating system of the terminal needs to be patched.

[0122] In some embodiments of the present application, Figure 4 As shown, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package. Then, the patch installation device provided in this embodiment may also include:

[0123] The inquiry module 37 is used to send inquiry information to the control platform at a preset time interval, and the inquiry information is used to inquire whether there is a new patch package; if the control platform receives confirmation information that there is a new patch package in response to the inquiry information, it is determined that the target operating system of the terminal needs to be patched.

[0124] In some embodiments of the present application, Figure 4 As shown, the control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package, and after storing the offline scan file corresponding to the new patch package, send a patch installation prompt to the terminal. Then, the patch installation device provided in this embodiment may also include:

[0125] The second monitoring module 38 is used to monitor whether the patch installation prompt sent by the control platform is received, and if received, it is determined that the target operating system of the terminal needs to be patched.

[0126] In the patch installation device provided in the embodiment of the present application, the detailed explanations used in the operation of each functional module can be found in the corresponding detailed explanations of the above-mentioned patch installation method embodiment applied to the terminal, which will not be repeated here.

[0127] An embodiment of the present application also provides a patch installation system, such as Figure 5 As shown, the patch installation system may include:

[0128] The control platform 41 is used to store offline scan files corresponding to the patch packages released for the operating system; in response to the target operating system of the terminal 42 requiring patch installation, the stored offline scan files are provided to the terminal 42; the offline scan files are used to indicate the operating system configuration supported by the patch package;

[0129] The terminal 42 is used to determine the target patch package supporting the operating system configuration of the target operating system based on the offline scanning file provided by the control platform 41; obtain the target patch package, and install the patch on the target operating system.

[0130] The patch installation system provided by the embodiment of the present application is used to store the offline scan file corresponding to the patch package released for the operating system through the control platform, and the offline scan file is used to indicate the operating system configuration supported by the patch package. In this way, in response to the need for patch installation of the target operating system of the terminal, the stored offline scan file is provided to the terminal, so that the terminal can determine the target patch package that supports the operating system configuration of the target operating system based on the acquired offline scan file. Then the target patch package is acquired and the patch is installed on the target operating system. It can be seen that the solution provided by the embodiment of the present application first uses the offline scan file corresponding to the patch package for screening. Since the offline scan file is often small, the patch package that supports the operating system configuration of the terminal's operating system, that is, the patch package that is adapted to the operating system, can be quickly screened out, and then the determined patch package is used to perform targeted patch installation on the operating system. In this way, since the patch packages that are implemented to install the patch on the operating system are all patch packages that are adapted to the operating system, the adapted patch package can be quickly installed for the operating system.

[0131] In the patch installation system provided in the embodiment of the present application, the detailed explanations used in the operation of each functional module can be found in the corresponding detailed explanations of the above-mentioned patch installation method embodiments applied to the terminal and applied to the patch installation system, which will not be repeated here.

[0132] Furthermore, an embodiment of the present application also provides a computer-readable storage medium, wherein the storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above-mentioned patch installation method applied to the terminal.

[0133] Furthermore, an embodiment of the present application also provides a computer-readable storage medium, wherein the storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above-mentioned patch installation method applied to the patch installation system.

[0134] Furthermore, an embodiment of the present application also provides an electronic device, which includes: a memory for storing a program; and a processor, coupled to the memory, for running the program to execute the above-mentioned patch installation method applied to a terminal.

[0135] Furthermore, an embodiment of the present application also provides an electronic device, which includes: a memory for storing a program; and a processor, coupled to the memory, for running the program to execute the above-mentioned patch installation method applied to the patch installation system.

[0136] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0137] It is understandable that the related features in the above methods and devices can be referenced to each other. In addition, the "first", "second" and the like in the above embodiments are used to distinguish the embodiments, but do not represent the advantages and disadvantages of the embodiments.

[0138] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0139] The algorithm and display provided herein are not inherently related to any particular computer, virtual system or other device. Various general purpose systems can also be used together with the teachings based on this. According to the above description, it is obvious to construct the structure required for this type of system. In addition, the application is not directed to any specific programming language either. It should be understood that various programming languages ​​can be utilized to realize the content of the application described herein, and the description of the above specific language is to disclose the preferred embodiment of the application.

[0140] In addition, the memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0141] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0142] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data cutover device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data cutover device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0143] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data switching device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0144] These computer program instructions can also be loaded onto a computer or other programmable data transfer device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0145] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0146] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0147] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0148] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0149] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0150] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A patch installation method, characterized in that: Applied to a terminal, the terminal is in communication connection with a control platform, the control platform is used to store an offline scan file corresponding to a patch package released for an operating system, the offline scan file is used to indicate an operating system configuration supported by the patch package, the method includes: In response to the target operating system of the terminal needing to install a patch, obtaining an offline scan file stored in the control platform; Determining a target patch package that supports the operating system configuration of the target operating system based on the acquired offline scan file; Obtain the target patch package, and install the patch on the target operating system.

2. The method according to claim 1, characterized in that If the operating system has a built-in service with a detection function, then, based on the obtained offline scan file, determining a target patch package that supports the operating system configuration of the target operating system includes: Calling the detection function of the built-in service to detect whether there is a target offline scan file with the same operating system configuration as the target operating system in the acquired offline scan file; If so, the patch package corresponding to the target offline scan file is determined as a target patch package supporting the operating system configuration of the target operating system.

3. The method according to claim 2, characterized in that The offline scanning file indicates the operating system configuration supported by the patch package through the system configuration parameter, then, calling the detection function of the built-in service to detect whether there is a target offline scanning file with the same operating system configuration as the target operating system in the obtained offline scanning file, including: Calling the detection function of the built-in service to compare the system configuration parameters corresponding to each offline scan file obtained with the system configuration parameters of the target operating system, wherein the system configuration parameters include the name of the operating system and at least one of the following: operating system architecture, operating system version, and operating system language; If the comparison shows that the system configuration parameters corresponding to the offline scanning file are the same as the system configuration parameters of the target operating system, the corresponding offline scanning file is determined as the target offline scanning file.

4. The method according to claim 2, characterized in that: The method further comprises: If it is detected that the target offline scanning file does not exist, a prompt is issued that there is no patch package supporting the operating system configuration of the target operating system.

5. The method according to claim 1, characterized in that The control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package. Then, obtaining the offline scan file stored by the control platform includes: Obtain an offline scan file corresponding to a new patch package stored in the control platform after the target operating system has been most recently patched.

6. The method according to claim 1, characterized in that The control platform is also used to store patch packages released for the operating system, then obtaining the target patch package includes: obtaining the target patch package from the control platform; or, If the patch package released for the operating system is stored in a publishing platform of a corresponding publisher, obtaining the target patch package includes: obtaining the target patch package from a publishing platform corresponding to the target patch package.

7. The method according to any one of claims 1 to 6, characterized in that Before obtaining the target patch package and patching the target operating system, the method further includes: recording the current state of the target operating system; if an abnormality occurs in the target operating system after obtaining the target patch package and patching the target operating system, rolling back the target operating system to the current state; and / or, If a patch installation tool corresponding to at least one patch package type is preset in the terminal, then obtaining the target patch package and performing patch installation on the target operating system includes: determining the repair object of the target patch package in the target operating system; and using a patch installation tool corresponding to the patch package type of the target patch package to install the target patch package into a file directory corresponding to the repair object.

8. The method according to any one of claims 1 to 6, characterized in that The method further includes: monitoring whether a patch installation instruction for the target operating system is received, and if so, determining that the target operating system of the terminal needs to be patched; and / or, The control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package. Then, the method further includes: sending an inquiry message to the control platform at a preset time interval, the inquiry message is used to inquire whether there is a new patch package; if confirmation information of the existence of a new patch package fed back by the control platform in response to the inquiry information is received, it is determined that the target operating system of the terminal needs to be patched; and / or, The control platform is also used to monitor in real time whether a new patch package is released for the operating system, and when a new patch package is monitored, store the offline scan file corresponding to the new patch package, and after storing the offline scan file corresponding to the new patch package, send a patch installation prompt to the terminal. Then, the method also includes: monitoring whether the patch installation prompt issued by the control platform is received, and if received, determining that the target operating system of the terminal needs to be patched.

9. A patch installation method, characterized in that: Applied to a patch installation system, the patch installation system includes a terminal and a control platform, and the control platform is used to store an offline scan file corresponding to a patch package released for an operating system, the offline scan file is used to indicate an operating system configuration supported by the patch package, and the method includes: The control platform provides the stored offline scan file to the terminal in response to the target operating system of the terminal needing to install a patch; The terminal determines, based on the offline scan file provided by the control platform, a target patch package supporting the operating system configuration of the target operating system; The terminal obtains the target patch package and installs the patch on the target operating system.

10. A patch installation device, characterized in that: Applied to a terminal, the terminal is connected to a control platform for communication, the control platform is used to store an offline scan file corresponding to a patch package released for an operating system, the offline scan file is used to indicate an operating system configuration supported by the patch package, the device comprises: An acquisition module, configured to acquire an offline scan file stored in the control platform in response to the target operating system of the terminal needing to install a patch; A determination module, configured to determine a target patch package supporting the operating system configuration of the target operating system based on the acquired offline scan file; The installation module is used to obtain the target patch package and install the patch on the target operating system.

11. A computer-readable storage medium, characterized in that: The storage medium includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the patch installation method described in any one of claims 1 to claim 8, and / or execute the patch installation method described in claim 9.

12. An electronic device, characterized in that: The electronic device comprises: Memory, used to store programs; A processor, coupled to the memory, configured to run the program to execute the patch installation method described in any one of claims 1 to 8, and / or to execute the patch installation method described in claim 9.

Images