Device-level firmware security updating method and system based on hardware features and cryptography

Abstract

The invention belongs to the technical field of equipment firmware security, and particularly relates to an equipment-level firmware security updating method and system based on hardware features and cryptography, a unique code and an authorization file are obtained, the authorization file is installed and verified, and when the authorization file passes verification, the authorization file is installed successfully; the method comprises the following steps: generating a firmware file, signing the firmware file to generate a signature file, packaging the compiled and signed firmware file and the signature file into an upgrade file, releasing the upgrade file to a specified open network, obtaining the firmware file from the open network, uploading the obtained firmware file to target equipment, verifying the signature file, and sending the upgrade file to the target equipment when the verification is passed. And after the firmware is successfully upgraded, the integrity protection, source reliability verification and anti-copy functions of the firmware are realized through binding of a multilayer verification mechanism and the unique identifier of the equipment. Meanwhile, through fine authorization, characteristic level customization is achieved, wider application requirements are met, and cost reduction and efficiency improvement can be achieved.

Images