Online network switching and tripping method and device for intelligent terminal

Abstract

The invention discloses an online network switching and cutting method and device for an intelligent terminal, and the method comprises the steps: obtaining a security certificate which needs to be switched by a target terminal, and switching the state of the target terminal into a network switching initial state; storing the original owner certificate of the target terminal, and switching the state of the target terminal into an owner-free state; sending a network switching task to the target terminal, and indicating the target terminal to initiate a request for establishing a secure link according to the network switching task; and receiving the request and establishing a security link with the target terminal, querying whether the network switching task exists through the security link, and if so, updating the security certificate to the target terminal through the security link. Therefore, the security of the security certificate updating process is ensured, and the source of the task is prevented from being illegal or the task information is prevented from being tampered, so that the online machine-carrying network transfer of the target terminal is completed under the condition that the security is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of network switching and cutting machines, and in particular to an online network switching and cutting machine method and device for an intelligent terminal. Background Art

[0002] With the development of industry-related equipment such as financial digital services, government affairs and police affairs, more and more intelligent systems such as Android, OpenHarmony and other systems are used in industry-related terminals. These types of production terminals often identify the identity of the terminal owner and do not allow the owner to be changed at will. In addition, different owners have different management requirements for the terminal. For example, POS machines of different banks have their owner identities identified. If cross-bank applications are not authorized on the terminal, they are not allowed to be installed, and users are not allowed to switch the owner identity and programs on the POS at will. For example, if the POS machine is identified as the First Bank, the POS can only install applications that belong to or are authorized by the First Bank, and users are not allowed to switch the owner identity of the POS machine (First Bank) to other banks.

[0003] When the above-mentioned terminals need to switch owners, they often need to return the devices to the factory, and the device manufacturer or acquiring institution uses production tools to perform offline device replacement operations on the devices. This operation of changing the identity of the terminal owner is called network switching, which means changing the network point to which the machine belongs and switching the owner information and data in the machine.

[0004] However, for some agents, since they cannot determine which type of owner identity payment channel the terminal uses when purchasing, the agents need to return the equipment to the factory for network transfer and machine cutting based on the final requirements, which increases the difficulty for the agents to use the equipment. Summary of the invention

[0005] The technical problem to be solved by the present invention is to provide a method and device for online network switching of an intelligent terminal, so that the terminal can flexibly and safely realize online portability.

[0006] In order to solve the above technical problems, the technical solution adopted by the present invention is: An online network switching and machine cutting method for an intelligent terminal, comprising: Obtain target data that the target terminal needs to switch, and switch the state of the target terminal to the initial state of network switching, wherein the target data includes a security certificate; Saving the original owner certificate of the target terminal and switching the state of the target terminal to a no-owner state; Sending a network switching task to the target terminal, instructing the target terminal to execute the network switching task and initiate a request to establish a secure link; receiving the request and establishing a secure link with the target terminal, and transmitting the target data to the target terminal through the secure link; The security certificate is updated to the target terminal through the secure link.

[0007] In order to solve the above technical problems, another technical solution adopted by the present invention is: An online network switching and cutting device for an intelligent terminal comprises a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, each step in the online network switching and cutting method for an intelligent terminal as described above is implemented.

[0008] The beneficial effects of the present invention are as follows: by obtaining the security certificate that the target terminal needs to switch, the target terminal is put into the initial state of network switching, indicating that the current target terminal can execute network switching, and then the original owner certificate of the target terminal is saved, so as to avoid the update failure causing the target terminal to be unable to pass the owner certificate for security authentication, and when executing the network switching task, a security link is first established to ensure the path security, and then after querying the existence of the corresponding network switching task through the security link, the security certificate is updated to the target terminal through the security link, so as to further ensure the security of the security certificate update process, prevent the source of the task from being illegal or the task information from being tampered with, thereby completing the online network switching of the target terminal while ensuring security. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 This is a flowchart of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 2 It is a structural schematic diagram of a model for realizing an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 3 This is a flowchart of the first part of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 4 This is a flowchart of the second part of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 5 This is a flowchart of the third part of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 6 It is a diagram showing the steps of executing a network switching task by a network switching machine switching client in an embodiment of the present invention; Figure 7 This is a flowchart of the fourth part of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Figure 8This is a flowchart of the fifth part of the steps of an online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Fig. 9 This is a flowchart of the sixth part of the online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Fig.10 This is a flowchart of the seventh part of the online network switching and machine cutting method of an intelligent terminal in an embodiment of the present invention; Fig.11 It is a structural schematic diagram of an online network cutting device of an intelligent terminal in an embodiment of the present invention. DETAILED DESCRIPTION

[0010] In order to explain the technical content, achieved objectives and effects of the present invention in detail, the following is an explanation in combination with the implementation modes and the accompanying drawings.

[0011] At present, the replacement of equipment often relies on the existing customer service and maintenance channels of the equipment manufacturer or acquiring institution, and the user sends the machine to an offline repair place for replacement. On the one hand, the reason is that offline maintenance channels are more mature. On the other hand, the reason is: the replacement operation requires higher security, while online operations have certain security issues, and the replacement involves many businesses and systems, making it difficult to ensure the security of the replacement process. However, with the increasing demand of users for operational convenience and the demand of equipment owners to reduce costs and improve efficiency, traditional offline maintenance channels can no longer meet the usage needs. Therefore, in order to cope with this need for flexible deployment, the present invention uses a series of security links and security technologies to enable the terminal to flexibly and securely realize online portability, as follows: An online network switching and machine cutting method for an intelligent terminal, comprising: Obtain the security certificate that the target terminal needs to switch, and switch the state of the target terminal to the initial state of network switching; Saving the original owner certificate of the target terminal and switching the state of the target terminal to a no-owner state; Sending a network switching task to the target terminal, instructing the target terminal to initiate a request to establish a secure link according to the network switching task; The request is received and a secure link is established with the target terminal, and whether the network switching task exists is queried through the secure link. If so, the security certificate is updated to the target terminal through the secure link.

[0012] From the above description, it can be seen that the beneficial effects of the present invention are: by obtaining the security certificate that the target terminal needs to switch, the target terminal is put into the initial state of network switching, indicating that the current target terminal can execute network switching, and then the original owner certificate of the target terminal is saved to avoid update failure resulting in the target terminal being unable to pass the owner certificate for security authentication, and when executing the network switching task, a security link is first established to ensure the path security, and then the security link is used to query the existence of the corresponding network switching task, and then the security certificate is updated to the target terminal through the security link, further ensuring the security of the security certificate update process, preventing the source of the task from being illegal or the task information from being tampered with, thereby completing the online network switching of the target terminal while ensuring security.

[0013] Furthermore, the storing of the original owner certificate of the target terminal includes: The owner certificate is backed up, and the owner certificate in the target terminal is deleted.

[0014] From the above description, it can be seen that by backing up the owner certificate and deleting the owner certificate in the target terminal, the security certificate that needs to be switched can be effectively updated to the target terminal, and by backing up the owner certificate, the problem of the target terminal being unable to pass the owner certificate for security authentication due to update failure can be avoided.

[0015] Furthermore, the storing of the original owner certificate of the target terminal includes: The owner certificate in the target terminal is marked as being in the process of network transfer initialization and is stopped from being used.

[0016] From the above description, it can be seen that by marking the owner certificate in the target terminal as being in the process of initializing the network transfer and stopping its use, the conflict between the security certificate that needs to be switched and the original owner certificate can be avoided, resulting in the inability to update the security certificate, while also playing the role of preserving the original owner certificate.

[0017] Further, updating the security certificate to the target terminal through the secure link includes: Determine whether the security certificate is updated successfully. If so, delete the backed-up owner certificate or delete the marked owner certificate; if not, restore the backed-up owner certificate to the target terminal or remove the mark of the owner certificate.

[0018] From the above description, it can be seen that deleting the owner certificate after the security certificate is updated, and restoring the owner certificate based on the backup owner certificate or the owner certificate in the marked state after the update fails, can ensure that there is an available security certificate in the target terminal.

[0019] Further, updating the security certificate to the target terminal through the secure link includes: Initiating an initialization instruction to the target terminal, instructing the target terminal to perform initialization and feedback an initialization result; The initialization result is received, and it is determined whether the initialization result is successful. If so, the security certificate is updated to the target terminal through the secure link.

[0020] From the above description, it can be seen that by initializing the target terminal and clearing the customer-related programs and data on the terminal to the greatest extent, the target terminal can be restored to a state close to that of a "blank machine", which is more conducive to the update of the security certificate and avoids conflicts between the update process and the original data.

[0021] Furthermore, obtaining the security certificate that the target terminal needs to switch also includes: Acquire target data that the target terminal needs to switch; the target data includes at least one of a firmware package, a preinstalled application package, key download information, and an owner identity; The updating of the security certificate to the target terminal through the secure link comprises: The target data is updated in the target terminal.

[0022] It can be seen from the above description that by acquiring target data such as firmware packages, pre-installed application packages, key download information, and owner identification, different contents can be updated according to user needs when updating the target terminal.

[0023] Further, updating the target data to the target terminal includes: Obtaining a target instruction, wherein the target instruction includes at least one of a firmware upgrade instruction, a key download instruction, an application installation instruction, and an identification change instruction; If the target instruction is the firmware upgrade instruction, updating the firmware package to the target terminal; If the target instruction is the key download instruction, downloading the key to the target terminal according to the key download information; If the target instruction is the application installation instruction, installing the pre-installed application package into the target terminal; If the target instruction is the identification change instruction, the owner identity is updated in the target terminal.

[0024] From the above description, it can be seen that after obtaining one of the firmware upgrade instructions, key download instructions, application installation instructions and identification change instructions, the corresponding instruction steps are executed, so that different contents can be updated according to user needs when updating the target terminal.

[0025] Further, downloading the key to the target terminal using the key download information includes: Start the certificate key download service; Creating a key download channel according to the key download information through the certificate key service; The corresponding key is downloaded to the target terminal through the key download channel.

[0026] From the above description, it can be seen that after the key download channel is created by the certificate key service, the corresponding key is downloaded to the target terminal based on the key download channel, thereby ensuring the security of the key download process.

[0027] Further, if the target instruction includes at least two different instructions, the different instructions are executed in sequence according to a preset execution order.

[0028] It can be seen from the above description that when executing different instructions, the corresponding instructions are executed in sequence according to the preset execution order to avoid the problem that the previous steps are disrupted due to the failure of some instructions to execute, resulting in the inability to update the target data.

[0029] Another embodiment of the present invention provides an online network switching and cutting device for an intelligent terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, each step in the online network switching and cutting method for an intelligent terminal as described above is implemented.

[0030] The online network switching method and device of the intelligent terminal provided by the present invention can be applied to the scenario of terminal owner switching, which is described below through specific implementation methods: Embodiment 1 Please refer to Figure 1 , an online network switching and cutting method for an intelligent terminal; wherein the method in this embodiment is based on Figure 2 The model shown is implemented; the model includes a server and a client; the server includes: a push module, a FOTA module, a network switching module, a certificate key download module, and an installation link module. The client includes: a push service, a FOTA client, a network switching client, a certificate key download client, a secure routing service, a financial key download module, and a secure link.

[0031] The specific functions of each module in the server are as follows: Push module (GPush): used to receive push requests from other servers and push messages to the terminal. Its main functions in the business are: 1. Push messages to the terminal. 2. Receive requests from the network switching module.

[0032] FOTA (Firmware Over-The-Air, mobile terminal over-the-air software upgrade) module: used to manage terminal firmware, and can push firmware to the terminal for update. During the update process, the server can select the firmware to be issued according to the actual situation of the terminal, such as comparing the firmware version, and select the content that needs to be issued in the end, thereby reducing the download volume, saving traffic, and shortening the download time. The main functions in the business are: 1. Push firmware. 2. Receive requests from the network switching module. 3. Synchronize the update results to the network switching module.

[0033] Network switching module: In the network porting service, the network switching module is both the initiator and the scheduler of the service. As the core of the entire service, the network switching module not only interacts and synchronizes with multiple servers, but also interacts with the terminal network switching client to ensure the synchronization of the service between the server and the client. The main functions in the service include: 1. Pushing messages to the network switching client through GPush. 2. Sending tasks to the network switching client. 3. Initiating task requests to other servers. 4. Receive task results returned by other servers. 5. Managing the status of the network switching service process.

[0034] Certificate key download module: It is mainly used for the terminal to download the customer key on behalf of the customer in an off-site environment. Its security basis is based on the premise that the terminal has the ability of two-way security authentication to perform remote key download. Its main function in the business is: remote key download.

[0035] Security link module: used to establish a link with the terminal and forward data to various business systems. Its main role in the business is to establish a security link with the security link TA.

[0036] The functions of each service in the client are as follows: Push service: The GPush client maintains a long connection with the GPush server and distributes the received messages to the specified program. The main role in the business is to receive messages and distribute them.

[0037] FOTA client: receives the update task sent by the FOTA module, sends the existing terminal package to the server, and downloads the firmware for update. Its main functions in the business include: 1. Firmware update. 2. Provides Activity for the client to call. The interface of the update process is the responsibility of the FOTA client.

[0038] Network switching and machine cutting client: used to cooperate with the network switching and machine cutting module to perform business processing on the terminal. As the business processor and scheduler on the terminal, the network switching and machine cutting client will initiate a request to other modules after receiving the task issued by the server if it requires the cooperation of other modules to execute. At the same time, the network switching and machine cutting client is responsible for processing the user experience on the terminal and interacting with the user interface. The main functions in the business include: 1. Interface display of network switching business on the terminal (except firmware update). 2. Receive and process tasks issued by the network switching and machine cutting module. 3. Initiate requests to other modules. 4. Receive the processing results issued by the network switching and machine cutting module and display them synchronously.

[0039] Security Routing Service: The security routing service runs in the terminal REE (Rich Execution Environment) environment and is responsible for forwarding data transmitted on the security link. Its main functions in the business are as follows: 1. Create a security link. 2. Forward the business data on the security link to the security link TA.

[0040] Secure link TA (TEE Application): Implements TLS (Transport Layer Security) and forwards the business data to the business TA after processing. Its main functions in the business include: 1. Providing support for establishing two-way authentication for secure links. 2. Processing and distributing business data.

[0041] Certificate key download service: KLS (Key Load Service, the service that processes key downloads on the terminal side) is the key loading service of the running terminal, which communicates with KDP (Key Distribute Protocol, the key distribution module in the background) and performs remote key downloads. The main functions in the business include: 1. Remote key download. 2. Receive key download requests from the network switching client. 3. Return the key download results to the network switching client.

[0042] Please refer to Figure 1 , the method specifically comprises the following steps: S1. Obtain the security certificate that the target terminal needs to switch, and switch the state of the target terminal to the initial state of network switching. In addition to obtaining the security certificate, it also includes obtaining the target data that the target terminal needs to switch; the target data includes at least one of the firmware package, pre-installed application package, key download information, and owner identity identification; that is, the data to be replaced includes the security certificate and the target data. Please refer to Figure 2The specific operation is as follows: after receiving the operator's request for network switching and machine cutting, the network switching and machine cutting module obtains the security certificate and target data that the network switching and machine cutting terminal needs to switch, generates a network switching and machine cutting task and adds it to the task pool. At the same time, the network switching and machine cutting module initiates a request to the security link module to enter the terminal network switching initial state. The security link module receives the automatically generated task and switches the terminal to the network switching initial state.

[0043] The network switching module then sends a request to the FOTA module to enter the terminal network switching initial state. After receiving the corresponding request, the FOTA module freezes the upgrade task of the corresponding terminal. Among them, after the terminal switches to the network switching initial state, the network switching initial state identifier is saved in the TEE (Trusted Execution Environment) environment as a basis for judging whether the terminal is currently in the network switching initial state. For example, the network switching initial state identifier will be used in scenarios such as sending existing package information to the terminal, restoring factory settings, rewriting customer names in unified storage TA, changing device owner certificates, and verifying APP signatures.

[0044] S2. Save the original owner certificate of the target terminal and switch the state of the target terminal to the state of no owner. Among them, if the existing owner certificate is deleted first when entering the initial state of network transfer, the following risks may arise: 1) Since the network transfer process is long, there will be a situation where there is no owner certificate for a long time, and the risk of being attacked is relatively high. 2) If an abnormality occurs in the subsequent steps, resulting in the inability to continue the network transfer action, the terminal will be in an intermediate state at this time because the original owner certificate is deleted. Therefore, the owner certificate is not directly deleted when entering the initial state of network transfer. For example, the current terminal owner certificate is saved in the TEE environment. The server notifies the TEE through a secure link to enter the initial state of network transfer. After receiving the notification, the TEE pre-processes and saves the terminal owner certificate. The specific saving methods include: (1) Back up the owner certificate and delete the owner certificate in the target terminal.

[0045] (2) The owner certificate in the target terminal is marked as being in the process of initializing the network transfer and is no longer used. In other words, the owner certificate is not removed, but is marked as being in the process of initializing the network transfer so that the system can perform specific processing on the application installation and other behaviors in this state.

[0046] After the owner certificate is pre-processed and saved, the terminal will be in a logically ownerless state; in this state, the terminal will only allow the installation of manufacturer applications, and will not allow the installation of customer applications. At the same time, when saving the owner certificate, customer information can also be pre-saved.

[0047] S3, issue a network switching task to the target terminal, instructing the target terminal to initiate a request to establish a secure link according to the network switching task. Figure 4Specifically: the network switching module pushes messages to the terminal through the push service (push service, i.e., services such as MQTT or MPush, can realize the background to actively push messages to the terminal. The message refers to a polling instruction message agreed upon by the push service and the client. When the network switching client receives the message, it executes the instruction to query the background for specific network switching tasks. The push service does not contain complex task information, but is just a simple message that triggers the client to query the background network switching module for specific tasks). After receiving the message, the network switching client initiates polling. When the polling is successful, the terminal network switching task is received. The network switching task is the specific task details of the network switching, including the specific subtasks that need to be performed during this network switching process.

[0048] S4. Receive the request and establish a secure link with the target terminal. Check whether there is a network switching task through the secure link. If so, update the security certificate to the target terminal through the secure link. That is, after the network switching task is queried from the background network switching module, it does not directly perform the switching initialization and various subtasks, but starts the secure link and queries the background security link module through the secure link to see if there is a network switching task, thereby ensuring security and preventing the source of the task from being illegal or the task information from being tampered with. Please refer to Figure 5 , the specific process is as follows: S41. The network switching and machine switching client initiates a request to the secure routing service to start a secure link.

[0049] S42, the secure routing service establishes a secure link with the secure link module, and receives the machine switching initialization task saved by the secure link module task pool. The secure link TA triggers the system service to execute the owner certificate pre-change and customer information pre-change tasks, and executes the change machine switching initialization flag operation: for example, a file is stored in the TEE area, a flag is written to the file to indicate whether it is currently in the machine switching initialization state, and the execution result is sent to the secure link module.

[0050] S43, the network switching and machine cutting client queries the underlying system for the execution result, and after receiving the returned result, sends the pre-change result to the network switching and machine cutting module. When it is determined that the security certificate is updated successfully, the backup owner certificate is deleted or the marked owner certificate is deleted; if the update fails, the backup owner certificate is restored to the target terminal or the owner certificate mark is removed.

[0051] S5. The network switching and machine cutting client starts to execute the network switching and machine cutting subtasks step by step according to the corresponding tasks in the network switching and machine cutting task pool. Figure 6As shown, tasks 1 and 3 must be performed, while tasks 2, 4, and 5 are optional. In addition, the tasks must be performed in the order mentioned above. If they are not performed in order, some steps cannot be implemented. For example, if task 3 is not performed, task 4 cannot be performed, that is, if the owner certificate of the terminal is not changed, the new client application cannot be installed. The specific execution steps are as follows: Please refer to Figure 7 , S51, the network switching client initiates the factory reset, and the bottom layer returns the result after the execution is completed; at the same time, the terminal will automatically restart after the factory reset is successful. Then the network switching client sends the factory reset result to the server. Among them, the purpose of restoring the factory settings is to restore the terminal to a state close to that of a "blank machine" and to clear the client-related programs and data on the terminal to the greatest extent. The specific operations are as follows: 1) Uninstall applications installed in the Data partition. Some applications need to be protected and can be specified, such as applications and services that are dependent on network switching and machine switching.

[0052] 2) Clear SD card data protection.

[0053] 3) Clear usage traces; before clearing usage traces, read the network settings and store them in a place that is not affected by restoring the factory settings. After clearing usage traces, restore the network startup state and related configurations.

[0054] 4) Reset customer customized configuration.

[0055] S52, the network switching client initiates an OTA (Over-The-Air) upgrade command. The FOTA client is started and the task parameters are passed in. The FOTA client downloads the firmware installation package to be updated from the FOTA module and installs it; that is, the firmware package is updated to the target terminal to complete the firmware upgrade.

[0056] Please refer to Figure 8 , S52, the network switching and machine cutting client initiates a customer identification change; wherein, the target customer name is also sent through a secure link and saved in the TEE environment as the customer name of the current terminal. For example, the target customer name will be used in scenarios such as the terminal sending existing package information, OTA upgrade checking customer name, and booting process checking customer name. This task is also acquired after the secure link is created, and the terminal secure link TA actively obtains it from the secure link background. That is, the owner identity is updated to the target terminal.

[0057] S53, the client initiates the replacement of the owner certificate; wherein, the device owner certificate is directly sent to the TEE environment by the security link module through the security link, and the TEE allows the replacement of the device owner certificate only when the following conditions are met at the same time: 1) The terminal is in the initial state of network transfer. 2) The change instruction and new certificate are issued through the secure link.

[0058] When performing the owner certificate replacement, there is a change window; the change window refers to the process from the terminal owner certificate pre-change to the replacement of the device owner certificate. During this period, the original device owner certificate of the device is still retained until the new certificate is issued by the security link to replace it, avoiding the situation where there is no device owner certificate for a long time.

[0059] Please refer to Fig. 9 , S54, the network switching client initiates a customer pre-installed package installation instruction to the FOTA client. The customer pre-installed package is the application installation package, configuration file, etc. that needs to be installed before the customer machine leaves the factory; that is, the pre-installed application package is installed to the target terminal. At different stages, the application installation strategy is different, as shown in the following table: Table 1. Application installation strategies at different stages

[0060] Please refer to Fig.10 , S55, the network switching and machine cutting client initiates a certificate key download instruction, starts the certificate key download service, and passes in the task parameters. The certificate key download service creates a key download channel from the certificate key download background and downloads the corresponding key to SE (Security Environment).

[0061] S56: The network switching module sends a command to the client to start the next task or terminate the task.

[0062] Embodiment 2 Please refer to Fig.11 , an online network switching and cutting device for an intelligent terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, each step in the online network switching and cutting method for an intelligent terminal as described in Example 1 is implemented.

[0063] To sum up, the online network switching method and device for intelligent terminals provided by the present invention, after obtaining the security certificate that the target terminal needs to switch, makes the target terminal enter the initial network switching state, indicating that the current target terminal can execute the network switching, and then saves the original owner certificate of the target terminal to avoid the update failure causing the target terminal to be unable to pass the owner certificate for security authentication, and when executing the network switching task, first establishes a security link to ensure the path security, and then queries the corresponding network switching task through the security link, and then updates the security certificate to the target terminal through the security link, further ensuring the security of the security certificate update process, preventing the source of the task from being illegal or the task information from being tampered with, thereby completing the online network switching of the target terminal while ensuring security.

[0064] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent transformations made using the contents of the present invention's specification and drawings, or directly or indirectly applied in related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. An online network switching and cutting method for an intelligent terminal, characterized in that: include: Obtain the security certificate that the target terminal needs to switch, and switch the state of the target terminal to the initial state of network switching; Saving the original owner certificate of the target terminal and switching the state of the target terminal to a no-owner state; Sending a network switching task to the target terminal, instructing the target terminal to initiate a request to establish a secure link according to the network switching task; The request is received and a secure link is established with the target terminal, and whether the network switching task exists is queried through the secure link. If so, the security certificate is updated to the target terminal through the secure link.

2. The online network switching and cutting method of an intelligent terminal according to claim 1, characterized in that: The storing of the original owner certificate of the target terminal comprises: The owner certificate is backed up, and the owner certificate in the target terminal is deleted.

3. The online network switching and cutting method of an intelligent terminal according to claim 1, characterized in that: The storing of the original owner certificate of the target terminal comprises: The owner certificate in the target terminal is marked as being in the process of network transfer initialization and is stopped from being used.

4. The online network switching and cutting method of an intelligent terminal according to claim 2 or 3, characterized in that: The updating of the security certificate to the target terminal through the secure link comprises: Determine whether the security certificate is updated successfully. If so, delete the backed-up owner certificate or delete the marked owner certificate; if not, restore the backed-up owner certificate to the target terminal or remove the mark of the owner certificate.

5. The online network switching and cutting method of an intelligent terminal according to claim 1, characterized in that: The updating of the security certificate to the target terminal through the secure link comprises: Initiating an initialization instruction to the target terminal, instructing the target terminal to perform initialization and feedback an initialization result; The initialization result is received, and it is determined whether the initialization result is successful. If so, the security certificate is updated to the target terminal through the secure link.

6. The online network switching and cutting method of an intelligent terminal according to claim 1, characterized in that: The obtaining of the security certificate that the target terminal needs to switch also includes: Acquire target data that the target terminal needs to switch; the target data includes at least one of a firmware package, a preinstalled application package, key download information, and an owner identity; The updating of the security certificate to the target terminal through the secure link further comprises: The target data is updated in the target terminal.

7. The online network switching and cutting method of an intelligent terminal according to claim 6, characterized in that: The updating of the target data to the target terminal includes: Obtaining a target instruction, wherein the target instruction includes at least one of a firmware upgrade instruction, a key download instruction, an application installation instruction, and an identification change instruction; If the target instruction is the firmware upgrade instruction, updating the firmware package to the target terminal; If the target instruction is the key download instruction, downloading the key to the target terminal according to the key download information; If the target instruction is the application installation instruction, installing the pre-installed application package into the target terminal; If the target instruction is the identification change instruction, the owner identity is updated in the target terminal.

8. The online network switching and cutting method of a smart terminal according to claim 7, characterized in that: The step of downloading the key to the target terminal according to the key download information includes: Start the certificate key download service; Creating a key download channel according to the key download information through the certificate key service; The corresponding key is downloaded to the target terminal through the key download channel.

9. The online network switching and cutting method of a smart terminal according to claim 7, characterized in that: If the target instructions include at least two different instructions, the different instructions are executed in sequence according to a preset execution order.

10. An online network switching and cutting device for an intelligent terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, each step of the online network switching method for an intelligent terminal according to any one of claims 1 to 9 is implemented.

Images