Software management method, system and equipment based on trusted dual-system architecture and medium

Abstract

The invention relates to a software management method, system and device based on a trusted dual-system architecture and a medium, in the scheme, an input initial software package is detected through a software detection terminal, so that the safety of a software input source of a software user is guaranteed; according to the application, the trusted management center carries out unified management and configuration on the software, the software is stored in a centralized manner through the trusted software library, and distributed storage backup is established at the trusted terminal, so that the storage security and downloading efficiency of the software package are improved; moreover, after the software is transferred to the user, the security of processes such as software storage, software storage, software downloading, software installation, software operation and software back operation can be guaranteed based on a trusted dual-system architecture, so that a unified authentication and management process of the whole life cycle of the software supply chain is provided, and the security and reliability of the software are improved.

Description

Technical Field

[0001] The present application relates to the field of computer security technology, and in particular to a software management method, system, device and medium based on a trusted dual-system architecture. Background Art

[0002] In the information age, software is everywhere. Software can be divided into many types according to different classification standards, mainly including system software, application software and development software. The entire life cycle of software includes: software development, software testing, software download, software installation, software return and other processes. As the relationship and structure of the upstream and downstream software supply chain become more and more complex, the security protection of software development and application has become a key and difficult issue that all units are paying more and more attention to. Supply chain threats exist in the entire life cycle of software. For example: in the development stage, there may be security risks caused by the introduction of security defects or backdoors by software vendors, the use of insecure open source software or the pollution of the compilation environment. In the delivery and operation stages, there may be risks such as vendors inserting malicious code, software updates being hijacked, and systems being cracked.

[0003] Therefore, how to ensure the security of the entire life cycle of software is a technical problem that technical personnel in this field need to solve. Summary of the invention

[0004] The present application provides a software management method, system, device and medium based on a trusted dual-system architecture to ensure the security of the software throughout its life cycle.

[0005] In a first aspect, the present application provides a software management method based on a trusted dual-system architecture, comprising:

[0006] The software detection terminal detects the input initial software package. If the detection passes, a software package to be stored is generated and sent to the trusted management center;

[0007] The trusted management center detects the software package to be stored in the library, and if the detection passes, generates a trusted software package and stores it in the trusted software library;

[0008] The trusted management center backs up and stores the trusted software packages of the trusted software library in a trusted terminal group; the trusted terminal group includes at least two trusted terminals;

[0009] The trusted terminal executes any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

[0010] In a second aspect, the present application provides a software management system based on a trusted dual-system architecture, including:

[0011] The software detection terminal is used to detect the input initial software package. If the test passes, a software package to be stored is generated and sent to the trusted management center;

[0012] The trusted management center is used to detect the software package to be stored in the library. If the detection passes, a trusted software package is generated and stored in the trusted software library; the trusted management center backs up the trusted software package of the trusted software library and stores it in a trusted terminal group; the trusted terminal group includes at least two trusted terminals;

[0013] The trusted software library is used to store trusted software packages;

[0014] The trusted terminal is used to execute any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

[0015] In a third aspect, the present application provides an electronic device, including:

[0016] A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor executes the steps of the software management method described above in the present application through the computer program.

[0017] In a fourth aspect, the present application further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the steps of the above-mentioned software management method of the present application.

[0018] The above technical solution provided by the embodiment of the present application has the following advantages over the prior art: the present application discloses a software management solution based on a trusted dual-system architecture. In this solution, the input initial software package is detected by a software detection terminal, thereby ensuring the security of the software input source of the software user; the trusted management center in the present application uniformly manages and configures the software, centrally stores the software through a trusted software library, and establishes a distributed storage backup on a trusted terminal to improve the security of software package storage and download efficiency; and after the software is transferred to the user, the present application can be based on a trusted dual-system architecture to provide security for the processes of software warehousing, software storage, software downloading, software installation, software operation and software return, thereby providing a unified authentication and management process for the entire life cycle of the software supply chain, and improving the security and reliability of the software. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0021] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0022] Figure 1 A flowchart of a software management method based on a trusted dual-system architecture provided in an embodiment of the present application;

[0023] Figure 2 An overall flow chart of software management provided in an embodiment of the present application;

[0024] Figure 3 A schematic diagram of the structure of a software detection terminal provided in an embodiment of the present application;

[0025] Figure 4 A schematic diagram of a software detection process provided in an embodiment of the present application;

[0026] Figure 5 A schematic diagram of a trusted management center structure provided in an embodiment of the present application;

[0027] Figure 6 A schematic diagram of a trusted software library structure provided in an embodiment of the present application;

[0028] Figure 7 A software storage flow chart provided for an embodiment of the present application;

[0029] Figure 8 A schematic diagram of a trusted terminal structure provided in an embodiment of the present application;

[0030] Fig. 9 A schematic diagram of a storage structure of trusted software management provided in an embodiment of the present application;

[0031] Fig.10 A dynamic management structure diagram stored in a trusted terminal group provided in an embodiment of the present application;

[0032] Fig.11 An overall flow chart of software downloading provided in an embodiment of the present application;

[0033] Fig.12 A schematic diagram of a software download method provided in an embodiment of the present application;

[0034] Fig.13 A trusted management center online download flow chart provided in an embodiment of the present application;

[0035] Fig.14 Another trusted management center online download flow chart provided in an embodiment of the present application;

[0036] Fig.15 The trusted management center provided in the embodiment of the present application does not download the flowchart online;

[0037] Fig.16 A flowchart of mobile terminal authorization download provided in an embodiment of the present application;

[0038] Fig.17 A mobile terminal download flow chart provided in an embodiment of the present application;

[0039] Fig.18 The software installation and update process provided in the embodiment of the present application;

[0040] Fig.19 A schematic diagram of the software return process provided in an embodiment of the present application;

[0041] Fig. 20 A schematic diagram of the structure of a software management system based on a trusted dual-system architecture provided in an embodiment of the present application;

[0042] Fig.21 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0043] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work belong to the scope of protection of the present application. The following disclosure provides many different embodiments or examples for realizing different structures of the present invention. In order to simplify the disclosure of the present invention, the components and settings of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present invention. In addition, the present invention can repeat reference numbers and / or letters in different examples. This repetition is for the purpose of simplification and clarity, and it does not itself indicate the relationship between the various embodiments and / or settings discussed.

[0044] In this application, a software management method, system, device and medium based on a trusted dual-system architecture are provided to ensure the security of the entire software life cycle, ensure that security precautions are taken in software development, third-party testing, software self-testing, software warehousing, software downloading, installation and deployment, installation and update, and software return, and build a complete supply chain security protection system across the entire software life cycle. This solution ensures the security of the software package circulation process through unified certificate management and signatures. The cryptographic support methods for each link are as follows:

[0045] (1) Software source: digital certificates and keys (for signing and verifying) in the development phase, and digital certificates and keys (for signing and verifying) in the testing phase: After the development phase is completed, a digital certificate is added to the software package, and the software is signed with the key and then transferred to the third-party testing phase. After receiving the software, the testing phase uses the key to verify the digital certificate and enters the testing process after passing the test. After passing the test, the digital certificate of the testing phase is added and signed and transferred to the distribution phase. After the distribution phase verifies the signature of the software package in the testing phase, the software is repackaged to generate an initial software package. The initial software package includes: the digital certificate of the development phase, the digital certificate of the testing phase, the software installation files and installation configuration policies, etc. The signed software package is transferred to the software user.

[0046] (2) Software testing: software package verification key, label after passing the test, signature key between the software package and the trusted management center, local trusted application password, etc.: After the software source is input, the software testing terminal decodes and verifies the software package, verifies the legitimacy of the development phase certificate and the test phase certificate, and verifies the integrity of the software installation file; after the verification, the software security test is carried out. After passing the test, the software installation file is affixed with a security label and repackaged. The software package is signed and circulated to the trusted management center.

[0047] (3) Trusted Management Center: software package verification key, internal software digital certification certificate, identity certificate of each terminal, signature key, etc.: The trusted management center has a cryptographic service module and is the center for unified management of digital certificates and cryptographic mechanisms. It is responsible for the authentication access of all terminals and modules, the issuance and authentication of internal digital certificates, and the management of cryptographic services. After the software package to be stored in the library passes the test and enters the trusted management center, the software package is verified and the integrity of the software installation file is checked. After passing the test, the user's digital certification certificate and trusted policy are added to regenerate the user's trusted software package, which is then signed and enters the trusted software library.

[0048] (4) Trusted Software Library: Authentication passwords between the trusted management center and local trusted application passwords, etc. Trusted software packages are stored in the trusted software library from the trusted management center, waiting to be downloaded by trusted terminals, and are configured and managed by the storage policy of the trusted management center.

[0049] (5) Trusted terminal: software package verification key, terminal identity certificate, authentication password between the terminal and the trusted management center, local trusted application password, etc.: After the trusted terminal downloads the trusted software package from the trusted software library, it decodes and verifies the signature, verifies the legitimacy of the digital authentication certificate, and verifies the integrity of the software installation file; after the verification is passed, the software is installed according to the configuration policy, and the entire installation process is dynamically monitored through the trusted mechanism to ensure the security and reliability of the entire software installation process.

[0050] This application uses trusted computing technology to establish a trusted platform management terminal and a trusted terminal to ensure the security of each environment for software circulation. Among them, the trusted platform management terminal includes: a trusted software detection terminal, a trusted management center, and a trusted software library. This application is based on a trusted dual-system architecture, and constructs a trusted software detection terminal, a trusted software library, and a trusted terminal as a trusted computing node, and a trusted management center as a unified trusted management platform. During the circulation of software packages in various trusted nodes, the security of the software package within the node is guaranteed through a trusted measurement mechanism; the trusted status of the software package node is uniformly managed through a trusted report; and a trusted connection is established to ensure the security and reliability of the network during the circulation process. Among them, the present application performs trustworthy measurement on the entire detection process in the trusted software detection terminal, and produces a trustworthy report to ensure the safety of the detection link; performs trustworthy management on the download process of the trusted terminal in the trusted software library, establishes a trusted connection, controls access rights, and ensures the security of software downloads; the trusted software backup storage in the trusted terminal group is controlled through the unified management of the trusted management center, and trusted connections are established between trusted terminals to ensure storage security; the trusted terminal performs trustworthy measurement on the status of the entire process of software package installation, operation, update and uninstallation through the trusted root to ensure the security of the software in the trusted terminal; local software configuration policies, software directories and other key files can be set to read-only function through a trusted mechanism to prevent tampering, and important software management files can be directly stored in the trusted root.

[0051] See also Figure 1 , is a flowchart of a software management method based on a trusted dual-system architecture provided in an embodiment of the application, the method comprising:

[0052] S101, the software detection terminal detects the input initial software package, and if the detection passes, generates a software package to be stored and sends it to the trusted management center;

[0053] Among them, the software detection terminal in this application mainly performs security detection on the software locally before the software enters the trusted software library, and adds a security label after passing the detection.

[0054] The management of trusted software includes the management of the software development process, the management of the trusted software installation process, and the management of the trusted software operation and use process. Since the software development process is complex and contains many uncertain human factors, this solution conducts trusted management and password authentication for the entire life cycle of trusted software input, download and installation, and return. For the software development process and the third-party testing process of the software, a unified trusted digital certificate is used for management. Therefore, in this application, the input initial software package includes a digital certificate for the development phase and a digital certificate for the testing phase. When the software detection terminal detects the initial software package, it is necessary to verify the digital certificate for the development phase and the digital certificate for the testing phase. At the same time, the software needs to be tested from the aspects of integrity and security. Only software packages that pass the test will generate software packages to be stored and sent to the trusted management center.

[0055] S102, the trusted management center detects the software package to be stored in the library, and if the detection passes, generates a trusted software package and stores it in the trusted software library;

[0056] In this application, the trusted management center is the management core of the trusted computing system, and performs unified authentication and security policy management on trusted terminal nodes. After the trusted management center receives the software package to be stored in the library, it needs to test the software package to be stored in the library. The test includes testing the security, integrity and other aspects of the software package to be stored in the library. Only the software package that passes the test will generate a trusted software package and store it in the trusted software library. The trusted software library is used to store safe software installation files that have been tested and certified. The software installation file can be a cost software installation package or a software upgrade package. The software installation file is stored in the trusted software library in the form of a trusted software package. The trusted software library is the key security protection object of the storage software package. By establishing a dual system architecture, other security defense measures can be adopted to focus on protecting the security of the trusted software library.

[0057] S103, the trusted management center backs up and stores the trusted software package of the trusted software library to a trusted terminal group; the trusted terminal group includes at least two trusted terminals;

[0058] In this application, the trusted management center can manage and configure the software in a unified manner. It not only stores the software in a centralized manner through a trusted software library, but also establishes a distributed storage backup on the trusted terminal to improve the security of software package storage and download efficiency. This application organizes multiple trusted terminals into a trusted terminal group. Trusted connections are established between trusted terminals in the trusted terminal group through a trusted mechanism. Each trusted terminal is provided with a trusted security storage area, which is a protected area. The trusted security storage area is physically on different trusted terminals, but is managed and used by the trusted management center in a unified manner. Local users must be authenticated and authorized by the trusted management center before they can access the local trusted security storage area. This application organizes the trusted security storage area of ​​each trusted terminal in the trusted terminal group into a trusted software storage backup area in the local trusted terminal group, which is uniformly managed by the trusted management center.

[0059] S104. The trusted terminal executes any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

[0060] In this application, a trusted terminal is a terminal that uses trusted software. The software installation file is downloaded locally in the form of a trusted software package, and is installed, updated, run, and returned according to a trusted policy. The trusted policy includes: an installation configuration policy, a download policy, and a security protection policy; wherein the installation configuration policy is used to configure the software installation process, the download policy is used to set the download method for different software, and the security protection policy is used to set the security protection method for the software. Therefore, the trusted terminal needs to perform software download operations according to the download policy, perform software installation operations or software update operations according to the installation configuration policy, and perform software operation operations according to the security protection policy.

[0061] See also Figure 2, which is the overall flow chart of software management provided by the embodiment of the present application. It can be seen that the present application establishes a trusted computing environment in the software development environment and the software testing environment respectively to ensure the security of local terminal applications, and performs unified authentication management through digital certificates issued by a third-party certification agency or the software user to ensure the security of the software input source of the software user. After the software is transferred to the user, the whole life cycle of the software is secured through a trusted assurance system. The trusted management center uniformly manages and configures the software, establishes a trusted software library where the software is centrally stored for the centralized storage of the software, and establishes a distributed storage backup on the trusted terminal to improve the security of the software package storage and the download efficiency; secure downloading of trusted software is ensured through trusted authentication, trusted connection and cryptographic technology, and the trusted environment of the terminal is used to monitor and manage the installation, use and update process of the software in real time using a trusted root, and ensures the end of the entire software life cycle by formulating a safe and reliable return strategy, so as to achieve closed-loop management of the software supply chain throughout its life cycle at the user's end.

[0062] In another embodiment of the present application, the software detection terminal detects the input initial software package, including:

[0063] The software detection terminal obtains an input initial software package; the initial software package includes: software installation files, installation configuration policies, initial signatures, installation file summary values, development phase digital certificates, and testing phase digital certificates;

[0064] The software detection terminal detects the software installation file, initial signature, installation file summary value, development phase digital certificate and testing phase digital certificate in the initial software package; if all the detections are successful, it is determined that the initial software package detection has passed.

[0065] See also Figure 3 , is a schematic diagram of the software detection terminal structure provided in the embodiment of the present application, through Figure 3 It can be seen that the software detection terminal uses the trusted root as the protection component, and other components are computing components to build a trusted dual system architecture. The trusted root provides cryptographic services and trusted services; the computing component of the software detection terminal includes software input interfaces, detection tools, labeling tools, trusted agents, software output interfaces, etc. Figure 4 , is a schematic diagram of the software detection process provided in the embodiment of the present application, through Figure 4It can be seen that the input initial software package includes software installation files, installation configuration policies, initial signatures, installation file summary values, development phase digital certificates, and testing phase digital certificates. The initial signature of the initial software package is verified to detect the security of the software source; the integrity of the software installation file is verified by detecting the installation file summary value; the security of the development phase and the testing phase is determined by verifying the correctness of the digital certificates of the development phase and the third-party testing phase; the security of the software installation file can be ensured by performing security tests such as vulnerabilities and viruses on the software installation file. If all the above tests are passed, a test pass label is added to the software that has passed the test, and a software package to be stored is generated. The software package to be stored is re-signed, and after obtaining the signature value to be stored, it is sent to the trusted management center together with the software package to be stored, so that the trusted management center can continue to perform the software storage operation; among them, all the above processes are completed in a trusted environment with a dual system architecture.

[0066] From the above, it can be seen that after the initial software package is input, the present application can detect its security, integrity, security of the development and testing process, etc. through the software detection terminal, thereby ensuring the security of the software input source of the software user.

[0067] In another embodiment of the present application, the trusted management center detects the software package to be stored in the library, and if the detection passes, generates a trusted software package and stores it in the trusted software library, including:

[0068] The trusted management center obtains the software package to be stored in the library; the software package to be stored in the library includes: software installation files, installation configuration policies, signatures to be stored in the library, and installation file summary values;

[0069] The trusted management center detects the signature and summary value of the installation file in the software package to be stored; if the detection is successful, the trusted policy is configured; the trusted policy includes: installation configuration policy, download policy and security protection policy;

[0070] The trusted management center generates a trusted software package, updates the software catalog and the download whitelist of trusted terminals according to the trusted software package, and stores the trusted software package, the updated software catalog and the download whitelist of trusted terminals in the trusted software library; wherein the trusted software package includes: software installation files, trusted policies, trusted signatures, installation file summary values ​​and authentication certificates.

[0071] See also Figure 5 , is a schematic diagram of the structure of the trusted management center provided in the embodiment of the present application, such as Figure 5As shown, the trusted management center in this method is mainly divided into trusted cryptographic services, software management services, trusted management services and network management modules. The trusted cryptographic service module includes sub-modules such as software certificate management, signature verification, and offline cryptographic services. The certificate management module is responsible for the issuance, authentication, and revocation of certificates in the software circulation link, and is also responsible for the management of identity authentication certificates of each trusted terminal; the signature verification module is used for the signature and verification of output and input files; the offline cryptographic service is used for the management module of password authorization and support management of mobile terminals when the terminal cannot directly download the software in the trusted software library and backup storage.

[0072] The software management service module includes submodules such as software security policy, software information management, terminal download management, software library management, software update management, and software return management. Software management security policy management is responsible for the formulation and management of policies for software download, installation, and configuration; software information management is used to register, classify, and manage other information of the stored software; terminal download management manages the terminal directory, download path and method, etc.; software library management is the unified management of trusted software library access rights, storage methods, software directories, etc.; software update management is used for the management of software version updates, software package patches, software upgrades, etc.; software return management is used for the management of software removal and withdrawal.

[0073] The trusted management service module includes trusted system management, trusted policy management, and trusted audit management. It is used for trusted authentication and unified management of trusted nodes in the trusted system. The network management module is used for real-time monitoring of the network status of each link in the software supply chain, and adopts different working methods and download strategies according to different network conditions.

[0074] See also Figure 6 , provides a schematic diagram of the structure of a trusted software library for the embodiment of the present application, such as Figure 6 As shown in the figure, the trusted software library uses the trusted root as the protection component, and other components are computing components to build a trusted dual-system architecture. The trusted root provides cryptographic services and trusted services; the trusted security storage area of ​​the trusted software library is used to store trusted software packages and related files, including but not limited to: software directories (including directories within terminal groups), terminal download whitelists, in-use software packages, software upgrade packages, and return software packages. Trusted system applications include network management, management applications, and trusted agents. Management applications include local application software management and system management; trusted agents are functional applications in computing components that assist trusted roots in implementing trusted mechanisms; network management modules are used to monitor the network status of local ports in real time.

[0075] See also Figure 7 , is a flowchart of software storage provided in the embodiment of the present application, through Figure 7It can be seen that after the software package to be stored in the library enters the trusted management center after passing the detection, it is first necessary to verify the signature to be stored in the library to ensure the security of the software source; the integrity of the software installation file is verified through the installation file summary value; if all the detections are successful, the trusted policy is configured according to the download rules and security protection measures of the software package, and the trusted management center authenticates the software package and adds the authentication certificate after packaging. The authenticated software package is signed and stored in the trusted software library. The software package stored in the trusted software library is called a trusted software package. The trusted software package includes: software installation files, trusted policies, trusted signatures, installation file summary values ​​and authentication certificates; the software catalog and the download whitelist of trusted terminal download software are updated, and are backed up to the trusted software library through a secure channel together with the trusted software package.

[0076] In summary, it can be seen that this application verifies the security and integrity of the software package to be stored in the library through the trusted management center, configures the corresponding trusted policy, updates the software catalog and the download whitelist of the trusted terminal, and stores them together in the trusted software library, thereby ensuring the security of the trusted software packages stored in the trusted software library. By setting the trusted policy, the download, installation, update, operation and other operations of the software can be securely controlled.

[0077] In another embodiment of the present application, the trusted management center backs up and stores the trusted software package of the trusted software library to the trusted terminal group, including:

[0078] The trusted management center determines the available storage space capacity of the trusted terminal group and the authorized download software directory of the trusted terminal group;

[0079] The trusted management center determines the required storage space capacity based on the authorized download software catalog, and determines the backup method using the available storage space capacity and the required storage space capacity;

[0080] If the backup method is a full backup method, each trusted software package corresponding to the authorized download software directory will be backed up and stored in the secure storage area of ​​the trusted terminal group; if the backup method is a partial backup method, some trusted software packages corresponding to the authorized download software directory will be backed up and stored in the secure storage area of ​​the trusted terminal group.

[0081] See also Figure 8 , is a schematic diagram of a trusted terminal structure provided in an embodiment of the present application, such as Figure 8As shown, the trusted terminal uses the trusted root as the protection component, and other components are computing components to build a trusted dual-system architecture. The trusted root provides cryptographic services and trusted services. Among them, the trusted terminal applies the local trusted computing application environment, and the trusted system applications include but are not limited to: software management, local applications and trusted agents, etc.; software management includes local application software management and system management, etc.; trusted agents are functional applications in computing components that assist the trusted root in implementing trusted mechanisms. The network management module is used to monitor the network status of the local port and the target port for software downloads in real time. The storage inside the local trusted security storage area includes but is not limited to: the software directory within the group, the backup of the software package within the group, the download whitelist of the local terminal, etc.

[0082] See also Fig. 9 , is a schematic diagram of the storage structure of the trusted software management provided in the embodiment of the present application. Fig. 9 It can be seen that the present application adopts the storage method of centralized storage of trusted software libraries and backup within terminal groups to securely store trusted software packages. As shown in the figure, the information of software downloads stored in the trusted software package, and the trusted software package are uniformly managed and configured in the trusted management center to download trusted terminals for secure backup storage in groups. The backed-up software download information includes: the directory within the group (the directory of software packages stored within the group, including the specific terminal locations where they are stored separately), the terminal download whitelist (the list of trusted software packages allowed to be downloaded by the trusted terminal), the trusted policy (the download method allowed for different software packages), etc. The backup stored information is stored in the secure storage area within the group according to the policy and uniformly receives the management of the trusted management center.

[0083] See also Fig.10 , which is a dynamic management structure diagram of storage in a trusted terminal group provided by an embodiment of the present application. As shown in the figure, the storage in the trusted terminal group is uniformly stored and accessed under the unified management and configuration of the trusted management center; the storage space is physically part of the trusted terminal, but its access and control authority is uniformly authorized by the trusted management center, and the trusted terminal not authorized by the trusted management center has no right to write to any storage area in the group; if the trusted management center is not online, only the terminals in the download whitelist are allowed to read the software package according to the policy. The backup storage in the trusted terminal group in this method establishes a distributed backup mechanism under the unified management and configuration of the trusted management center.

[0084] Here, the storage in the trusted terminal group is explained through three aspects: unified policy management based on the trusted management center, balanced allocation of storage software according to the policy, and dynamic and adjustable storage mechanism based on local storage space and storage targets:

[0085] 1. Unified policy management based on a trusted management center

[0086] The software chain supply chain management in this application is based on trusted computing. All trusted software transfer nodes work under the unified management and configuration of the trusted management center. The protection components in trusted computing are the trusted basis and provider of the cryptographic mechanism of this method. The download strategy of the trusted software chain includes:

[0087] 1) All trusted terminal download nodes are trusted nodes; 2) The software configures download strategies (including download methods, installation methods, etc.) based on security and specific usage; 3) The storage space is a secure storage area protected by a trusted mechanism (access rights are restricted, password encryption ensures read and write security, and important files are stored in a trusted root); 4) Trusted terminals can only download software installation packages that have been authorized in the whitelist; 5) The backup storage area is physically in the local storage area, but all access is uniformly managed by the trusted management center, and the local area has no right to access the area without authorization (read and write protection, permission control, access restrictions, etc.); 6) The software download channel is a strong security channel based on trusted connections and other security enhancement measures; 7) The trusted management center periodically monitors the storage status, download process, and installation process of the trusted software package and generates audit information.

[0088] 2. Balance storage software according to strategy

[0089] In this application, the trusted management center evenly distributes the backup storage software according to the download strategy, the product catalog within the trusted terminal group, and the storage space of the trusted terminal.

[0090] 1) The trusted management center collects the size of available storage space of each terminal; 2) The trusted management center forms a directory of software to be downloaded within the group according to the authorized software directory of the trusted terminal; 3) The trusted management center counts the space required for the software directory to be downloaded within the group; 4) If the space required for downloading software within the group is much smaller than the available space within the group (the ratio can be set), all the software to be downloaded within the group can be stored in the terminal group storage area for backup; 5) If the space required for downloading software within the group occupies a large proportion of the available space (the specific ratio is divided according to the actual application), some trusted software packages can be stored according to the importance of the software or the size of the demand (the specific strategy is determined according to actual needs); 6) The trusted management center sets up trusted storage space in each trusted terminal according to the strategy, and ensures that the area is a safe area (password mechanism, permission control, access control mechanism, etc., to ensure that work can only be carried out under the strategy of the trusted management center); 7) The storage space within the group can be evenly distributed to store feasible software packages according to the storage capacity of the storage software, to ensure the storage balance and normal operation of the trusted terminal itself; 8) The trusted management center can take periodic or random methods to update or adjust the storage location of the software stored in the trusted terminal.

[0091] 3. Dynamically adjustable storage mechanism based on local storage space and storage target

[0092] In this application, the trusted management center can dynamically adjust the storage mechanism of the trusted terminal according to the software backup strategy.

[0093] 1) When the trusted management center updates the trusted software backup, it re-evaluates the available secure storage area of ​​the terminal; 2) If the original software storage allocation space cannot meet the new storage requirements, the trusted management center can increase or decrease the local storage area of ​​the trusted terminal node and re-formulate the storage strategy; 3) When the trusted management center adjusts the storage area, the original storage content of the original trusted terminal should be securely backed up under the unified configuration of the center to prevent data loss and damage, and ensure the integrity and security of the original data content of the trusted terminal; 4) After reallocating the storage space, the trusted management center will re-synchronize the backup software in the group to the terminal group for storage according to the new strategy, and update the relevant information; 5) When the storage space of the trusted management center is reallocated, it must not affect the normal operation of the local trusted node terminal, and minimize the impact on the local terminal node (computing efficiency, resource usage, interface access, etc.) to ensure the normal operation of the original work.

[0094] In summary, this application can improve the security of software package storage by synchronizing the software in the trusted software library to the trusted terminal group for backup storage through the trusted management center; and, this application can ensure the balanced storage and normal operation of the trusted terminal itself by evenly distributing the stored software and dynamically adjusting the stored software according to the strategy.

[0095] In another embodiment of the present application, the trusted terminal performs a software download operation according to a trusted policy, including:

[0096] The trusted terminal determines the download method according to the network status of the trusted terminal, the network status of the trusted management center, the network status of the trusted software library and the trusted policy, and downloads the trusted software package from the trusted software library, the trusted terminals in the trusted terminal group to which it belongs, the trusted terminals in other trusted terminal groups and the trusted mobile terminals according to the download method.

[0097] See also Fig.11, which is the overall flow chart of software download provided by the embodiment of the present application. It can be seen that the secure and trusted process of software download is as follows: all software packages that have passed the inspection are stored in the trusted software library, the trusted terminal group backs up and stores some software packages in the trusted software library that need to be synchronized according to the policy (the software packages or some software packages contained in the directory in this group), and the trusted mobile terminal backs up the software packages and directories required by the trusted terminal, the target terminal software download whitelist, the password service and authentication service authorized by the center, etc.; according to the network situation, the principle of trusted terminal software package download is: first choose to download from the trusted software library, then choose to download from the backup in the group, and finally choose to download from the mobile terminal; in principle, the download request of the trusted terminal must be reviewed and approved by the trusted management center before it can be downloaded according to the policy; when the trusted management center is not online, in order to ensure the use demand of the trusted terminal for software download, under the premise of security measures in place, you can apply to download the software package from the trusted software library, the backup storage in the group and the trusted mobile terminal.

[0098] See also Fig.12 , is a schematic diagram of the software download method provided in the embodiment of the present application, such as Fig.12 As shown, in this application, when determining the downloading method of the trusted software package according to the network status of the trusted terminal, the trusted management center, and the trusted software library, the following five downloading methods are included:

[0099] Method 1: If the network status of the trusted terminal is online, the network status of the trusted management center is online, and the network status of the trusted software library is unblocked, the determined download method is: downloading the trusted software package from the trusted software library;

[0100] Method 2: If the network status of the trusted terminal is online, the network status of the trusted management center is online, and the network status of the trusted software library is poor, the determined download method is: downloading the trusted software package from any one of the trusted terminals in the trusted terminal group, the trusted terminals in other trusted terminal groups, the trusted software library, and the trusted mobile terminal;

[0101] Method 3: If the network status of the trusted terminal is online, the network status of the trusted management center is offline, and the network status of the trusted software library is unblocked, the determined download method is: downloading the trusted software package from the trusted software library;

[0102] Method 4: If the network status of the trusted terminal is online, the network status of the trusted management center is offline, and the network status of the trusted software library is poor, the determined download method is: downloading the trusted software package from any one of the trusted terminals in the trusted terminal group, the trusted terminals in other trusted terminal groups, the trusted software library, and the trusted mobile terminal;

[0103] Method 5: If the network status of the trusted terminal is offline, the determined download method is: downloading the trusted software package from the trusted mobile terminal.

[0104] It can be seen that the trusted software download method in this application includes five methods, and the actual use method selects the appropriate working method according to the on-site network conditions and actual scenarios. Among them, methods one to four are when the terminal is online, and method five is when the terminal is offline. The poor network in this method can be defined according to the actual usage situation (including but not limited to bandwidth), such as setting a bandwidth threshold, and a network that is lower than the threshold is poor; a poor network does not mean that the network transmission is completely interrupted, but it means that the transmission bandwidth and quality are poor; when it is offline, it means that the network is completely terminated.

[0105] See also Fig.13 , which is a flow chart of online downloading of the trusted management center provided in the embodiment of the present application, such as Fig.13 As shown in the figure, when the trusted management center is online, the trusted terminal sends a download request. The trusted management center checks the terminal status and whether the request meets the requirements according to the policy. If the request is approved, the path allocated is based on the network situation. See Fig.14 , which is another trusted management center online download flow chart provided in the embodiment of the present application; through Fig.14 It can be seen that method 1 is applicable to all working networks that are unobstructed. The terminal applies for software download requests according to the local whitelist. After the request is approved, it is directly downloaded from the trusted software library. In method 2, the trusted software library network is not good. The terminal applies for software download requests according to the local whitelist. After the request is approved, the trusted terminal can download the software from the local backup library; if the local backup library does not have the software package, it can be downloaded from other storage groups of the software; if the backup does not have the software installation program, it can only continue to download from the trusted software library or use the mobile terminal on-site download method to download and install the software.

[0106] See also Fig.15 , which is a flowchart of the offline download of the trusted management center provided in the embodiment of the present application. It can be seen that method three adopts the method of directly downloading the software installation package from the trusted software library. The terminal applies for the software download request according to the local whitelist. The trusted software library receives the request and verifies it. First, the trusted status of the trusted terminal is checked. The status checking method is: 1) The trusted management center checks the trusted status of the terminal before the network is disconnected (the trusted management center will regularly synchronize the untrusted list to each terminal when it is online); 2) The trusted status uploaded by the trusted terminal that sends the download request. If the status of the trusted terminal is trusted, continue to verify its download permission. The permission verification method is: 1) Check the software download policy to see if it can allow downloading when the trusted management center is not online; 2) Check whether the downloaded software is in the software directory of the trusted software library; 3) Whether the trusted terminal is in the download whitelist of the software. If both the trusted status and permission verification are passed, the trusted software library directly sends the download software package to the target trusted terminal.

[0107] Method 4: Download the software installation package according to the policy in the group and the trusted software library. The terminal applies for a software download request to the target trusted terminal that stores the software package in the group according to the local whitelist. The target trusted terminal receives the request and verifies it. First, check the trusted status of the trusted terminal. The status check method is: 1) The trusted status of the terminal before the trusted management center is disconnected from the network (the trusted management center will regularly synchronize the untrusted list to each terminal when it is online); 2) The trusted status uploaded by the trusted terminal that sends the download request. If the status of the trusted terminal is trusted, continue to verify its download permission. The permission verification method is: 1) Check the software download policy to see if it can allow downloading when the trusted management center is not online; 2) Find whether the download software is in the software directory of the target terminal; 3) Whether the trusted terminal is in the whitelist of the software download. If both the trusted status and permission verification are passed, the target trusted terminal directly sends the download software package to the target trusted terminal. If there is no target download software package in the local trusted software storage backup, you can only continue to download from the trusted software library or use the mobile terminal to download and install the software on the spot.

[0108] In method 5, when the terminal is offline, the software package is downloaded by using the mobile terminal on-site download method. Fig.16 , which is a flowchart of authorized downloading of a mobile terminal provided by an embodiment of the present application. As shown in the figure, in this method, the trusted management center can implement authorization on the mobile terminal to complete the software downloading task when the trusted terminal is offline. The specific method is as follows: a trusted root should be established in the mobile terminal to build a dual system architecture to ensure the security and trustworthiness of the mobile terminal itself; the mobile terminal is connected to the trusted management center for trusted authentication and policy authorization; the trusted management center synchronizes the password authentication resources (certificates, secondary keys, etc.) of the terminal requesting download to the mobile terminal; the directory of the terminal requesting download, the terminal download whitelist and the software package are stored in the secure storage area (protected area) of the mobile terminal.

[0109] See also Fig.17 , which is a mobile terminal download flow chart provided in an embodiment of the present application. As shown in the figure, the mobile terminal goes to the site to download the trusted software package, and its workflow is: physically connect the mobile terminal and the trusted terminal; the mobile terminal and the trusted terminal perform trusted authentication. The specific process is: the two parties exchange certificates authenticated by the trusted management center; the two parties verify each other's trusted status; the trusted terminal is in the download directory authorized by the trusted management center for the mobile terminal; after the authentication is passed, the trusted terminal sends a software download request; the mobile terminal checks and verifies the trusted terminal request according to the policy authorized by the trusted management center; after the verification is passed, the trusted software package is downloaded to the trusted terminal; otherwise, the download is rejected.

[0110] In summary, the present application can determine a suitable download method according to the network status of the trusted terminal, the network status of the trusted management center, the network status of the trusted software library and the trusted policy, thereby downloading a trusted software package from any one of the trusted software library, the trusted terminals within the trusted terminal group to which it belongs, the trusted terminals within other trusted terminal groups, the trusted software library and the trusted mobile terminal, thereby realizing an efficient and secure trusted software package downloading method.

[0111] In another embodiment of the present application, the trusted terminal performs a software installation operation or a software update operation according to a trusted policy, including:

[0112] The trusted terminal obtains the target trusted software package to be installed, and detects the trusted signature, installation file summary value and authentication certificate in the target trusted software package; if all the detections are successful, the software installation operation or software update operation is performed through the trusted policy and software installation file in the target trusted software package, and a trusted report and audit information are generated; the trusted report and audit information are sent to the trusted management center.

[0113] See also Fig.18 , which is a software installation and update process provided in an embodiment of the present application, the secure and trusted process of software installation and update is as follows: a trusted software package is downloaded to a trusted terminal through a secure channel for installation; the software source security is ensured by verifying the signature of the software package; the integrity of the software installation file is verified; the correctness of the digital certification certificate issued by the trusted management center is verified; the software installation file is placed in a temporary secure storage area of ​​the local terminal; the software is installed or updated according to the installation policy; the entire software installation or update process is monitored through a trusted measurement mechanism; the local operation and usage permissions of the software are configured; the software installation or update process information is organized into audit information; and the local trusted report and audit information are reported to the trusted management center.

[0114] See also Fig.19 , which is a schematic diagram of the software return process provided in an embodiment of the present application, the secure and trusted process of software installation and update is as follows: a software return application is initiated at a trusted management center; the trusted management center formulates a return policy for the software according to the content of a software return application; the information of each link of software return is updated and the return policy is executed according to the return policy; the trusted management center, trusted software library, group backup and software directory in the terminal are updated; the return software package is moved to the return software package library and disposed of according to the policy; the return software in the software backup library in the terminal group is simultaneously removed; the return software installed on the terminal is uninstalled according to the policy; the new replacement software is reinstalled and deployed according to the new policy; and the return process is audited.

[0115] In summary, this application builds a trusted dual-system architecture at each node of the trusted software supply chain, unifies the management and configuration lines in the trusted management center, and ensures the security and reliability of the software in each link of the entire life cycle and the circulation process. Among them, a trusted computing environment and a cryptographic mechanism are established in the software development stage and the testing stage to ensure the correctness of the software source; the software that enters the user and passes the test is uniformly authenticated and encrypted by the trusted management center and then stored in the trusted software library; the trusted software package in the trusted software library adopts a distributed storage backup strategy to meet the download requirements of different network states; the trusted terminal downloads the required local software package according to the security policy formulated by the trusted management center; and all working environments in this solution are trusted computing environments, the direct network connection of the nodes is a trusted connection, the circulating data is protected by a cryptographic mechanism, and the software package is assigned a digital certificate for verification in each major circulation link to ensure the security and reliability of each link in the software supply chain.

[0116] See also Fig. 20 , is a schematic diagram of a software management system structure based on a trusted dual-system architecture provided in an embodiment of the present application, and the system includes:

[0117] The software detection terminal 11 is used to detect the input initial software package. If the detection passes, a software package to be stored is generated and sent to the trusted management center 12;

[0118] The trusted management center 12 is used to detect the software package to be stored in the library. If the detection passes, a trusted software package is generated and stored in the trusted software library 13; the trusted management center 12 backs up the trusted software package of the trusted software library 13 and stores it in a trusted terminal group; the trusted terminal group includes at least two trusted terminals 14;

[0119] A trusted software library 13, used for storing trusted software packages;

[0120] The trusted terminal 14 is used to execute any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

[0121] This solution builds a control mechanism for the software supply chain based on a trusted system. After the software is input, it undergoes signature verification, testing, policy configuration, and re-signing before entering the trusted software library. The trusted software library centrally manages all the software of the user to ensure the security of the software at the user's source. Through the policy management of the trusted management center, the software in the trusted software library is synchronized to the trusted terminal group for backup storage. The software package is sent to the target trusted terminal through the download policy and terminal download request. After the terminal verifies the signature of the software package, the software is installed and managed under the protection of the trusted mechanism.

[0122] See also Fig.21 , Fig.21 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application, the electronic device specifically includes:

[0123] The processor 21, the memory 22 and the computer program stored in the memory 22 and executable on the processor 21, the processor 21 executes the steps of the software management method described in any of the above method embodiments through the computer program.

[0124] Among them, the processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 21 can be implemented in at least one hardware form of DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array). The processor 21 may also include a main processor and a coprocessor. The main processor is a processor for processing data in the awake state, also known as a CPU (Central Processing Unit); the coprocessor is a low-power processor for processing data in the standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit), which is responsible for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor 21 may also include an AI (Artificial Intelligence) processor, which is used to process computing operations related to machine learning.

[0125] The memory 22 may include one or more computer-readable storage media, which may be non-transitory. The memory 22 may also include a high-speed random access memory, and a non-volatile memory, such as one or more disk storage devices, flash memory storage devices. In this embodiment, the memory 22 is at least used to store the following computer program 221, wherein, after the computer program is loaded and executed by the processor 21, it can implement the relevant steps in the software management method disclosed in any of the aforementioned embodiments. In addition, the resources stored in the memory 22 may also include an operating system 222 and data 223, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system 222 may include Windows, Unix, Linux, etc.

[0126] In some embodiments, the electronic device may further include a display screen 23 , an input / output interface 24 , a communication interface 25 , a sensor 26 , a power source 27 , and a communication bus 28 .

[0127] certainly, Fig.21 The structure of the electronic device shown does not constitute a limitation on the electronic device in the embodiments of the present application. In actual applications, the electronic device may include Fig.21 More or fewer components than shown, or combinations of certain components.

[0128] In another exemplary embodiment, a computer storage medium is also provided, and when the program instructions are executed by a processor, the steps of the software management method described in any of the above method embodiments are implemented. The storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0129] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments, and this embodiment will not be described in detail here.

[0130] It should be understood that the terms used in the text are only for the purpose of describing specific example embodiments, and are not intended to be limiting. Unless the context clearly indicates otherwise, the singular forms "one", "an" and "said" as used in the text may also be meant to include plural forms. The terms "include", "comprise", "contain", and "have" are inclusive, and therefore specify the existence of stated features, steps, operations, elements and / or parts, but do not exclude the existence or addition of one or more other features, steps, operations, elements, parts, and / or combinations thereof. The method steps, processes, and operations described herein are not interpreted as necessarily requiring them to be performed in the specific order described or illustrated, unless the execution order is clearly indicated. It should also be understood that additional or alternative steps may be used.

[0131] The foregoing is merely a specific embodiment of the present invention, which enables those skilled in the art to understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features claimed herein.

Claims

1. A software management method based on a trusted dual-system architecture, characterized in that: include: The software detection terminal detects the input initial software package. If the detection passes, a software package to be stored is generated and sent to the trusted management center; The trusted management center detects the software package to be stored in the library, and if the detection passes, generates a trusted software package and stores it in the trusted software library; The trusted management center backs up and stores the trusted software packages of the trusted software library in a trusted terminal group; the trusted terminal group includes at least two trusted terminals; The trusted terminal executes any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

2. The software management method according to claim 1, characterized in that: The software detection terminal detects the input initial software package, including: The software detection terminal obtains an input initial software package; the initial software package includes: software installation files, installation configuration policies, initial signatures, installation file summary values, development phase digital certificates, and testing phase digital certificates; The software detection terminal detects the software installation file, initial signature, installation file summary value, development phase digital certificate and testing phase digital certificate in the initial software package; if all the detections are successful, it is determined that the initial software package has passed the detection.

3. The software management method according to claim 1, characterized in that: The trusted management center detects the software package to be stored in the library, and if the detection passes, generates a trusted software package and stores it in the trusted software library, including: The trusted management center obtains the software package to be stored; the software package to be stored includes: software installation files, installation configuration policies, signatures to be stored, and summary values ​​of installation files; The trusted management center detects the signature to be stored and the summary value of the installation file in the software package to be stored; if both are detected successfully, a trusted policy is configured; the trusted policy includes: installation configuration policy, download policy and security protection policy; The trusted management center generates a trusted software package, updates the software catalog and the download whitelist of the trusted terminal according to the trusted software package, and stores the trusted software package, the updated software catalog and the download whitelist of the trusted terminal in the trusted software library; The trusted software package includes: software installation files, trusted policies, trusted signatures, installation file summary values ​​and authentication certificates.

4. The software management method according to claim 1, characterized in that: The trusted management center backs up and stores the trusted software packages of the trusted software library to the trusted terminal group, including: The trusted management center determines the available storage space capacity of the trusted terminal group and the authorized download software directory of the trusted terminal group; The trusted management center determines the required storage space capacity according to the authorized download software directory, and determines the backup method using the available storage space capacity and the required storage space capacity; If the backup method is a full backup method, each trusted software package corresponding to the authorized download software directory will be backed up and stored in the secure storage area of ​​the trusted terminal group; if the backup method is a partial backup method, some trusted software packages corresponding to the authorized download software directory will be backed up and stored in the secure storage area of ​​the trusted terminal group.

5. The software management method according to any one of claims 1 to 4, characterized in that: The trusted terminal performs a software download operation according to a trusted policy, including: The trusted terminal determines a download method according to a network status of the trusted terminal, a network status of a trusted management center, a network status of a trusted software library, and a trusted policy, and downloads a trusted software package from any one of a trusted software library, a trusted terminal in a trusted terminal group to which it belongs, a trusted terminal in other trusted terminal groups, and a trusted mobile terminal according to the download method.

6. The software management method according to claim 5, characterized in that: The trusted terminal determines the downloading method according to the network status of the trusted terminal, the network status of the trusted management center, the network status of the trusted software library and the trusted policy, including: If the network status of the trusted terminal is online, the network status of the trusted management center is online, and the network status of the trusted software library is unblocked, the determined downloading method is: downloading the trusted software package from the trusted software library; If the network status of the trusted terminal is online, the network status of the trusted management center is online, and the network status of the trusted software library is poor, the determined downloading method is: downloading the trusted software package from any one of the trusted terminals in the trusted terminal group, the trusted terminals in other trusted terminal groups, the trusted software library, and the trusted mobile terminal; If the network status of the trusted terminal is online, the network status of the trusted management center is offline, and the network status of the trusted software library is unblocked, the determined downloading method is: downloading the trusted software package from the trusted software library; If the network status of the trusted terminal is online, the network status of the trusted management center is offline, and the network status of the trusted software library is poor, the determined downloading method is: downloading the trusted software package from any one of the trusted terminals in the trusted terminal group, the trusted terminals in other trusted terminal groups, the trusted software library, and the trusted mobile terminal; If the network status of the trusted terminal is offline, the determined downloading method is: downloading the trusted software package from the trusted mobile terminal.

7. The software management method according to claim 5, characterized in that: The trusted terminal performs a software installation operation or a software update operation according to a trusted policy, including: The trusted terminal obtains the target trusted software package to be installed, and detects the trusted signature, installation file digest value and authentication certificate in the target trusted software package; If all the detections are successful, the software installation operation or software update operation is performed through the trusted policy and software installation file in the target trusted software package, and a trusted report and audit information are generated; the trusted report and audit information are sent to the trusted management center.

8. A software management system based on a trusted dual-system architecture, characterized in that: include: The software detection terminal is used to detect the input initial software package. If the test passes, a software package to be stored is generated and sent to the trusted management center; The trusted management center is used to detect the software package to be stored in the library, and if the detection passes, generate a trusted software package and store it in the trusted software library; The trusted management center backs up and stores the trusted software packages of the trusted software library in a trusted terminal group; the trusted terminal group includes at least two trusted terminals; The trusted software library is used to store trusted software packages; The trusted terminal is used to execute any one of software downloading operation, software installation operation, software updating operation, software running operation and software return operation according to the trusted policy.

9. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor executes the steps of the software management method described in any one of claims 1 to 7 of the present application through the computer program.

10. A computer storage medium, characterized in that: The computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the steps of the software management method described in any one of claims 1 to 7 of the present application.

Images