Upgrade package encryption distribution method and system

Abstract

The invention discloses an upgrade package encryption distribution method and system, and the method comprises the steps: an upgrade package production factory generates an upgrade package, then carries out the signature, and carries out the encryption of the upgrade package, and obtains an encrypted upgrade package; then extracting attribute information of the encrypted upgrade package as a password to perform confusion encryption on a secret key and signature information of the encrypted upgrade package to obtain a secret key file; and finally, distributing the encrypted upgrade package and the secret key file through different channels. The to-be-upgraded client obtains the encrypted upgrade package and the secret key file through different channels, and extracts attribute information of the encrypted upgrade package as a password to decrypt the secret key file to obtain a secret key and signature information of the encrypted upgrade package; and verifying the signature information, decrypting the encrypted upgrade patch by using the secret key after verification is passed to obtain a plaintext upgrade patch, and installing the plaintext upgrade patch. According to the invention, the problem that the upgrade patch is possibly tampered, intercepted and monitored in the distribution stage is solved, so that the upgrade patch can be safely and completely distributed to the client.

Description

Technical Field

[0001] The present invention relates to software upgrade technology, and in particular to an upgrade package encryption distribution method and system. Background Art

[0002] With the continuous development of Internet technology, software applications have been widely used in all walks of life. Different software systems have brought great convenience to people's lives, and at the same time promoted the iterative upgrade of production, greatly released productivity, and provided great benefits for social development. With the continuous iterative development of technology, the running system also needs to be updated and evolved, and the upgrade of software and systems is particularly important. As an important material in the upgrade process, the security of the upgrade package during its distribution is very important.

[0003] Usually, software or system upgrades can be divided into online upgrades and offline upgrades. The overall process is as follows: 1. Upgrade package generation: Generate the software package or system package required for the upgrade and provide the original materials for the upgrade.

[0004] 2. Upgrade package distribution: Generally, it is divided into online upgrades issued through the Internet and offline upgrades distributed through offline channels (such as CDs, USB flash drives and other mobile storage media).

[0005] 3. Upgrade package installation: Install the provided upgrade package for customers who need to upgrade to complete the software or system upgrade.

[0006] However, whether it is an online upgrade package sent through the Internet or an offline upgrade package distributed through mobile storage media, it is difficult to ensure its integrity and correctness during the installation phase of the upgrade package. The upgrade package distribution process is also very susceptible to illegal tampering and middleman eavesdropping. Summary of the invention

[0007] The technical problem to be solved by the present invention is: in response to the technical problems existing in the prior art, the present invention provides an upgrade package encryption distribution method and system to solve the problem that the upgrade package may be tampered with, intercepted and monitored during the distribution stage, so that the software or system upgrade package can be safely and completely distributed to the upgraded client.

[0008] In order to solve the above technical problems, the technical solution proposed by the present invention is: An upgrade package encryption distribution method includes the steps of an upgrade package production factory distributing the upgrade package, including: Generate an upgrade package, sign the upgrade package, and encrypt the upgrade package to obtain an encrypted upgrade package; Extract the attribute information of the encrypted upgrade package as the password to encrypt the secret key and signature information of the encrypted upgrade package to obtain the secret key file; Distribute the encrypted upgrade package and key file through different channels.

[0009] Furthermore, the attribute information of the encrypted upgrade package includes a hash value and a file size value of the encrypted upgrade package. When the attribute information of the encrypted upgrade package is extracted as a password to encrypt the symmetric encryption key and the signature information, it includes: The hash value of the encrypted upgrade package is used as symmetric encryption key 1, and the file size of the encrypted upgrade package is used as symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 1 to perform XOR calculation on the encryption upgrade package's key and signature information to obtain the corresponding binary data; Use encryption key 3 as key KEY and symmetric encryption key 2 as initialization vector IV to symmetric encrypt the binary data and obtain the ciphertext data as the key file.

[0010] Furthermore, after the encrypted upgrade package and the key file are distributed through different channels respectively, the client to be upgraded obtains the encrypted upgrade package and decrypts it, including: Obtain the encrypted upgrade package and secret key file through different channels, extract the attribute information of the encrypted upgrade package as the password to decrypt the secret key file to obtain the secret key and signature information of the encrypted upgrade package, verify the signature information and after passing the verification, use the secret key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it.

[0011] Further, extracting the attribute information of the encrypted upgrade package as a password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package specifically includes: Calculate the hash value of the encrypted upgrade package to obtain symmetric encryption key 1, calculate the file size of the encrypted upgrade package to obtain symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 3 as key KEY and symmetric encryption key 2 as initialization vector IV to decrypt the key file content and obtain the plaintext binary data; Perform XOR calculation on the binary data and the symmetric encryption key 1 to obtain the key and signature information of the encrypted upgrade package; Use the secret key of the encrypted upgrade package to decrypt the encrypted upgrade package to obtain the plaintext upgrade package. Further, when signing the upgrade package, specifically, using the private key to encrypt the upgrade package description information of the upgrade package to obtain the signature information; verifying the signature information and after passing the verification, using the secret key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it, specifically includes: Extracting upgrade package description information from the plaintext upgrade package, and using the public key to decrypt the signature information to obtain first upgrade package description information; The extracted upgrade package description information is compared with the first upgrade package description information. If the extracted upgrade package description information is consistent with the first upgrade package description information, the upgrade package is installed; otherwise, the upgrade package is discarded.

[0012] Furthermore, when the upgrade package is encrypted, a one-time key KEY and an initialization vector IV are specifically generated as a secret key for symmetric encryption, and the upgrade package is encrypted according to the secret key.

[0013] Furthermore, when the encrypted upgrade package and the key file are distributed through different channels, including the distribution steps during online upgrade, the following steps are included: The key file is distributed through the channel of the update management platform, and the encrypted upgrade package is distributed through the channel of the data platform. The update management platform is a platform with a higher security level and weaker data throughput capacity, and the data platform is a platform with a lower security level and stronger data throughput capacity.

[0014] Furthermore, when the encrypted upgrade package and the key file are distributed through different channels, including the distribution steps during offline upgrade, the following steps are included: The encrypted upgrade package is distributed through the upgrade package distribution storage medium, and the secret key file is distributed through the secret key distribution storage medium. The upgrade package distribution storage medium is a storage medium with a lower security level and a higher data throughput capacity, and the secret key distribution storage medium is a storage medium with a higher security level and a lower data throughput capacity.

[0015] The present invention also provides an upgrade package encryption distribution system, the upgrade package encryption distribution system is used to execute the steps of the upgrade package encryption distribution method, the upgrade package encryption distribution system comprises: The upgrade package production factory is used to generate the upgrade package, sign the upgrade package, and encrypt the upgrade package to obtain an encrypted upgrade package; extract the attribute information of the encrypted upgrade package as a password to encrypt the secret key and signature information of the encrypted upgrade package to obtain a secret key file; finally, distribute the encrypted upgrade package and the secret key file through different channels respectively; The client is used to obtain the encrypted upgrade package and key file through different channels, extract the attribute information of the encrypted upgrade package as the password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package, verify the signature information and after verification, use the key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it.

[0016] Furthermore, it also includes: An update management platform, used to distribute key files, wherein the update management platform is a platform with a high security level and a low data throughput capacity; The data platform is used to distribute the encrypted upgrade package, and the data platform is a platform with a lower security level and a higher data throughput capacity.

[0017] Compared with the prior art, the advantages of the present invention are: The present invention utilizes the attribute information, which is implicit information of the encrypted upgrade package itself, as the secret key and utilizes a private encryption algorithm to encrypt the secret key of the encrypted upgrade package, thereby achieving double protection of the upgrade package and the secret key without the need for additional information transmission. As long as the privacy of the encryption algorithm is guaranteed, the problem of the protection of the encrypted file being ineffective due to the leakage of the secret key file during online or offline transmission is solved.

[0018] The present invention uses different channels to distribute the encrypted upgrade package and the key file, thereby ensuring data security while taking into account economic benefits and effectively balancing security and cost. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 The figure is a flow chart of a method according to an embodiment of the present invention.

[0020] Figure 2 The figure is a schematic diagram of the detailed process of upgrading and distributing according to an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The present invention is further described below in conjunction with the accompanying drawings and specific preferred embodiments, but the protection scope of the present invention is not limited thereby.

[0022] Embodiment 1 From the perspective of security protection boundary analysis, the upgrade package should be safe when it is generated. The operating environment and operating conditions at this time should meet security standards and not be hijacked. In other words, the upgrade package production process is considered to be a safe and reliable environment, and the factory that produces the upgrade package is a safe environment. Its security should be ensured by means of network isolation, physical isolation, social engineering protection and other means. Here, it is considered that the production factory is an autonomous and controllable safe environment.

[0023] If you want to ensure the security of the upgrade package during the distribution and installation phase, you must first ensure that the upgrade package received by the receiving end, that is, the client, is correct. At the same time, you must also provide the client with a method to verify the source of the package. Upgrade packages from illegal sources cannot be disguised, and the correct upgrade package cannot be tampered with. To this end, the client needs to verify the upgrade package. The PKI system, which is the current mainstream security authentication method, is used as a technical means. The upgrade package is signed with a private key in the production factory, and the public key that can be distributed on the Internet is used in the upgrade client to verify the signature. This technology can ensure the legitimacy of the source of the installation package.

[0024] In the process of upgrading package distribution, different modes of data transmission are required, whether it is network distribution or distribution through mobile transmission media, there is a risk of data hijacking, tampering, forging and stealing secrets of the upgrade package by the middleman. The data signature in the factory is difficult to effectively resist the tampering and forgery of the upgrade package by the middleman. The existing technical solution uses symmetric encryption to encrypt the upgrade package and uses an asymmetric encryption algorithm to distribute symmetric keys, but its key distribution mechanism is highly complex and cannot meet the symmetric key distribution scenario during offline installation. This upgrade method obviously does not meet the requirements of safe, reliable and stable upgrades for software or system upgrades.

[0025] In order to deal with the risk of data leakage, this embodiment adopts an encryption protection strategy for the upgrade package. When the factory produces the upgrade package, a one-to-one corresponding key is generated, and the upgrade package is encrypted. At the same time, the key is encrypted using a private algorithm, where the encryption key comes from the encrypted upgrade package attributes, thereby forming an interdependent decryption chain. While ensuring the security of the private encryption algorithm, the encrypted upgrade package and the encrypted key can be directly distributed, and the private encryption algorithm is used on the client to decrypt, thereby realizing simple and secure upgrade package distribution.

[0026] Based on the above concept, this embodiment proposes an upgrade package encryption distribution method, which uses an asymmetric algorithm to sign the upgrade package, and symmetrically encrypts the generated upgrade package based on a symmetric encryption algorithm. At the same time, the symmetric encryption key and the upgrade package signature information are encrypted using a private encryption algorithm to ensure the security of the upgrade package and the key, so that the software or system upgrade package can be safely and completely distributed to the upgrade client.

[0027] like Figure 1 As shown, the method of this embodiment includes: S1) The upgrade package production factory distributes the upgrade package, including: S101) generating an upgrade package, signing the upgrade package, and encrypting the upgrade package to obtain an encrypted upgrade package; S102) extracting attribute information of the encrypted upgrade package as a password to encrypt the secret key and signature information of the encrypted upgrade package, thereby obtaining a secret key file; S103) Distribute the encrypted upgrade package and the key file through different channels respectively.

[0028] S2) The client to be upgraded obtains the encrypted upgrade package and decrypts it, including: S201) Obtain the encrypted upgrade package and key file through different channels; S202) extracting attribute information of the encrypted upgrade package as a password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package; S203) The signature information is verified and after verification, the encrypted upgrade package is decrypted using a secret key to obtain a plain text upgrade package and install it.

[0029] The following is a detailed description of each step.

[0030] In this embodiment, the upgrade package is signed and encrypted through step S101. When signing the upgrade package, the upgrade package description information of the upgrade package is encrypted using the private key of the upgrade package production factory to obtain the signature information. In the environment where the encrypted package is generated, the factory environment is generally considered to be safe. At this time, the environment is a safe and reliable private environment. When the upgrade package is generated, the private key can be used to sign the upgrade package. The upgrade package description information is a document or metadata used to explain important information such as the content, function, and scope of application of the upgrade package to the user or system. In this embodiment, it includes but is not limited to: version information, installation information, metadata and other information.

[0031] Since the signed upgrade package cannot cope with the risk of leakage during transmission, in order to ensure data security, the upgrade package is further encrypted in step S101. Specifically, after the upgrade package is signed, a one-time key (KEY) and initialization vector (IV) are generated as symmetric encryption keys, and the upgrade package is symmetric encrypted according to the generated one-time key.

[0032] In this embodiment, the key encryption is performed in step S102. The KEY and IV of the symmetrical encryption of the upgrade package are data information with stronger privacy. However, these data are indispensable when the client decrypts the encrypted package, so they must also be distributed to the client. It is obviously inappropriate to distribute them in plain text here. Therefore, in step S102 of this embodiment, the attribute information of the encrypted upgrade package is used as the password to confuse the key and signature information. Specifically, the attribute information of the encrypted upgrade package includes the hash value and file size value of the encrypted upgrade package. When the attribute information of the encrypted upgrade package is extracted as the password to confuse the symmetrically encrypted key and the signature information, it includes: The hash value (MD5) of the encrypted upgrade package is used as symmetric encryption key 1, and the file size of the encrypted upgrade package is used as symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 1 to perform XOR calculation on the encryption upgrade package's key and signature information to obtain the corresponding binary data; Use encryption key 3 as the key (KEY) and symmetric encryption key 2 as the initialization vector (IV) to symmetric encrypt the binary data and obtain the ciphertext data as the key file.

[0033] In the above calculation process, if the length is insufficient, it is extended by adding 0. At this time, if either the encrypted package or the secret key file is tampered with, the upgrade package content cannot be correctly parsed. The key information for secret key decryption comes from the correct encrypted upgrade package. Since the calculation process is a private calculation process and is not open to the public, even if the encrypted upgrade package and the secret key file are illegally obtained at the same time, the private secret key encryption protocol also ensures the security of the data.

[0034] In this embodiment, the encrypted upgrade package and the key file are distributed in step S103. Considering the actual situation, such as Figure 2 As shown, there are two situations: 1. During online upgrading, the key file is distributed through the channel of the update management platform, and the encrypted upgrade package is distributed through the channel of the data platform. The update management platform is a platform with a higher security level and weaker data throughput capacity. It can require the client to perform identity authentication and then use an encrypted channel to transmit the key file containing the key and signature information (such as the signed upgrade package metadata file) and the download address of the encrypted upgrade package file. The data platform is a platform with a lower security level and stronger data throughput capacity. The client can directly download the encrypted ciphertext upgrade package from the platform through the download address obtained from the update management platform.

[0035] 2. During offline upgrade, the encrypted upgrade package is distributed through the upgrade package distribution storage medium, and the secret key file is distributed through the secret key distribution storage medium. The upgrade package distribution storage medium is a storage medium with a lower security level and a higher data throughput capacity, such as an ordinary USB flash drive, a solid-state hard drive or an ordinary optical disk. These media have fast reading and writing speeds and are suitable for fast distribution. The secret key distribution storage medium is a storage medium with a higher security level and a lower data throughput capacity, such as an SD card with write protection function, a MicroSD card, a USB flash drive, an M-Disc optical disk or an LTO tape. These media have high security and tamper-proof capabilities.

[0036] In step S201 of this embodiment, after the client obtains the encrypted upgrade package and the key file through the channels of different platforms in the online upgrade scenario, or different distribution storage media in the offline upgrade scenario, the obtained encrypted upgrade package and the key file are transferred to the specified directory or folder, and then the key file and the encrypted upgrade package are loaded for decryption to ensure the security of the data during the transmission process.

[0037] This embodiment implements decryption after the client obtains the correct encrypted upgrade package and key file through steps S202 and S203. Specifically: In step S202, extracting the attribute information of the encrypted upgrade package as a password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package specifically includes: Calculate the hash value of the encrypted upgrade package to obtain symmetric encryption key 1, calculate the file size of the encrypted upgrade package to obtain symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 3 as key KEY and symmetric encryption key 2 as initialization vector IV to decrypt the key file content and obtain the plaintext binary data; Perform XOR calculation on the binary data and the symmetric encryption key 1 to obtain the key and signature information of the encrypted upgrade package; Use the secret key of the encrypted upgrade package to decrypt the encrypted upgrade package to obtain the plaintext upgrade package. In step S203, the signature information is verified and after verification, the encrypted upgrade package is decrypted using the secret key to obtain the plaintext upgrade package and then installed, specifically including: Extracting upgrade package description information from the plaintext upgrade package, and using the public key to decrypt the signature information to obtain first upgrade package description information; The extracted upgrade package description information is compared with the first upgrade package description information. If the extracted upgrade package description information is consistent with the first upgrade package description information, the upgrade package is installed; otherwise, the upgrade package is discarded.

[0038] Embodiment 2 This embodiment proposes an upgrade package encryption distribution system to execute the steps of the upgrade package encryption distribution method of embodiment 1, and the upgrade package encryption distribution system includes: The upgrade package production factory is used to generate the upgrade package, sign the upgrade package, and encrypt the upgrade package to obtain an encrypted upgrade package; extract the attribute information of the encrypted upgrade package as a password to encrypt the secret key and signature information of the encrypted upgrade package to obtain a secret key file; finally, distribute the encrypted upgrade package and the secret key file through different channels respectively; The client is used to obtain the encrypted upgrade package and the secret key file through different channels, extract the attribute information of the encrypted upgrade package as the password to decrypt the secret key file to obtain the secret key and signature information of the encrypted upgrade package, verify the signature information and after verification, use the secret key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it; An update management platform, used to distribute key files, wherein the update management platform is a platform with a high security level and a low data throughput capacity; The data platform is used to distribute the encrypted upgrade package, and the data platform is a platform with a lower security level and a higher data throughput capacity.

[0039] In actual business, the upgraded management platform as a management center is usually deployed on a platform with a higher security level and provides a more complex authentication mechanism. In order to control costs, its throughput is generally small. However, the data platform as a data center can often carry a larger throughput. Therefore, the dual-channel delivery method is adopted in this embodiment to effectively balance security and cost.

[0040] In summary, the present invention proposes an upgrade package encryption distribution method, and designs a corresponding upgrade package encryption distribution system. The present invention uses the implicit information of the upgrade package as the secret key, and encrypts the secret key file of the encrypted upgrade package in combination with a private encryption algorithm. No additional information needs to be transmitted. As long as the privacy of the encryption algorithm is guaranteed, the double protection of the upgrade package and the secret key can be achieved, which well solves the problem of the failure of encrypted file protection caused by the leakage of the secret key file. The present invention uses the idea of ​​multi-channel transmission to transmit a small amount of secret keys and description information in a highly secure channel. The massive upgrade data transmission channel adopts a more economical open environment, which ensures security while taking into account economic benefits. The present invention solves the following key problems: 1. Source authentication: Sign the upgrade package and use the signature verification mechanism of the PKI system to ensure the reliability of the package source. That is, sign the upgrade package with a private key and use the public key on the client to verify the upgrade package to ensure the legitimacy of the package source.

[0041] 2. Prevent tampering: The signed installation package indicates that the message has not been tampered with during transmission.

[0042] 3. Anti-leakage: Symmetric encryption is used for the upgrade package to prevent leakage caused by middlemen eavesdropping during the transmission process.

[0043] The above is only a preferred embodiment of the present invention, and does not limit the present invention in any form. Although the present invention has been disclosed as a preferred embodiment, it is not intended to limit the present invention. Therefore, any simple modification, equivalent change and modification made to the above embodiment according to the technical essence of the present invention without departing from the content of the technical solution of the present invention shall fall within the scope of protection of the technical solution of the present invention.

Claims

1. A method for encrypting and distributing an upgrade package, characterized in that: The steps for the upgrade package production factory to distribute the upgrade package include: Generate an upgrade package, sign the upgrade package, and encrypt the upgrade package to obtain an encrypted upgrade package; Extracting the attribute information of the encrypted upgrade package as a password to encrypt the key and signature information of the encrypted upgrade package, and obtaining a key file. The attribute information of the encrypted upgrade package includes a hash value and a file size value of the encrypted upgrade package. Extracting the attribute information of the encrypted upgrade package as a password to encrypt the key and signature information of the encrypted upgrade package includes: The hash value of the encrypted upgrade package is used as symmetric encryption key 1, and the file size of the encrypted upgrade package is used as symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 1 to perform XOR calculation on the encryption upgrade package's key and signature information to obtain the corresponding binary data; Use encryption key 3 as key KEY and symmetric encryption key 2 as initialization vector IV to symmetric encrypt the binary data and obtain the ciphertext data as the key file; Distribute the encrypted upgrade package and key file through different channels.

2. The upgrade package encryption distribution method according to claim 1, characterized in that: After the encrypted upgrade package and the key file are distributed through different channels, the client to be upgraded obtains the encrypted upgrade package and decrypts it, including: Obtain the encrypted upgrade package and secret key file through different channels, extract the attribute information of the encrypted upgrade package as the password to decrypt the secret key file to obtain the secret key and signature information of the encrypted upgrade package, verify the signature information and after passing the verification, use the secret key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it.

3. The upgrade package encryption distribution method according to claim 2, characterized in that: When extracting the attribute information of the encrypted upgrade package as the password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package, it specifically includes: Calculate the hash value of the encrypted upgrade package to obtain symmetric encryption key 1, calculate the file size of the encrypted upgrade package to obtain symmetric encryption key 2; XOR the symmetric encryption key 1 and the symmetric encryption key 2 to obtain the encryption key 3; Use encryption key 3 as key KEY and symmetric encryption key 2 as initialization vector IV to decrypt the key file content and obtain the plaintext binary data; Perform XOR calculation on the binary data and the symmetric encryption key 1 to obtain the key and signature information of the encrypted upgrade package; Use the secret key of the encrypted upgrade package to decrypt the encrypted upgrade package to obtain the plaintext upgrade package.

4. The upgrade package encryption distribution method according to claim 3, characterized in that: When signing the upgrade package, specifically, the upgrade package description information of the upgrade package is encrypted using the private key to obtain the signature information; after verifying the signature information and passing the verification, the encrypted upgrade package is decrypted using the secret key to obtain the plaintext upgrade package and install it, specifically including: Extracting upgrade package description information from the plaintext upgrade package, and using the public key to decrypt the signature information to obtain first upgrade package description information; The extracted upgrade package description information is compared with the first upgrade package description information. If the extracted upgrade package description information is consistent with the first upgrade package description information, the upgrade package is installed; otherwise, the upgrade package is discarded.

5. The upgrade package encryption distribution method according to claim 1, characterized in that: When the upgrade package is encrypted, a one-time key KEY and an initialization vector IV are specifically generated as a secret key for symmetric encryption, and the upgrade package is encrypted according to the secret key.

6. The upgrade package encryption distribution method according to claim 1, characterized in that: When distributing the encrypted upgrade package and key file through different channels, including the distribution steps during online upgrade, include: The key file is distributed through the channel of the update management platform, and the encrypted upgrade package is distributed through the channel of the data platform. The update management platform is a platform with a higher security level and weaker data throughput capacity, and the data platform is a platform with a lower security level and stronger data throughput capacity.

7. The upgrade package encryption distribution method according to claim 1, characterized in that: When distributing the encrypted upgrade package and key file through different channels, including the distribution steps for offline upgrades, include: The encrypted upgrade package is distributed through the upgrade package distribution storage medium, and the secret key file is distributed through the secret key distribution storage medium. The upgrade package distribution storage medium is a storage medium with a lower security level and a higher data throughput capacity, and the secret key distribution storage medium is a storage medium with a higher security level and a lower data throughput capacity.

8. An upgrade package encryption distribution system, characterized in that: The upgrade package encryption distribution system is used to execute the steps of the upgrade package encryption distribution method according to any one of claims 1 to 7, and the upgrade package encryption distribution system includes: The upgrade package production factory is used to generate the upgrade package, sign the upgrade package, and encrypt the upgrade package to obtain an encrypted upgrade package; extract the attribute information of the encrypted upgrade package as a password to encrypt the secret key and signature information of the encrypted upgrade package to obtain a secret key file; finally, distribute the encrypted upgrade package and the secret key file through different channels respectively; The client is used to obtain the encrypted upgrade package and key file through different channels, extract the attribute information of the encrypted upgrade package as the password to decrypt the key file to obtain the key and signature information of the encrypted upgrade package, verify the signature information and after verification, use the key to decrypt the encrypted upgrade package to obtain the plaintext upgrade package and install it.

9. The upgrade package encryption distribution system according to claim 8, characterized in that: Also includes: An update management platform, used to distribute key files, wherein the update management platform is a platform with a high security level and a low data throughput capacity; The data platform is used to distribute the encrypted upgrade package, and the data platform is a platform with a lower security level and a higher data throughput capacity.

Images