System upgrade method, device, electronic device and readable storage medium

Abstract

The present application discloses a system upgrade method, device, electronic device and readable storage medium, belonging to the technical field of electronic devices. The system upgrade method comprises: sending a system upgrade request carrying device fingerprint information to a server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned when the server successfully verifies the system upgrade request; when the download link information is received, downloading an encrypted installation package according to the download link information, and the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information; when the encrypted installation package is successfully decrypted according to the device fingerprint information, performing a system upgrade according to the encrypted installation package.

Description

Technical Field

[0001] The present application belongs to the technical field of electronic equipment, and specifically relates to a system upgrade method, device, electronic equipment and readable storage medium. Background Art

[0002] With the advancement of Internet technology, smart electronic devices can wirelessly download and update operating systems through Over-The-Air (OTA) technology. The wireless download process involves detection, downloading, and installation. The client carries some parameter information on the device to request the server. The server confirms whether there is a new system version based on the provided parameters. If there is a new system version, it will send back the wirelessly downloadable system upgrade file to the client for download and installation.

[0003] In the related art, only whether the version of the electronic device can install the system upgrade file is detected, and the electronic device that downloads the system upgrade file cannot be authenticated, so there is a risk of leakage of the system upgrade file. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a system upgrade method, device, electronic device and readable storage medium, which improve the security and credibility of each link of the wireless upgrade system and reduce the risk of leakage of system upgrade files.

[0005] In a first aspect, an embodiment of the present application provides a system upgrade method, which is applied to an electronic device, and the system upgrade method includes: sending a system upgrade request carrying device fingerprint information to a server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned by the server when the system upgrade request is successfully verified; when the download link information is received, downloading an encrypted installation package according to the download link information, and the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information; when the encrypted installation package is successfully decrypted according to the device fingerprint information, performing a system upgrade according to the encrypted installation package.

[0006] In a second aspect, an embodiment of the present application provides a system upgrade method, which is applied to a server. The system upgrade method includes: upon receiving a system upgrade request from an electronic device, verifying the system upgrade request according to device fingerprint information; when the system upgrade request verification is successful, sending download link information to the electronic device, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform a system upgrade when the electronic device decrypts the encrypted installation package.

[0007] In a third aspect, an embodiment of the present application provides a system upgrade device, which is applied to an electronic device, and the system upgrade device includes: a first sending module, which is used to send a system upgrade request carrying device fingerprint information to a server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned by the server when the system upgrade request is successfully verified; a download module, which is used to download an encrypted installation package according to the download link information when the download link information is received, and the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information; an upgrade module, which is used to perform a system upgrade according to the encrypted installation package when the encrypted installation package is successfully decrypted according to the device fingerprint information.

[0008] In a fourth aspect, an embodiment of the present application provides a system upgrade device, which is applied to a server, and the system upgrade device includes: a verification module, which is used to verify the system upgrade request according to the device fingerprint information when a system upgrade request is received from an electronic device; a second sending module, which is used to send download link information to the electronic device when the system upgrade request verification is successful, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform a system upgrade when the electronic device decrypts the encrypted installation package.

[0009] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor and a memory, wherein the memory stores programs or instructions that can be executed on the processor, and when the programs or instructions are executed by the processor, the steps of the method of the first aspect or the second aspect are implemented.

[0010] In a sixth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method of the first aspect or the second aspect are implemented.

[0011] In the seventh aspect, an embodiment of the present application provides a chip, which includes a processor and a communication interface, the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the steps of the method of the first aspect or the second aspect.

[0012] In an eighth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the method of the first aspect or the second aspect.

[0013] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 One of the flowcharts of the system upgrade method provided in some embodiments of the present application is shown;

[0015] Figure 2 A schematic diagram showing a flow chart of a method for performing a system upgrade of an electronic device provided in some embodiments of the present application;

[0016] Figure 3 A second flowchart of a system upgrade method provided in some embodiments of the present application is shown;

[0017] Figure 4 A schematic diagram of a data interaction process in which a server verifies an upgrade detection request of an electronic device provided in some embodiments of the present application is shown;

[0018] Figure 5 A flowchart showing a method for verifying device fingerprint information provided in some embodiments of the present application is shown;

[0019] Figure 6 A schematic diagram of a data interaction process in which a server verifies an installation package download request of an electronic device provided in some embodiments of the present application is shown;

[0020] Figure 7 One of the schematic block diagrams of a system upgrade device provided in some embodiments of the present application is shown;

[0021] Figure 8 A second schematic block diagram of a system upgrade device provided in some embodiments of the present application is shown;

[0022] Fig. 9 A structural block diagram of an electronic device in some embodiments of the present application is shown;

[0023] Fig.10 A schematic diagram of the hardware structure of an electronic device provided in some embodiments of the present application is shown. DETAILED DESCRIPTION

[0024] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0025] The terms "first", "second", etc. in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0026] The following is combined with Figures 1 to 10 , the system upgrade method, device, electronic device and readable storage medium provided in the embodiments of the present application are described in detail through specific embodiments and their application scenarios.

[0027] In some embodiments of the present application, a system upgrade method is provided, which is applied to an electronic device. Figure 1 One of the flow charts of the system upgrade method provided in some embodiments of the present application is shown, such as Figure 1 As shown, the system upgrade method includes:

[0028] Step 102, sending a system upgrade request carrying device fingerprint information to the server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned when the server successfully verifies the system upgrade request;

[0029] In the embodiment of the present application, the device fingerprint information corresponds one-to-one to the electronic device, that is, the device fingerprint information of each electronic device is independent and unique and cannot be counterfeited. The device fingerprint information includes the basic parameters of the device, specifically including: device parameter information at the factory, identity identification information, etc.

[0030] In an embodiment of the present application, a system upgrade request is used to request a new version of a system upgrade file from a server. The system upgrade request carries device fingerprint information of the electronic device. After the server receives the system upgrade request carrying the device fingerprint information, the identity of the electronic device that sends the system upgrade request can be verified through the device fingerprint information.

[0031] Specifically, when the client of an electronic device requests a new version of a system upgrade file, the system upgrade request carrying the device fingerprint information is transmitted to the server. Since the device fingerprint information is independent and unique, the server can verify the electronic device based on the device fingerprint information, and then transmit the download link information of the system upgrade file to the electronic device after the verification is passed, so that the server can verify the electronic device when it receives the request from the electronic device, thereby preventing the electronic device in a cracked or tampered state from obtaining the download link information, thereby reducing the risk of system upgrade file leakage.

[0032] Step 104, when the download link information is received, download the encrypted installation package according to the download link information, where the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information;

[0033] In an embodiment of the present application, after the electronic device receives the download link information sent back by the server, it can download the encrypted installation package through the download link information, and the encrypted installation package is a system upgrade file encrypted by the key corresponding to the device fingerprint information. The electronic device needs to decrypt the encrypted installation package before it can extract the system upgrade file therein.

[0034] In an embodiment of the present application, the encrypted installation package is an encrypted installation package obtained by encrypting the system upgrade file based on the device fingerprint information of the electronic device after the server verifies and passes the verification, so that the encrypted installation package can only be opened and installed by the electronic device whose device fingerprint information matches. Even if the encrypted installation package is leaked, other electronic devices cannot install the system upgrade file in the encrypted installation package.

[0035] Step 106: When the encrypted installation package is successfully decrypted according to the device fingerprint information, the system is upgraded according to the encrypted installation package.

[0036] In an embodiment of the present application, after the electronic device obtains the encrypted installation package through download link information, the encrypted installation package is decrypted using the key in the device fingerprint information. After decryption, the system upgrade file can be obtained, and the system is upgraded based on the system upgrade file.

[0037] Specifically, since the encrypted installation package is encrypted based on the device fingerprint information of the electronic device, the electronic device needs to decrypt the encrypted installation package based on its own device fingerprint information. Only after the decryption is successful can the system upgrade file in the encrypted installation package be installed, so that the encrypted installation package cannot be unpacked and installed even if it is leaked.

[0038] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0039] In some embodiments of the present application, the system upgrade request includes an upgrade detection request and a download link request;

[0040] Sending a system upgrade request carrying device fingerprint information to a server includes: sending an upgrade detection request carrying device fingerprint information to the server, wherein the upgrade detection request is used to request the server to update system information, and the updated system information is information returned when the server successfully verifies the upgrade detection request; upon receiving the updated system information from the server, sending a download link request carrying device fingerprint information, random number information and timestamp information to the server, wherein the download link request is used to request the server to download link information, and the download link information is information returned when the server successfully verifies the download link request.

[0041] In the embodiment of the present application, the system upgrade request includes an upgrade detection request, and the upgrade detection request is used to request the server to update the system information, that is, the electronic device actively asks the server whether there is a system upgrade file by sending an upgrade detection request. The upgrade detection request sent by the electronic device to the server carries the device fingerprint information, and the server can verify the device fingerprint information, thereby verifying the received upgrade detection request. If the upgrade detection request is successfully verified, the updated system information is transmitted back to the electronic device, thereby notifying the electronic device that the server stores a system upgrade file that can update the current system.

[0042] Specifically, in the process of the server verifying the upgrade detection request, it is only necessary to verify the device fingerprint information carried in the upgrade detection request. The following is a detailed description of the server verifying the device fingerprint information:

[0043] The server verifies the integrity of the device fingerprint information. If the device fingerprint information is found to be incomplete, the verification is directly determined to have failed. At this time, it is determined that the mobile phone is in an abnormal state, and the updated system information is not sent back to the electronic device. If the device fingerprint information is detected to be complete, the device parameters in the device fingerprint information are extracted, and the device parameters include: identity information and device parameter information. Since the device fingerprint information corresponds to the electronic device one by one, and the fingerprint information of each electronic device is independent and unique, the server stores the identity information and device parameter information corresponding to the fingerprint information of each electronic device. The server first verifies the identity information, and then verifies the device parameter information after the verification is passed. If any of the verifications fail, the electronic device is determined to be in an abnormal state, and the updated system information will not be sent back to the electronic device. If all the verifications are successful, the updated system information is sent to the electronic device, thereby notifying the electronic device that the system can be updated.

[0044] In the embodiment of the present application, the device hardware information can be compared with the hardware information of the device stored in the server when it leaves the factory to ensure the consistency of each hardware information, thereby determining that the electronic device has not been counterfeited. The server can determine whether the electronic device has been cracked through the device software information. If it has been cracked, the electronic device is not allowed to detect the new system version, that is, the update system information will not be sent to the electronic device.

[0045] In an embodiment of the present application, when an electronic device inquires a server whether a new version of the system exists, the server verifies the electronic device. When the electronic device is in an abnormal state, the server will not notify the electronic device that a new version of the system is available for update, i.e., the update system information will not be sent back to the electronic device, thereby preventing the electronic device in the abnormal state from detecting the new version of the system, thereby improving the security of the electronic device when requesting a new version of the system.

[0046] In an embodiment of the present application, after the server successfully verifies the electronic device upgrade detection request and sends back the updated system information to the electronic device, the electronic device can again send a download link request carrying the device fingerprint information, random number information and timestamp information to the server to request downloading the system upgrade file of the new version of the system.

[0047] For example, after receiving the version update information, the electronic device displays the version update information, and after the user triggers the confirmation update operation, the electronic device sends a download link request to the server, otherwise the electronic device does not send a download link request to the server. The version update information includes but is not limited to: system version number, system parameters, system characteristics, update content, etc.

[0048] Specifically, after the server has fully verified the upgrade detection request and received the download link request from the electronic device, it is necessary to re-verify the device fingerprint information, and verify the timestamp information and random number information to determine whether the electronic device is in an abnormal state. The following is a detailed description of the server verification download link request:

[0049] After receiving the download link request, the server first verifies the device fingerprint information. The verification process is the same as the process of verifying the device fingerprint information in the upgrade detection request, which will not be repeated here. After the device fingerprint information is verified, the server will verify the timestamp information and random number information. After the verification is successful, the corresponding relationship between the electronic device and the timestamp information and fingerprint information is recorded to avoid the electronic device requesting the download link again.

[0050] Exemplarily, the timestamp information includes the time when the electronic device sends a download link request to the server. When the server detects that the timestamp information is after the current time or much earlier than the current time, it determines that the timestamp information is abnormal.

[0051] Exemplarily, the random number information may be a Nonce (Number once, non-repetitive) random number. When the server detects that the random number information has not been used, it determines that the random number information is abnormal.

[0052] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0053] In some embodiments of the present application, optionally, when download link information is received, an encrypted installation package is downloaded according to the download link information, including: according to the download link information, sending an installation package download request carrying encrypted address information, random number information and timestamp information to a server, wherein the installation package download request is used to request an encrypted installation package from the server, the encrypted installation package is information returned by the server when the installation package download request is successfully verified, and the encrypted address information is address information encrypted by the public key in the device fingerprint information; receiving the encrypted installation package from the server.

[0054] In the embodiment of the present application, when the electronic device obtains the download link information, it can request the server to download the system upgrade file. In the process of the electronic device requesting the server to download the system upgrade file, the electronic device needs to send the server an installation package download request carrying the encrypted address information, the random number information and the timestamp information. After receiving the installation package download request, the server verifies the encrypted address information, the random number information and the timestamp information respectively, and allows the electronic device to download after the verification passes, and then sends the encrypted installation package to the electronic device.

[0055] In an embodiment of the present application, the device fingerprint information of the electronic device also includes a public key. The electronic device can encrypt the download address information through the public key to obtain encrypted address information, and the server stores a private key corresponding to the device fingerprint information. When the encrypted address information is received, the encrypted address information can be decrypted by the private key in the server to obtain the download address information of the electronic device. The server can verify the electronic device that requests download by decrypting the encrypted address information.

[0056] Specifically, the following describes the process by which the server verifies the installation package download request:

[0057] After receiving the installation package download request, the server decrypts the encrypted address information using the private key in the server. After the decryption is successful, the decrypted download address information is determined to be legal address information. Then the timestamp information and random number information are verified. Since the server records the correspondence between the electronic device and the timestamp information and the random number information when verifying the download link request, the server can verify the timestamp information and the random number information according to the correspondence. If the correspondence is consistent, the verification is determined to be successful. When verifying the timestamp information, it is also necessary to confirm whether the timestamp information has exceeded the authorization time limit. The timestamp information is consistent with the timestamp information in the download link request. Since the time when the user may trigger the electronic device to send the installation package download request is far from the time when the download link request is sent, it may have exceeded the authorization time limit, and the verification is determined to have failed at this time.

[0058] It should be noted that the server that verifies the installation package download request can be a CDN (Content Delivery Network) server. The CDN server is a group of servers distributed in different geographical locations, which can effectively send encrypted installation packages to electronic devices based on the download address of the electronic device. The server that verifies the installation package download request matches the download address of the electronic device. After the CDN server successfully verifies the installation package download request, it transmits the verification result back to the main server. When the verification is successful, the main server allows the electronic device to download the encrypted installation package from the CDN server.

[0059] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0060] In some embodiments of the present application, when the encrypted installation package is successfully decrypted according to the device fingerprint information, a system upgrade is performed according to the encrypted installation package, including: extracting the encryption certificate in the encrypted installation package; decrypting the encryption certificate according to the public key in the device fingerprint information to obtain a system upgrade file; and when the encryption certificate, the system upgrade file and the electronic device match, performing a system upgrade according to the system upgrade file.

[0061] In the embodiment of the present application, the encrypted installation package is an installation package obtained by encrypting the system upgrade file by the server using a private key, and the encrypted installation package includes not only the system upgrade file but also an encryption certificate.

[0062] Specifically, when the server sends a confidentiality-level system upgrade file, not all electronic devices can install the system upgrade file. When sending a confidentiality-level system upgrade file, the encryption certificate needs to be sent synchronously with the system upgrade file. Before the electronic device installs the system upgrade file, the encryption certificate is decrypted using the public key in the device fingerprint information. The decrypted encryption certificate, system upgrade file, and electronic device are checked for consistency. When it is determined that the encryption certificate, system upgrade file, and electronic device match, the process of installing the system upgrade file on the electronic device can be triggered. At this time, the electronic device performs a system upgrade through the system upgrade file.

[0063] It should be noted that when the system file downloaded by the electronic device is an unencrypted system installation package, there is no need to perform a verification process, and the system upgrade can be performed directly through the system upgrade file in the system installation package.

[0064] Figure 2 A schematic diagram of a process flow of a method for performing a system upgrade of an electronic device provided in some embodiments of the present application is shown. Figure 2 As shown, the method for performing system upgrade of an electronic device includes:

[0065] Step 201, triggering an upgrade;

[0066] Step 202, performing signature verification on the system installation package;

[0067] Step 203, determine whether the system installation package is an encrypted installation package, if it is, execute step 204, otherwise, execute step 208;

[0068] Step 204, determine whether there is an encryption certificate, if yes, go to step 205, otherwise go to step 207;

[0069] Step 205, the public key decrypts the encrypted certificate;

[0070] Step 206, determining whether the electronic device, the encryption certificate and the system upgrade file match, if it is determined to be yes, proceed to step 207, if it is determined to be no, proceed to step 208;

[0071] Step 207, installing system upgrade files;

[0072] Step 208, stop installing the system upgrade file.

[0073] In an embodiment of the present application, after downloading the system installation package, the user needs to manually trigger the upgrade, or the electronic device automatically triggers the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When both the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and perform verification based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0074] In some embodiments of the present application, the device fingerprint information includes at least one of the following: identity identification information and device parameter information.

[0075] In the embodiment of the present application, the device fingerprint information is independent and unique information, and the device fingerprint information includes identity identification information. The server can verify the identity of the electronic device through the identity identification information. The device fingerprint information also includes device parameter information. The device parameter information includes the hardware parameters of the electronic device when it is shipped, and the current software parameters, so that the server can identify whether the electronic device is in a tampered or cracked state through the device parameter information.

[0076] Exemplarily, the identity information includes but is not limited to IMEI (International Mobile Equipment Identity), a unique device identifier, etc. The device identification information is a unique identification code of an electronic device.

[0077] Exemplarily, the device parameter information includes device hardware information and device software information.

[0078] In some embodiments of the present application, a system upgrade method is provided, which is applied to a server. Figure 3 FIG. 2 shows a flow chart of a system upgrade method provided in some embodiments of the present application. Figure 3 As shown, the system upgrade method includes:

[0079] Step 302, upon receiving a system upgrade request from an electronic device, verifying the system upgrade request according to the device fingerprint information;

[0080] In an embodiment of the present application, a system upgrade request is used to request a new version of a system upgrade file from a server. The system upgrade request carries device fingerprint information of the electronic device. After the server receives the system upgrade request carrying the device fingerprint information, the identity of the electronic device that sends the system upgrade request can be verified through the device fingerprint information.

[0081] Specifically, when the client of an electronic device requests a new version of a system upgrade file, the system upgrade request carrying the device fingerprint information is transmitted to the server. Since the device fingerprint information is independent and unique, the server can verify the electronic device based on the device fingerprint information, and then transmit the download link information of the system upgrade file to the electronic device after the verification is passed, so that the server can verify the electronic device when it receives the request from the electronic device, thereby preventing the electronic device in a cracked or tampered state from obtaining the download link information, thereby reducing the risk of system upgrade file leakage.

[0082] Step 304, when the system upgrade request verification succeeds, send download link information to the electronic device, wherein the download link information is used to trigger the electronic device to download the encrypted installation package, and the encrypted installation package is used to perform system upgrade when the electronic device decrypts the encrypted installation package.

[0083] In an embodiment of the present application, after the electronic device receives the download link information sent back by the server, it can download the encrypted installation package through the download link information, and the encrypted installation package is a system upgrade file encrypted by the key corresponding to the device fingerprint information. The electronic device needs to decrypt the encrypted installation package before it can extract the system upgrade file therein.

[0084] In an embodiment of the present application, the encrypted installation package is an encrypted installation package obtained by encrypting the system upgrade file based on the device fingerprint information of the electronic device after the server verifies and passes the verification, so that the encrypted installation package can only be opened and installed by the electronic device whose device fingerprint information matches. Even if the encrypted installation package is leaked, other electronic devices cannot install the system upgrade file in the encrypted installation package.

[0085] In an embodiment of the present application, after the electronic device obtains the encrypted installation package through download link information, the encrypted installation package is decrypted using the key in the device fingerprint information. After decryption, the system upgrade file can be obtained, and the system is upgraded based on the system upgrade file.

[0086] Specifically, since the encrypted installation package is encrypted based on the device fingerprint information of the electronic device, the electronic device needs to decrypt the encrypted installation package based on its own device fingerprint information. Only after the decryption is successful can the system upgrade file in the encrypted installation package be installed, so that the encrypted installation package cannot be unpacked and installed even if it is leaked.

[0087] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0088] In some embodiments of the present application, a system upgrade request includes an upgrade detection request and a download link request, and the device fingerprint information includes: identity identification information and device parameter information; when a system upgrade request is received from an electronic device, the system upgrade request is verified according to the device fingerprint information, including: when an upgrade detection request is received, the device fingerprint information is verified to determine the verification result of the upgrade detection request; when the upgrade detection request is successfully verified, update system information is sent to the electronic device; when a download link request is received, the device fingerprint information, random number information and timestamp information are verified to determine the verification result of the download link request, wherein the device fingerprint information, random number information and timestamp information are information carried in the download link request.

[0089] In the embodiment of the present application, the system upgrade request includes an upgrade detection request, and the upgrade detection request is used to request the server to update the system information, that is, the electronic device actively asks the server whether there is a system upgrade file by sending an upgrade detection request. The upgrade detection request sent by the electronic device to the server carries the device fingerprint information, and the server can verify the device fingerprint information, thereby verifying the received upgrade detection request. If the upgrade detection request is successfully verified, the updated system information is transmitted back to the electronic device, thereby notifying the electronic device that the server stores a system upgrade file that can update the current system.

[0090] In the embodiment of the present application, the device hardware information can be compared with the hardware information of the device stored in the server when it leaves the factory to ensure the consistency of each hardware information, thereby determining that the electronic device has not been counterfeited. The server can determine whether the electronic device has been cracked through the device software information. If it has been cracked, the electronic device is not allowed to detect the new system version, that is, the update system information will not be sent to the electronic device.

[0091] In an embodiment of the present application, when an electronic device inquires a server whether a new version of the system exists, the server verifies the electronic device. When the electronic device is in an abnormal state, the server will not notify the electronic device that a new version of the system is available for update, i.e., the update system information will not be sent back to the electronic device, thereby preventing the electronic device in the abnormal state from detecting the new version of the system, thereby improving the security of the electronic device when requesting a new version of the system.

[0092] In an embodiment of the present application, after the server successfully verifies the electronic device upgrade detection request and sends back the updated system information to the electronic device, the electronic device can again send a download link request carrying the device fingerprint information, random number information and timestamp information to the server to request downloading the system upgrade file of the new version of the system.

[0093] For example, after receiving the version update information, the electronic device displays the version update information, and after the user triggers the confirmation update operation, the electronic device sends a download link request to the server, otherwise the electronic device does not send a download link request to the server. The version update information includes but is not limited to: system version number, system parameters, system characteristics, update content, etc.

[0094] Figure 4 A schematic diagram of a data interaction process in which a server verifies an upgrade detection request of an electronic device provided in some embodiments of the present application is shown, such as Figure 4 As shown, after the server has completely verified the upgrade detection request and received the download link request from the electronic device, it is necessary to re-verify the device fingerprint information, and verify the timestamp information and random number information to determine whether the electronic device is in an abnormal state. The following is a detailed description of the server verification download link request:

[0095] After receiving the download link request, the server first verifies the device fingerprint information. The verification process is the same as the process of verifying the device fingerprint information in the upgrade detection request, which will not be repeated here. After the device fingerprint information is verified, the server will verify the timestamp information and random number information. After the verification is successful, the corresponding relationship between the electronic device and the timestamp information and fingerprint information is recorded to avoid the electronic device requesting the download link again.

[0096] Exemplarily, the timestamp information includes the time when the electronic device sends a download link request to the server. When the server detects that the timestamp information is after the current time or much earlier than the current time, it determines that the timestamp information is abnormal.

[0097] Exemplarily, the random number information may be a Nonce random number. When the server detects that the random number information has not been used, it determines that the random number information is abnormal.

[0098] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0099] In some embodiments of the present application, the device fingerprint information includes: identity recognition information and device parameter information, and verifying the device fingerprint information includes at least one of the following: verifying the integrity of the device fingerprint information; verifying the identity recognition information; verifying the device parameter information.

[0100] In the embodiment of the present application, the device fingerprint information is independent and unique information, and the integrity of the device fingerprint information needs to be verified. The device fingerprint information includes identity identification information, and the server can verify the identity of the electronic device through the identity identification information. The device fingerprint information also includes device parameter information, and the device parameter information includes the hardware parameters of the electronic device when it is shipped, and the current software parameters, so that the server can identify whether the electronic device is in a tampered state or a cracked state through the device parameter information. By verifying at least one of the integrity of the device fingerprint information, the identity identification information, and the device parameter information, the accuracy of the device fingerprint information verification result can be guaranteed, thereby improving the accuracy of the server's verification of upgrade detection requests and download link requests.

[0101] Exemplarily, in the process of verifying the device fingerprint information, you can choose to verify the integrity of the device fingerprint information, the identity identification information and the device parameter information in sequence.

[0102] For example: first, the integrity of the device fingerprint information is checked. If the integrity check fails, it is determined that the device fingerprint information verification has failed. Then, if the integrity check succeeds, the identity recognition information is checked. If the identity recognition information verification fails, it is determined that the device fingerprint information verification has failed. Next, if the identity recognition information verification succeeds, the device parameter information is checked. If the device parameter information verification fails, it is determined that the device fingerprint information verification has failed. If the device parameter information verification succeeds, it is determined that the device fingerprint information verification has succeeded.

[0103] Exemplarily, in the process of verifying the device fingerprint information, it is possible to select only one of the integrity of the device fingerprint information, the identity information, and the device parameter information for verification, thereby improving the verification efficiency. For example, only the identity information is verified. Since the identity information is the unique identity of the electronic device, when the identity information in the device fingerprint information can be extracted and the identity information verification passes, it is determined that the device fingerprint information verification passes.

[0104] Exemplarily, in the process of verifying the device fingerprint information, it is possible to choose to verify only two of the integrity of the device fingerprint information, the identity information, and the device parameter information, so as to improve the verification efficiency. For example: choose to verify the identity information and the device parameter information. Since the identity information is the unique identity of the electronic device, and the device parameter information can determine whether the electronic device has been maliciously tampered with or cracked, the identity information is verified first, and after the identity information is verified, the device parameter information is verified. When both the device parameter information and the identity information are verified, it is determined that the device fingerprint information verification has passed, otherwise it is determined that the device fingerprint information verification has failed.

[0105] In the embodiment of the present application, during the process of the server verifying the upgrade detection request, it is only necessary to verify the device fingerprint information carried in the upgrade detection request. During the process of the server verifying the download link request, it is also necessary to verify the device fingerprint information, and the process of verifying the fingerprint information is the same. The following is a detailed description of the server verifying the device fingerprint information:

[0106] The server verifies the integrity of the device fingerprint information. If the device fingerprint information is found to be incomplete, the verification is directly determined to have failed. At this time, it is determined that the mobile phone is in an abnormal state, and the updated system information is not sent back to the electronic device. If the device fingerprint information is detected to be complete, the device parameters in the device fingerprint information are extracted, and the device parameters include: identity information and device parameter information. Since the device fingerprint information corresponds to the electronic device one by one, and the fingerprint information of each electronic device is independent and unique, the server stores the identity information and device parameter information corresponding to the fingerprint information of each electronic device. The server first verifies the identity information, and then verifies the device parameter information after the verification is passed. If any of the verifications fail, the electronic device is determined to be in an abnormal state, and the updated system information will not be sent back to the electronic device. If all the verifications are successful, the updated system information is sent to the electronic device, thereby notifying the electronic device that the system can be updated.

[0107] Figure 5 A flowchart showing a method for verifying device fingerprint information provided in some embodiments of the present application is shown. Figure 5 As shown, the verification method of device fingerprint information includes:

[0108] Step 501, determine whether the device fingerprint information is complete, if it is, execute step 502, otherwise, execute step 505;

[0109] Step 502, determine whether the identity identification information matches, if it is determined to be matched, execute step 503, otherwise execute step 505;

[0110] Step 503, determine whether the device parameter information matches, if it is determined to be matched, execute step 504, otherwise execute step 505;

[0111] Step 504, verification is successful;

[0112] Step 505, verification failed.

[0113] In the embodiment of the present application, the device hardware information can be compared with the hardware information of the device stored in the server when it leaves the factory to ensure the consistency of each hardware information, thereby determining that the electronic device has not been counterfeited. The server can determine whether the electronic device has been cracked through the device software information. If it has been cracked, the electronic device is not allowed to detect the new system version, that is, the update system information will not be sent to the electronic device, thereby improving the accuracy of the server's verification of upgrade detection requests and download link requests.

[0114] In some embodiments of the present application, after verifying the device fingerprint information, random number information and timestamp information, the system upgrade method also includes: recording the target correspondence between the timestamp information, the random number information and the electronic device; when receiving an installation package download request from the electronic device, decrypting the encrypted address information in the installation package download request by using the private key corresponding to the device fingerprint information; when the decryption is successful, verifying the installation package download request according to the random number information, the timestamp information and the target correspondence; when the installation package download request is successfully verified, sending the encrypted installation package to the electronic device.

[0115] In the embodiment of the present application, when the electronic device obtains the download link information, it can request the server to download the system upgrade file. In the process of the electronic device requesting the server to download the system upgrade file, the electronic device needs to send the server an installation package download request carrying the encrypted address information, the random number information and the timestamp information. After receiving the installation package download request, the server verifies the encrypted address information, the random number information and the timestamp information respectively, and allows the electronic device to download after the verification passes, and then sends the encrypted installation package to the electronic device.

[0116] In an embodiment of the present application, the device fingerprint information of the electronic device also includes a public key. The electronic device can encrypt the download address information through the public key to obtain encrypted address information, and the server stores a private key corresponding to the device fingerprint information. When the encrypted address information is received, the encrypted address information can be decrypted by the private key in the server to obtain the download address information of the electronic device. The server can verify the electronic device that requests download by decrypting the encrypted address information.

[0117] Specifically, the following describes the process by which the server verifies the installation package download request:

[0118] After receiving the installation package download request, the server decrypts the encrypted address information using the private key in the server. After the decryption is successful, the decrypted download address information is determined to be legal address information. Then the timestamp information and random number information are verified. Since the server records the correspondence between the electronic device and the timestamp information and the random number information when verifying the download link request, the server can verify the timestamp information and the random number information according to the correspondence. If the correspondence is consistent, the verification is determined to be successful. When verifying the timestamp information, it is also necessary to confirm whether the timestamp information has exceeded the authorization time limit. The timestamp information is consistent with the timestamp information in the download link request. Since the time when the user may trigger the electronic device to send the installation package download request is far from the time when the download link request is sent, it may have exceeded the authorization time limit, and the verification is determined to have failed at this time.

[0119] Figure 6 A schematic diagram of a data interaction process in which a server verifies an installation package download request of an electronic device provided in some embodiments of the present application is shown, such as Figure 6 As shown, the server that verifies the installation package download request can be a CDN server, which is a group of servers distributed in different geographical locations and can effectively send encrypted installation packages to electronic devices based on the download address of the electronic device. The server that verifies the installation package download request matches the download address of the electronic device. After the CDN server successfully verifies the installation package download request, it returns the verification result to the main server. When the verification is successful, the main server allows the electronic device to download the encrypted installation package from the CDN server.

[0120] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0121] In some embodiments of the present application, when the system upgrade request verification succeeds, before sending the download link information to the electronic device, the system upgrade method further includes:

[0122] Generate an encryption certificate based on the private key corresponding to the device fingerprint information;

[0123] Generate an encrypted installation package based on the encryption certificate and system upgrade file.

[0124] In the embodiment of the present application, the encrypted installation package is an installation package obtained by encrypting the system upgrade file by the server using a private key, and the encrypted installation package includes not only the system upgrade file but also an encryption certificate.

[0125] Specifically, when the server sends a confidentiality-level system upgrade file, not all electronic devices can install the system upgrade file. When sending a confidentiality-level system upgrade file, the encryption certificate needs to be sent synchronously with the system upgrade file. Before the electronic device installs the system upgrade file, the encryption certificate is decrypted using the public key in the device fingerprint information. The decrypted encryption certificate, system upgrade file, and electronic device are checked for consistency. When it is determined that the encryption certificate, system upgrade file, and electronic device match, the process of installing the system upgrade file on the electronic device can be triggered. At this time, the electronic device performs a system upgrade through the system upgrade file.

[0126] In an embodiment of the present application, the server can generate an encrypted installation package with an encryption certificate, so that after the electronic device downloads the system installation package, the user needs to manually trigger the upgrade, or the electronic device can automatically trigger the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and verify based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0127] The system upgrade method provided in the embodiment of the present application can be executed by a system upgrade device. In the embodiment of the present application, the system upgrade method provided in the embodiment of the present application is described by taking a system upgrade device executing the system upgrade method as an example.

[0128] In some embodiments of the present application, a system upgrade device is provided, which is applied to electronic equipment. Figure 7 One of the schematic block diagrams of the system upgrade device provided in some embodiments of the present application is shown, such as Figure 7 As shown, the system upgrade device 700 includes:

[0129] The first sending module 702 is used to send a system upgrade request carrying device fingerprint information to the server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned when the server successfully verifies the system upgrade request;

[0130] The download module 704 is used to download the encrypted installation package according to the download link information when the download link information is received, where the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information;

[0131] The upgrade module 706 is used to perform a system upgrade according to the encrypted installation package when the encrypted installation package is successfully decrypted according to the device fingerprint information.

[0132] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0133] In some embodiments of the present application, the system upgrade request includes an upgrade detection request and a download link request;

[0134] The first sending module 702 is further used to send an upgrade detection request carrying device fingerprint information to the server, wherein the upgrade detection request is used to request the server to update system information, and the updated system information is information returned by the server when the upgrade detection request is successfully verified;

[0135] The first sending module 702 is also used to send a download link request carrying device fingerprint information, random number information and timestamp information to the server when receiving the update system information from the server, wherein the download link request is used to request download link information from the server, and the download link information is the information returned by the server when the download link request is successfully verified.

[0136] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0137] In some embodiments of the present application, the first sending module 702 is further used to send an installation package download request carrying encrypted address information, random number information and timestamp information to the server according to the download link information, wherein the installation package download request is used to request an encrypted installation package from the server, the encrypted installation package is information returned when the server successfully verifies the installation package download request, and the encrypted address information is address information encrypted by the public key in the device fingerprint information;

[0138] The system upgrade device 700 further includes:

[0139] The receiving module is used to receive the encrypted installation package from the server.

[0140] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0141] In some embodiments of the present application, the system upgrade device 700 further includes:

[0142] Extraction module, used to extract the encryption certificate in the encrypted installation package;

[0143] The first decryption module is used to decrypt the encryption certificate according to the public key in the device fingerprint information to obtain the system upgrade file;

[0144] The upgrade module 706 is also used to perform system upgrade according to the system upgrade file when the encryption certificate, the system upgrade file and the electronic device match.

[0145] In an embodiment of the present application, after downloading the system installation package, the user needs to manually trigger the upgrade, or the electronic device automatically triggers the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When both the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and perform verification based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0146] In some embodiments of the present application, the device fingerprint information includes at least one of the following: identity identification information and device parameter information.

[0147] In the embodiment of the present application, the device fingerprint information is independent and unique information, and the device fingerprint information includes identity identification information. The server can verify the identity of the electronic device through the identity identification information. The device fingerprint information also includes device parameter information. The device parameter information includes the hardware parameters of the electronic device when it is shipped, and the current software parameters, so that the server can identify whether the electronic device is in a tampered or cracked state through the device parameter information.

[0148] In some embodiments of the present application, a system upgrade device is provided, which is applied to electronic equipment. Figure 8 The second schematic block diagram of the system upgrade device provided in some embodiments of the present application is shown as follows: Figure 8 As shown, the system upgrade device 800 includes:

[0149] A verification module 802 is used to verify the system upgrade request according to the device fingerprint information when receiving the system upgrade request from the electronic device;

[0150] The second sending module 804 is used to send download link information to the electronic device when the system upgrade request verification is successful, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform system upgrade when the electronic device decrypts the encrypted installation package.

[0151] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0152] In some embodiments of the present application, the system upgrade request includes an upgrade detection request and a download link request;

[0153] The verification module 802 is further configured to verify the device fingerprint information when receiving the upgrade detection request to determine the verification result of the upgrade detection request;

[0154] The second sending module 804 is further used to send the update system information to the electronic device when the upgrade detection request verification succeeds;

[0155] The verification module 802 is also used to verify the device fingerprint information, random number information and timestamp information when receiving a download link request to determine the verification result of the download link request, wherein the device fingerprint information, random number information and timestamp information are the information carried in the download link request.

[0156] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0157] In some embodiments of the present application, the device fingerprint information includes: identity information and device parameter information;

[0158] The verification module 802 is further used to perform at least one of the following: verifying the integrity of the device fingerprint information; verifying the identity identification information; and verifying the device parameter information.

[0159] In the embodiment of the present application, the device hardware information can be compared with the hardware information of the device stored in the server when it leaves the factory to ensure the consistency of each hardware information, thereby determining that the electronic device has not been counterfeited. The server can determine whether the electronic device has been cracked through the device software information. If it has been cracked, the electronic device is not allowed to detect the new system version, that is, the update system information will not be sent to the electronic device, thereby improving the accuracy of the server's verification of upgrade detection requests and download link requests.

[0160] In some embodiments of the present application, the system upgrade device 800 further includes:

[0161] A recording module, used to record the time stamp information, the random number information and the target correspondence of the electronic device;

[0162] A second decryption module is used to decrypt the encrypted address information in the installation package download request by using the private key corresponding to the device fingerprint information when receiving the installation package download request from the electronic device;

[0163] The verification module 802 is also used to verify the installation package download request according to the random number information, the timestamp information and the target correspondence relationship when the decryption is successful;

[0164] The second sending module 804 is further configured to send the encrypted installation package to the electronic device when the installation package download request verification succeeds.

[0165] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0166] In some embodiments of the present application, the system upgrade device 800 further includes:

[0167] A generation module, used to generate an encryption certificate according to a private key corresponding to the device fingerprint information;

[0168] The generation module is also used to generate an encrypted installation package based on the encryption certificate and system upgrade file

[0169] In an embodiment of the present application, the server can generate an encrypted installation package with an encryption certificate, so that after the electronic device downloads the system installation package, the user needs to manually trigger the upgrade, or the electronic device can automatically trigger the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and verify based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0170] The system upgrade device in the embodiment of the present application can be an electronic device, or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0171] The system upgrade device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0172] The system upgrade device provided in the embodiment of the present application can implement each process implemented in the above method embodiment. To avoid repetition, it will not be repeated here.

[0173] Optionally, an embodiment of the present application further provides an electronic device, Fig. 9 The structure block diagram of the electronic device in some embodiments of the present application is shown as follows: Fig. 9 As shown, the electronic device 900 includes a processor 902, a memory 904, and a program or instruction stored in the memory 904 and executable on the processor 902. When the program or instruction is executed by the processor 902, each process of the above-mentioned system upgrade method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. It should be noted that the electronic device in the embodiment of the present application includes the above-mentioned mobile electronic device and non-mobile electronic device.

[0174] Fig.10 A schematic diagram of the hardware structure of an electronic device to implement an embodiment of the present application.

[0175] The electronic device 1000 includes but is not limited to: a radio frequency unit 1001, a network module 1002, an audio output unit 1003, an input unit 1004, a sensor 1005, a display unit 1006, a user input unit 1007, an interface unit 1008, a memory 1009 and a processor 1010 and other components.

[0176] Those skilled in the art will appreciate that the electronic device 1000 may also include a power source (such as a battery) for supplying power to each component, and the power source may be logically connected to the processor 1010 through a power management system, thereby implementing functions such as managing charging, discharging, and power consumption management through the power management system. Fig.10 The electronic device structure shown in the figure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently, which will not be described in detail here.

[0177] Wherein, in the electronic device for executing Figure 1 In the case of the system upgrade method shown, the processor 1010 is used to send a system upgrade request carrying device fingerprint information to the server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned when the server successfully verifies the system upgrade request;

[0178] Processor 1010, configured to download an encrypted installation package according to the download link information when download link information is received, where the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information;

[0179] Processor 1010 is used to perform system upgrade according to the encrypted installation package when the encrypted installation package is successfully decrypted according to the device fingerprint information.

[0180] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0181] Further, the system upgrade request includes an upgrade detection request and a download link request;

[0182] Processor 1010, configured to send an upgrade detection request carrying device fingerprint information to a server, wherein the upgrade detection request is used to request the server to update system information, and the updated system information is information returned by the server when the upgrade detection request is successfully verified;

[0183] Processor 1010 is used to send a download link request carrying device fingerprint information, random number information and timestamp information to the server when receiving update system information from the server, wherein the download link request is used to request download link information from the server, and the download link information is the information returned by the server when the download link request is successfully verified.

[0184] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0185] Further, the processor 1010 is used to send an installation package download request carrying encrypted address information, random number information and timestamp information to the server according to the download link information, wherein the installation package download request is used to request an encrypted installation package from the server, the encrypted installation package is information returned when the server successfully verifies the installation package download request, and the encrypted address information is address information encrypted by a public key in the device fingerprint information;

[0186] Processor 1010 is used to receive an encrypted installation package from a server.

[0187] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0188] Further, the processor 1010 is used to extract the encryption certificate in the encrypted installation package;

[0189] Processor 1010, used to decrypt the encryption certificate according to the public key in the device fingerprint information to obtain a system upgrade file;

[0190] The processor 1010 is used to perform a system upgrade according to the system upgrade file when the encryption certificate, the system upgrade file and the electronic device match.

[0191] In an embodiment of the present application, after downloading the system installation package, the user needs to manually trigger the upgrade, or the electronic device automatically triggers the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When both the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and perform verification based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0192] Furthermore, the device fingerprint information includes at least one of the following: identity identification information and device parameter information.

[0193] In the embodiment of the present application, the device fingerprint information is independent and unique information, and the device fingerprint information includes identity recognition information. The server can verify the identity of the electronic device through the identity recognition information. The device fingerprint information also includes device parameter information. The device parameter information includes the hardware parameters of the electronic device when it is shipped, and the current software parameters, so that the server can identify whether the electronic device is in a tampered state or a cracked state through the device parameter information. Figure 2 In the case of the system upgrade method shown, the processor 1010 is used to verify the system upgrade request according to the device fingerprint information when receiving the system upgrade request from the electronic device;

[0194] Processor 1010 is used to send download link information to the electronic device when the system upgrade request verification is successful, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform system upgrade when the electronic device decrypts the encrypted installation package.

[0195] In an embodiment of the present application, during the process of wirelessly downloading and updating the operating system of an electronic device, when the electronic device requests an upgrade from a server, by carrying the device fingerprint information in the system upgrade request, the server can verify upon receiving the system upgrade request and choose whether to respond to the system upgrade request of the electronic device, thereby avoiding the server responding to an electronic device that is in a cracked or tampered state, and reducing the risk of installation package leakage. After the server responds to the upgrade request of the electronic device, the installation package downloaded by the electronic device is also an encrypted installation package encrypted by the device fingerprint information. The encrypted installation package can only be decrypted and installed by an electronic device that matches the device fingerprint information, so that the encrypted installation package cannot be installed by other devices even if it is leaked. The present application improves the security and credibility of each link of the wireless upgrade system by providing a security verification mechanism for both the download request environment and the file installation environment, and reduces the risk of leakage of system upgrade files.

[0196] In some embodiments of the present application, the system upgrade request includes an upgrade detection request and a download link request;

[0197] Processor 1010, configured to verify device fingerprint information upon receiving an upgrade detection request to determine a verification result of the upgrade detection request;

[0198] Processor 1010, configured to send update system information to the electronic device when the upgrade detection request verification succeeds;

[0199] Processor 1010 is used to verify the device fingerprint information, random number information and timestamp information when receiving a download link request to determine the verification result of the download link request, wherein the device fingerprint information, random number information and timestamp information are information carried in the download link request.

[0200] In an embodiment of the present application, when an electronic device requests a download link of a system upgrade file from a server, it is necessary to transmit a system detection request and a download link request to the server. When the electronic device sends the system detection request and the download link request to the server, it carries device fingerprint information that can be used to verify the electronic device, and the server can verify the electronic device based on the device fingerprint information when receiving the system detection request and the download link request, which can effectively prevent the electronic device in an abnormal state from obtaining the download link of the system upgrade file, thereby improving the security of the process of the server sending the system upgrade file.

[0201] In some embodiments of the present application, the device fingerprint information includes: identity information and device parameter information;

[0202] Processor 1010 is used to perform at least one of the following: verifying the integrity of device fingerprint information; verifying identity information; and verifying device parameter information.

[0203] In the embodiment of the present application, the device hardware information can be compared with the hardware information of the device stored in the server when it leaves the factory to ensure the consistency of each hardware information, thereby determining that the electronic device has not been counterfeited. The server can determine whether the electronic device has been cracked through the device software information. If it has been cracked, the electronic device is not allowed to detect the new system version, that is, the update system information will not be sent to the electronic device, thereby improving the accuracy of the server's verification of upgrade detection requests and download link requests.

[0204] In some embodiments of the present application, the processor 1010 is used to record the target correspondence between the timestamp information, the random number information and the electronic device;

[0205] Processor 1010, configured to decrypt the encrypted address information in the installation package download request by using the private key corresponding to the device fingerprint information when receiving the installation package download request from the electronic device;

[0206] Processor 1010, configured to verify the installation package download request according to the random number information, the timestamp information and the target correspondence relationship when the decryption is successful;

[0207] Processor 1010 is used to send the encrypted installation package to the electronic device when the installation package download request verification is successful.

[0208] In an embodiment of the present application, after the electronic device obtains the download link information, it can send an installation package download request to the server according to the download link information, and the installation package download request carries encrypted address information, random number information and timestamp information. Since the timestamp information and random number information match the timestamp information and random number information in the download link request uploaded by the electronic device to the server, the server can verify the consistency of the electronic device based on the timestamp information and random number information, thereby avoiding malicious sharing of the download link information to other electronic devices for downloading, and the server information can also verify the electronic device based on the encrypted address information, thereby further improving the accuracy of the verification. The electronic device is allowed to download the encrypted installation package only after the verification is successful, thereby improving the security of the process of the electronic device downloading the encrypted installation package and avoiding other electronic devices from counterfeiting and downloading the encrypted installation package.

[0209] In some embodiments of the present application, the processor 1010 is configured to generate an encryption certificate according to a private key corresponding to the device fingerprint information;

[0210] Processor 1010 is used to generate an encrypted installation package according to the encryption certificate and the system upgrade file.

[0211] In an embodiment of the present application, the server can generate an encrypted installation package with an encryption certificate, so that after the electronic device downloads the system installation package, the user needs to manually trigger the upgrade, or the electronic device can automatically trigger the upgrade at a scheduled time. After the upgrade is triggered, the signature of the system installation package is first verified, and then when the system installation package is an encrypted installation package, the encryption certificate is decrypted and the consistency is verified. When the decryption and verification steps are passed, the system upgrade file is installed, otherwise the installation is stopped. When the electronic device installs the system upgrade file sent by the server, it can decrypt the encrypted installation package and verify based on the decryption result, thereby improving the security of the electronic device when installing the system upgrade file sent by the server.

[0212] It should be understood that in the embodiment of the present application, the input unit 1004 may include a graphics processor (Graphics Processing Unit, GPU) 10041 and a microphone 10042, and the graphics processor 10041 processes the image data of the static picture or action file obtained by the image capture device (such as a camera) in the action file capture mode or the image capture mode. The display unit 1006 may include a display panel 10061, and the display panel 10061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 1007 includes a touch panel 10071 and at least one of other input devices 10072. The touch panel 10071 is also called a touch screen. The touch panel 10071 may include two parts: a touch detection device and a touch controller. Other input devices 10072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0213] The memory 1009 can be used to store software programs and various data. The memory 1009 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 1009 may include a volatile memory or a non-volatile memory, or the memory 1009 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DRRAM). The memory 1009 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0214] The processor 1010 may include one or more processing units; optionally, the processor 1010 integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor 1010.

[0215] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0216] The processor is the processor in the electronic device in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0217] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned system upgrade method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0218] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0219] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned system upgrade method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0220] It should be noted that, in this article, the term "comprises", "includes" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, device, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, device, article or device. In the absence of further restrictions, an element defined by the statement "includes one..." does not exclude the presence of other identical elements in the process, device, article or device including the element. In addition, it should be noted that the scope of the devices and apparatuses in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described device may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0221] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment device can be implemented by means of software plus a necessary general hardware platform, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, disk, CD), including a number of instructions for a terminal (which can be a mobile phone, computer, server, or network equipment, etc.) to execute the device of each embodiment of the present application.

[0222] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A system upgrade method, characterized in that: Applied to electronic equipment, the system upgrade method includes: Sending a system upgrade request carrying device fingerprint information to a server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned by the server when the system upgrade request is successfully verified; When receiving the download link information, downloading the encrypted installation package according to the download link information, the encrypted installation package being the installation package encrypted by the server based on the device fingerprint information; When the encrypted installation package is successfully decrypted according to the device fingerprint information, a system upgrade is performed according to the encrypted installation package.

2. The system upgrade method according to claim 1, characterized in that: The system upgrade request includes an upgrade detection request and a download link request; The sending of a system upgrade request carrying device fingerprint information to the server includes: Sending the upgrade detection request carrying the device fingerprint information to the server, wherein the upgrade detection request is used to request the server to update system information, and the updated system information is the information returned by the server when the upgrade detection request is successfully verified; Upon receiving the updated system information from the server, a download link request carrying the device fingerprint information, random number information and timestamp information is sent to the server, wherein the download link request is used to request the download link information from the server, and the download link information is information returned by the server when the download link request is successfully verified.

3. The system upgrade method according to claim 2, characterized in that: The step of downloading the encrypted installation package according to the download link information upon receiving the download link information comprises: According to the download link information, an installation package download request carrying the encrypted address information, the random number information and the timestamp information is sent to the server, wherein the installation package download request is used to request the encrypted installation package from the server, the encrypted installation package is information returned when the server successfully verifies the installation package download request, and the encrypted address information is address information encrypted by the public key in the device fingerprint information; The encrypted installation package is received from the server.

4. The system upgrade method according to any one of claims 1 to 3, characterized in that: When the encrypted installation package is successfully decrypted according to the device fingerprint information, performing a system upgrade according to the encrypted installation package includes: Extracting the encryption certificate from the encrypted installation package; Decrypting the encryption certificate according to the public key in the device fingerprint information to obtain a system upgrade file; When the encryption certificate, the system upgrade file and the electronic device match, the system upgrade is performed according to the system upgrade file.

5. The system upgrade method according to any one of claims 1 to 3, characterized in that: The device fingerprint information includes at least one of the following: identity identification information and device parameter information.

6. A system upgrade method, characterized in that: Applied to a server, the system upgrade method includes: When receiving a system upgrade request from an electronic device, verifying the system upgrade request according to the device fingerprint information; When the system upgrade request verification succeeds, download link information is sent to the electronic device, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform a system upgrade when the electronic device decrypts the encrypted installation package.

7. The system upgrade method according to claim 6, characterized in that: The system upgrade request includes an upgrade detection request and a download link request, and the device fingerprint information includes: identity recognition information and device parameter information; When receiving a system upgrade request from an electronic device, verifying the system upgrade request according to the device fingerprint information includes: Upon receiving the upgrade detection request, verifying the device fingerprint information to determine a verification result of the upgrade detection request; If the verification result of the upgrade detection request is successful, sending update system information to the electronic device; When the download link request is received, the device fingerprint information, the random number information and the timestamp information are verified to determine the verification result of the download link request, wherein the device fingerprint information, the random number information and the timestamp information are the information carried in the download link request.

8. The system upgrade method according to claim 7, characterized in that: The verifying of the device fingerprint information includes at least one of the following: Verifying the integrity of the device fingerprint information; Verifying the identity information; The device parameter information is verified.

9. The system upgrade method according to claim 7, characterized in that: After verifying the device fingerprint information, the random number information and the timestamp information, the system upgrade method further includes: Recording the target correspondence between the timestamp information, the random number information and the electronic device; When receiving an installation package download request from the electronic device, decrypting the encrypted address information in the installation package download request using the private key corresponding to the device fingerprint information; If the decryption is successful, verifying the installation package download request according to the random number information, the timestamp information and the target correspondence relationship; When the verification of the installation package download request is successful, the encrypted installation package is sent to the electronic device.

10. The system upgrade method according to any one of claims 6 to 9, characterized in that: When the system upgrade request verification succeeds, before sending the download link information to the electronic device, the system upgrade method further includes: Generate an encryption certificate according to the private key corresponding to the device fingerprint information; The encrypted installation package is generated according to the encryption certificate and the system upgrade file.

11. A system upgrade device, characterized in that: Applied to electronic equipment, the system upgrade device comprises: A first sending module, configured to send a system upgrade request carrying device fingerprint information to a server, wherein the system upgrade request is used to request download link information from the server, and the download link information is information returned when the server successfully verifies the system upgrade request; A download module, configured to download an encrypted installation package according to the download link information when the download link information is received, wherein the encrypted installation package is an installation package encrypted by the server based on the device fingerprint information; The upgrade module is used to perform a system upgrade according to the encrypted installation package when the encrypted installation package is successfully decrypted according to the device fingerprint information.

12. A system upgrade device, characterized in that: Applied to a server, the system upgrade device comprises: A verification module, configured to verify the system upgrade request according to the device fingerprint information when receiving the system upgrade request from the electronic device; The second sending module is used to send download link information to the electronic device when the system upgrade request verification is successful, wherein the download link information is used to trigger the electronic device to download an encrypted installation package, and the encrypted installation package is used to perform a system upgrade when the electronic device decrypts the encrypted installation package.

13. An electronic device, characterized in that: include: A processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the system upgrade method according to any one of claims 1 to 10 are implemented.

14. A readable storage medium, characterized in that: The readable storage medium stores a program or an instruction, and when the program or the instruction is executed by the processor, the steps of the system upgrade method according to any one of claims 1 to 10 are implemented.

Images