Safety verification method and system for incremental updating of game patch

Abstract

The invention provides a security verification method and system for incremental updating of a game patch, and the method comprises the steps: generating an electromagnetic radiation characteristic spectrum according to the operation of starting the incremental updating of the game patch by a game client; generating a hardware fingerprint hash abstract according to hardware identification information of the terminal equipment, so as to bind the hardware fingerprint hash abstract with the electromagnetic radiation characteristic spectrum, and generating a composite key; performing chaotic parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update packet to be transmitted; generating a verification code of each encrypted data segment based on a chaotic encryption strategy; synchronously monitoring the network type of the terminal equipment in the segmented encryption process, and updating a chaotic encryption strategy so as to perform segmented encryption processing again to generate a target verification code, thereby realizing security verification in a network switching scene; according to the method and the device, multi-dimensional security verification of tampering prevention and replay attack prevention of incremental updating in a cross-network environment is realized.

Description

Technical Field

[0001] The present application relates to the technical field of software update security verification, and in particular to a security verification method and system for incremental updates of game patches. Background Art

[0002] With the rapid development of mobile gaming, game developers need to frequently release patches to fix vulnerabilities, optimize the user experience, or add new features. However, in mobile scenarios where multiple network environments, such as 4G, 5G, and WiFi, are used, the incremental update process for game patches faces security threats such as data hijacking and tampering by middlemen. In particular, when switching between different network types, the instability of transmission links further complicates data integrity and authentication.

[0003] Current research has proposed a method for generating encryption keys based on the unique hardware identifier of the terminal device, which is used for end-to-end encryption of incremental update packages. This method extracts the physical characteristics of key components such as the device's motherboard, central processing unit, and memory to generate a unique hardware fingerprint, which is used as an encryption seed to encrypt and verify the integrity of the patch data. However, this existing solution has certain limitations. For example, relying solely on static hardware fingerprints to generate fixed encryption parameters makes it difficult to adapt to dynamically changing transmission paths and channel characteristics, resulting in reduced security strength. If the hardware fingerprint is illegally extracted and simulated, the entire encryption system will face the risk of failure, and it will not provide true dynamic protection and real-time adaptability. Summary of the Invention

[0004] This application provides a security verification method and system for incremental updates of game patches, which are used to solve the problems in the existing technology of relying on static hardware fingerprints to generate fixed encryption parameters, resulting in insufficient security strength; and the inability to provide true dynamic protection and real-time adaptability when hardware fingerprints are illegally extracted and simulated.

[0005] In a first aspect, the present application provides a method for securely verifying incremental updates of game patches, including: According to the operation of the game client initiating the incremental update of the game patch, the incremental update package to be transmitted is obtained, and the electromagnetic signal generated when the terminal device runs the operation of the game client initiating the incremental update of the game patch is synchronously collected to generate an electromagnetic radiation characteristic spectrum; Generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, and bind the hardware fingerprint hash digest to the electromagnetic radiation characteristic spectrum to generate a composite key; Performing chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted; Performing segmented encryption processing on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and generating a verification code for each encrypted data segment based on the composite key; During the segmented encryption process, the network type of the terminal device is synchronously monitored. When it is detected that the network type switches between the mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate the target verification code, thereby realizing security verification in the network switching scenario.

[0006] Optionally, generating a hardware fingerprint hash digest according to the hardware identification information of the terminal device, and binding the hardware fingerprint hash digest with the electromagnetic radiation characteristic spectrum to generate a composite key includes: Extracting a set of physical hardware feature parameters from the hardware identification information of the terminal device, wherein the set of physical hardware feature parameters includes a storage device identification; Converting each physical hardware characteristic parameter in the physical hardware characteristic parameter set into a bit sequence, performing segmented reassembly processing on the bit sequence to obtain an intermediate bit sequence; Performing a cross-iteration operation on the intermediate bit sequence to generate a hardware fingerprint hash summary, wherein the cross-iteration operation process includes exchanging bit values ​​of adjacent bit segments and performing a logical exclusive-OR operation across bit segments; converting the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block; A dynamic weight parameter is calculated according to the change value of the signal strength of the electromagnetic radiation characteristic spectrum within a preset time window. Based on the dynamic weight parameter, the bit sequence in the initial binding data block is shifted and replaced to obtain an optimized bit sequence, so as to generate a composite key based on the optimized bit sequence.

[0007] Optionally, converting the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block includes: Collecting signal strength values ​​of a preset frequency band in the electromagnetic radiation characteristic spectrum to generate a signal strength value sequence, wherein the size of the collection window is adjusted according to the bit entropy value of the hardware fingerprint hash summary; performing alternating interpolation processing on the signal strength value sequence and the bit sequence according to a preset interpolation rule to generate an extended sequence; Performing bit width alignment processing on the signal strength values ​​in the extended sequence to generate a bit width normalized sequence; determining a block dimension according to a storage device identifier in the physical hardware characteristic parameter set, so as to divide the bit width normalized sequence into a plurality of data blocks according to the block dimension; A block reorganization operation is performed on the data blocks to generate an initial binding data block.

[0008] Optionally, performing a chaotic parameter initialization process based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted includes: Separating a first parameter sequence corresponding to the electromagnetic characteristic component and a second parameter sequence corresponding to the hardware hash component from the composite key; According to a preset alternating arrangement rule, merging the first parameter sequence and the second parameter sequence into an initial parameter sequence; performing bit extension and superposition operations on the electromagnetic characteristic elements and adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence; Extracting chaotic mapping input parameters from the extended parameter sequence to generate a chaotic parameter sequence, wherein the chaotic mapping input parameters include a starting value and an iteration step size; Dividing the chaotic parameter sequence into a plurality of sub-parameter groups corresponding to the data segments of the incremental update packet to be transmitted; A binding relationship between the data segment of the incremental update package to be transmitted and the corresponding sub-parameter group is established to generate a chaotic encryption strategy.

[0009] Optionally, performing bit extension and superposition operations on the electromagnetic characteristic elements and adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence includes: performing bit expansion processing on the electromagnetic characteristic elements in the initial parameter sequence to obtain an extended electromagnetic characteristic unit; performing grouping and swapping of hardware hash bit segments adjacent to the electromagnetic characteristic elements to obtain swapped bit segments, and performing a cyclic right shift operation on the swapped bit segments to generate a recombined hash unit; According to a preset superposition rule, the extended electromagnetic feature unit and the recombined hash unit are combined into an extended unit segment; The target sequence length is determined according to the number of data segments of the incremental update packet to be transmitted, so as to perform connection and length adaptation operations on the extension unit segments to generate an extension parameter sequence.

[0010] Optionally, segmented encryption processing is performed on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and a verification code is generated for each encrypted data segment based on the composite key, including: Extracting a sub-parameter group and a bit sequence control vector bound to a data segment of the incremental update package to be transmitted from the chaotic encryption strategy, and performing bit sequence rearrangement on a byte sequence of the data segment based on the bit sequence control vector to generate a rearranged bit sequence; performing a mask superposition operation on the rearranged bit sequence based on the mask parameters in the sub-parameter group to generate a masked data block; According to a preset padding rule, the masked data block is extended to a target length to generate a padded data block; intercepting a check bit segment according to the hardware hash component of the composite key, and injecting the check bit segment into a designated position of the padded data block through interpolation to generate an encrypted data segment; Extracting a check bit segment from the encrypted data segment, combining it with the electromagnetic characteristic component of the composite key, performing an alternating bit splicing operation, and generating a verification code input sequence; Compression processing is performed on the verification code input sequence to generate a verification code for each encrypted data segment.

[0011] Optionally, during the segmented encryption process, the network type of the terminal device is synchronously monitored. When it is detected that the network type switches between a mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby achieving security verification in a network switching scenario, including: Polling the network interface status of the terminal device during the segment encryption process to monitor the network interface type of the terminal device; When detecting that the network interface type is switched from a mobile network to WiFi or from WiFi to a mobile network, determining electromagnetic signal acquisition parameters based on the switched network interface type, and generating an updated electromagnetic radiation signature spectrum and an updated hardware fingerprint hash digest based on the electromagnetic signal acquisition parameters; Rebinding the updated electromagnetic radiation signature spectrum with the updated hardware fingerprint hash summary according to a bit weight distribution rule to generate an updated chaotic encryption strategy; Identify the unfinished transmission data segments caused by the switching of network interface types, use the updated chaotic encryption strategy to re-execute segmented encryption processing on the unfinished transmission data segments, generate target verification codes, and realize security verification in the network switching scenario.

[0012] In a second aspect, the present application provides a security verification system for incremental updates of game patches, including: An acquisition module is used to acquire the incremental update package to be transmitted based on the operation of initiating the incremental update of the game patch by the game client, and synchronously collect the electromagnetic signals generated when the terminal device runs the operation of initiating the incremental update of the game patch by the game client to generate an electromagnetic radiation characteristic spectrum; a binding module, configured to generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, so as to bind the hardware fingerprint hash digest to the electromagnetic radiation characteristic spectrum to generate a composite key; A processing module, configured to perform chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted; An encryption module, configured to perform segmented encryption processing on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain a plurality of encrypted data segments, and generate a verification code for each encrypted data segment based on the composite key; The update module is used to synchronously monitor the network type of the terminal device during the segmented encryption process. When it is detected that the network type switches between the mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform the segmented encryption process to generate the target verification code, thereby realizing security verification in the network switching scenario.

[0013] In a third aspect, an embodiment of the present application provides a computing device comprising a processing component and a storage component; the storage component stores one or more computer instructions; the one or more computer instructions are used to be called and executed by the processing component to implement a security verification method for incremental updates of game patches as described in the first aspect above.

[0014] In a fourth aspect, an embodiment of the present application provides a computer storage medium storing a computer program. When the computer program is executed by a computer, it implements a security verification method for incremental updates of game patches as described in the first aspect.

[0015] In the present application, according to the operation of starting the incremental update of the game patch by the game client, the incremental update package to be transmitted is obtained, and the electromagnetic signal generated when the terminal device runs the game client to start the incremental update of the game patch is synchronously collected to generate an electromagnetic radiation characteristic spectrum; according to the hardware identification information of the terminal device, a hardware fingerprint hash summary is generated to bind the hardware fingerprint hash summary and the electromagnetic radiation characteristic spectrum to generate a composite key; based on the electromagnetic characteristic component and the hardware hash component of the composite key, chaotic parameter initialization processing is performed to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted; based on the chaotic encryption strategy, the data segment of the incremental update package to be transmitted is segmented and encrypted to obtain multiple encrypted data segments, and based on the composite key, a verification code is generated for each encrypted data segment; during the segmented encryption process, the network type of the terminal device is synchronously monitored. When it is detected that the network type switches between a mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby realizing security verification in a network switching scenario. The technical solution provided by this application realizes real-time binding of physical environment characteristics and update operations by synchronously collecting electromagnetic signals of terminal devices during operation and generating characteristic spectra, thus solving the security risks of disconnection between software behavior and hardware environment in traditional solutions and providing a physical layer basis for dynamic security verification; dynamically binding hardware fingerprint hash with electromagnetic characteristic spectrum to generate a composite key with both device uniqueness and environmental adaptability, breaking through the defect that static hardware binding is easy to be cloned and blocking the replay attack path from the root; generating chaotic encryption strategy based on the dual characteristic components of the composite key, so that the encryption rules evolve dynamically with the physical state of the device, solving the verification failure problem of fixed encryption algorithm caused by changes in network environment; achieving end-to-end integrity protection of transmitted data through encryption at data segment granularity and verification code generation driven by composite keys, avoiding the local tampering detection blind spots in traditional batch encryption; updating encryption strategy and regenerating verification code in real time during network switching, eliminating security gaps in cross-network transmission and overcoming the risk of data exposure caused by switching delays in existing solutions. Among them, physical characteristic parameters are extracted from the hardware identification of the terminal device and converted into a bit sequence, and a collision-resistant hardware fingerprint hash is generated through segmented reorganization and cross-iteration operation; the preset frequency band electromagnetic signal strength sequence is interpolated and bound with the hash bit sequence according to the dynamic weight rule, and an environment-responsive composite key is generated through a displacement permutation operation.

[0016] These and other aspects of the present application will become more readily apparent from the description of the following embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0018] Figure 1 A flowchart of a method for security verification of incremental updates of game patches provided by the present application is shown; Figure 2 A schematic diagram showing the structure of a security verification system for incremental updates of game patches provided by the present application is shown; Figure 3 A schematic structural diagram of a computing device provided by the present application is shown. DETAILED DESCRIPTION

[0019] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0020] In some of the processes described in the specification and claims of this application and the above-mentioned figures, multiple operations that appear in a specific order are included, but it should be clearly understood that these operations may not be executed in the order in which they appear in this document or may be executed in parallel. The serial numbers of the operations, such as 101, 102, etc., are only used to distinguish between different operations, and the serial numbers themselves do not represent any order of execution. In addition, these processes may include more or fewer operations, and these operations may be executed in sequence or in parallel. It should be noted that the descriptions of "first", "second", etc. in this document are used to distinguish different messages, devices, modules, etc., and do not represent a sequential order, nor do they limit "first" and "second" to being different types.

[0021] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0022] In response to the security threats faced by mobile games when performing incremental patch updates in a mixed network environment of 4G, 5G, and WiFi, existing technologies mainly rely on static hardware fingerprints to generate encryption keys, which makes it difficult to cope with dynamic attack methods in cross-network switching scenarios. Since fixed encryption parameters are easily monitored and replayed, there is a risk that the identity authentication mechanism will be bypassed, and continuous security protection cannot be achieved. To solve the above problems, this application performs security verification by integrating the physical characteristics of terminal devices with dynamic encryption mechanisms to ensure that high-intensity data integrity protection and identity binding capabilities can be maintained even when the network status frequently changes, thereby effectively improving the security and robustness of game clients performing patch updates in complex network environments.

[0023] Figure 1 A flowchart of a method for security verification of incremental updates of game patches provided by the present application is shown. Figure 1 As shown, the method includes: Step 101: According to the operation of starting the incremental update of the game patch by the game client, the incremental update package to be transmitted is obtained, and the electromagnetic signal generated when the terminal device runs the game client to start the incremental update of the game patch is synchronously collected to generate an electromagnetic radiation characteristic spectrum.

[0024] In this step, the game client refers to the game application software entity installed on the terminal device, which is responsible for initiating patch update operations; the incremental update package refers to a compressed file containing game version difference data; the terminal device refers to the physical hardware device that runs the game client, including mobile terminals such as mobile phones and tablets; the electromagnetic signal refers to the electromagnetic radiation analog signal generated by the central processing unit or image processor when the terminal device runs the game, with a frequency range of 1MHz-2.4GHz; the electromagnetic radiation characteristic spectrum refers to the time-frequency matrix of the electromagnetic signal after sampling and quantization by the analog-to-digital converter, which contains timestamp-intensity value pairs.

[0025] In an embodiment of the present application, according to the operation instruction of the game client to start the incremental update of the game patch, the incremental update package to be transmitted is obtained; at the same time, the original electromagnetic signal generated when the game client is running is collected by the electromagnetic sensor built into the terminal device, and the original electromagnetic signal is subjected to frequency band filtering, analog-to-digital conversion and time window integration processing to generate an electromagnetic radiation characteristic spectrum containing the time-frequency characteristics of the signal strength.

[0026] Step 102: Generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, bind the hardware fingerprint hash digest to the electromagnetic radiation characteristic spectrum, and generate a composite key.

[0027] In this step, the hardware identification information refers to the unique physical identification set of the terminal device, including the processor serial number, storage device ID, and media access control address; the hardware fingerprint hash summary refers to the 128-bit fixed-length summary of the hardware identification information generated by the 256-bit secure hash algorithm; the composite key refers to the 256-bit dynamic encryption key that combines electromagnetic characteristics and hardware hash, and is valid for a single update session.

[0028] In an embodiment of the present application, physical characteristic values ​​are extracted from the hardware identification information of the terminal device, including the processor serial number and the storage device ID; a 128-bit hardware fingerprint hash summary is generated through a 256-bit secure hash algorithm; the signal intensity sequence in the electromagnetic radiation characteristic spectrum and the hardware fingerprint hash summary bit sequence are fused according to the parity bit alternating interpolation rule, and then a 256-bit composite key is generated through dynamic weight obfuscation.

[0029] Step 103: Performing chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted.

[0030] In this step, the chaotic encryption strategy refers to a set of encryption rules including elements such as a bit order control vector and a mask parameter. In an embodiment of the present application, the electromagnetic characteristic component and the hardware hash component of the composite key are separated. Bit expansion [such as 16 bits, 32 bits] is performed on the electromagnetic characteristic component, and the chaotic parameter initialization processing is performed on the hardware hash component. The expanded two components are superimposed in proportion to generate a chaotic parameter sequence. The system is divided into several sub-parameter groups according to the size of the incremental update package, and a binding relationship with the data segment is established to form a chaotic encryption strategy including a bit order control vector.

[0031] Step 104: Based on the chaotic encryption strategy, the data segments of the incremental update package to be transmitted are encrypted in segments to obtain multiple encrypted data segments, and based on the composite key, a verification code is generated for each encrypted data segment.

[0032] In this step, the data segment refers to the unit to be processed after the incremental update package is divided into 128KB blocks; the encrypted data segment refers to the data segment after bit rearrangement and masking, with an 8-bit check code attached to the end; the verification code refers to the check value of the cyclic redundancy check generated based on the last 8 bits of the encrypted data segment and the first 8 bits of the electromagnetic feature.

[0033] In an embodiment of the present application, segmentation and encryption operations are performed on the encrypted data segment based on the sub-parameter group in the chaotic encryption strategy; an 8-bit check code is intercepted from the composite key and injected into the tail of the data segment to generate an encrypted data segment; the last 8 bits of the encrypted data segment are extracted and XORed with the first 8 bits of the electromagnetic characteristic component, and a verification code is generated after cyclic redundancy check compression.

[0034] Step 105: Synchronously monitor the network type of the terminal device during the segmented encryption process. When it is detected that the network type switches between a mobile network and WiFi, update the chaotic encryption strategy according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby achieving security verification in the network switching scenario.

[0035] In this step, the target verification code refers to the verification code regenerated after the network is switched, which is mutually exclusive with the verification code before the switch. In an embodiment of the present application, the network interface status is polled in real time during the encryption process. When it is detected that the network type is switched from 4G to WiFi, the electromagnetic collection frequency band is adjusted according to the new interface type. The chaotic encryption strategy is regenerated based on the new electromagnetic characteristic spectrum and hardware hash. The data segment that has not been transmitted is re-encrypted and the target verification code is generated to achieve security verification in the network switching scenario.

[0036] The embodiment of the present application generates a dynamic composite key by binding electromagnetic features to hardware hash, thereby solving the problem that static keys are easily cracked; utilizes chaotic parameter sequences to achieve precise matching of encryption strategies and data segments to prevent replay attacks; and completes key regeneration in a very short time during network switching to ensure continuous verification of cross-network transmission.

[0037] For example, when the user clicks the update button, the client obtains a 2.3MB incremental package and synchronously collects the electromagnetic signal of the mobile phone's central processor in the 1.8GHz frequency band to generate a characteristic spectrum containing 1500 sampling points; reads the serial number and storage ID of the mobile phone processor, generates a hash summary, and then binds it with the electromagnetic characteristic spectrum according to the parity rule to output a composite key; divides the composite key into electromagnetic / hardware components, generates a chaotic parameter sequence through bit expansion and superposition, and divides it into 18 sub-parameter groups according to the number of data segments; performs bit rearrangement on the first 128KB data segment, injects a check code after mask superposition, generates an encrypted data segment and calculates the verification code; during the transmission process, if it detects that 4G is switching to WiFi, it immediately adjusts the electromagnetic collection to the 5GHz frequency band, regenerates the key and strategy, and re-encrypts the remaining data segments for transmission.

[0038] This application provides a specific embodiment, step 102, generating a hardware fingerprint hash digest based on the hardware identification information of the terminal device, binding the hardware fingerprint hash digest with the electromagnetic radiation characteristic spectrum, and generating a composite key, specifically including the following steps: Step 201: extracting a set of physical hardware feature parameters from the hardware identification information of the terminal device, wherein the set of physical hardware feature parameters includes a storage device identification.

[0039] In this step, the physical hardware feature parameter set refers to a unique physical identification group extracted from the terminal device firmware, including unmodifiable parameters such as storage device identification and processor serial number; the storage device identification refers to the unique code of the storage medium, including the manufacturer ID and device serial number; in an embodiment of the present application, the hardware identification information is obtained by calling the system application interface of the terminal device, and the physical hardware feature parameter set is extracted from it; the set includes the storage device identification, processor serial number, and baseband chip version number; each parameter is converted into a binary string and merged into the original bit sequence.

[0040] Step 202: convert each physical hardware characteristic parameter in the physical hardware characteristic parameter set into a bit sequence, perform segmented reassembly processing on the bit sequence, and obtain an intermediate bit sequence.

[0041] In this step, the bit sequence refers to the continuous bit stream after the hardware parameters are converted into binary, with a length range of 256-1024 bits; the intermediate bit sequence refers to the transitional bit sequence after segmented reorganization processing, which has the characteristics of bit reversal and parity segment swapping; in the embodiment of the present application, segmented reorganization processing is performed on the original bit sequence: first, it is divided into multiple bit segments according to the length of 64 bits, and a bit reversal operation is performed on each bit segment [such as 1011, 1101]; then the parity number bit segments are swapped (such as the 1st segment is swapped with the 2nd segment, and the 3rd segment is swapped with the 4th segment); finally, all the bit segments are connected to generate the intermediate bit sequence.

[0042] Step 203: performing a cross-iteration operation on the intermediate bit sequence to generate a hardware fingerprint hash summary. The cross-iteration operation process includes exchanging bit values ​​of adjacent bit segments and performing a logical exclusive OR operation across bit segments.

[0043] In an embodiment of the present application, a cross-iteration operation is performed on the intermediate bit sequence: the sequence is grouped into 32 bits, and a bit value swap operation is performed on adjacent groups, such as swapping bits 16-32 of the i-th group with bits 0-16 of the i+1-th group; then a cross-segment XOR operation is performed on non-adjacent groups, such as bit-by-bit XOR of the j-th group with the j+2-th group; after three rounds of iteration, a 128-bit hardware fingerprint hash summary is output.

[0044] Step 204: converting the signal strength of the preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block.

[0045] In this step, the preset frequency band refers to the target frequency range for electromagnetic signal acquisition (such as 2.4GHz±50MHz), which matches the harmonic characteristics of the central processor main frequency; the signal strength refers to the field strength amplitude detected by the electromagnetic sensor in the unit time window, in units of dBμV / m; the numerical sequence refers to the discrete digital sequence after the signal strength is quantized by the analog-to-digital converter, with a sampling accuracy of 12 bits; the initial binding data block refers to the intermediate data block generated by the first fusion of the hardware fingerprint and the electromagnetic characteristics; in this embodiment of the application, the signal strength value in the electromagnetic radiation characteristic spectrum is extracted and sampled to generate a numerical sequence; the sequence and the hardware fingerprint hash summary bit sequence are alternately interpolated according to the rule of a one-digit numerical sequence with a two-digit sequence, such as inserting the numerical sequence element A between the bit sequences B and C to form [A, B, C]; repeat the operation until the numerical sequence is exhausted to generate the initial binding data block.

[0046] Step 205: Calculate a dynamic weight parameter based on the change in signal strength of the electromagnetic radiation characteristic spectrum within a preset time window, and perform position shifting and permutation processing on the bit sequence in the initial binding data block based on the dynamic weight parameter to obtain an optimized bit sequence, so as to generate a composite key based on the optimized bit sequence.

[0047] In this step, the preset time window refers to the time interval for dynamic weight calculation, covering the stable period of the electromagnetic signal; the change value of the signal strength refers to the peak-to-peak value of the signal strength within the time window, reflecting the fluctuation of the equipment operation status; the dynamic weight parameter refers to the displacement control amount calculated based on the signal change value, and the calculation formula of the dynamic weight parameter is: weight = change value × proportional coefficient; the optimized bit sequence refers to the anti-analysis sequence after position offset and permutation processing, which meets the avalanche effect criterion; the composite key refers to the final generated 256-bit dynamic encryption key, the upper 128 bits are the electromagnetic feature binding value, and the lower 128 bits are the hardware hash binding value; in this embodiment of the present application, according to the extreme difference change value ΔS of the signal strength within the preset time window; calculate the dynamic weight parameter; perform position offset and permutation processing on the initial binding data block; output the optimized bit sequence as the 256-bit composite key.

[0048] The embodiments of the present application enhance device uniqueness by hardware parameter bit reorganization to prevent terminal counterfeiting; cross-iteration hashing improves the anti-collision capability of the summary; electromagnetic signal interpolation binding realizes the dynamic coupling of the physical environment and the hardware fingerprint; and weight adaptive displacement enables the key to change in real time with the electromagnetic environment.

[0049] The present application provides a specific embodiment, in which step 204 converts the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and alternately interpolates the numerical sequence with the bit sequence to generate an initial binding data block, specifically comprising the following steps: Step 211: collecting signal strength values ​​of a preset frequency band in the electromagnetic radiation characteristic spectrum to generate a signal strength value sequence, wherein the collection window size is adjusted according to the bit entropy value of the hardware fingerprint hash summary.

[0050] In this step, the signal strength value of the preset frequency band refers to the instantaneous value of the electromagnetic field strength detected within a specific frequency range (such as 1.8GHz-2.0GHz), in units of dBμV / m; the signal strength numerical sequence refers to a digital sequence formed by discrete sampling of the signal strength values, and the sequence length = sampling time / acquisition window; the acquisition window refers to the time length of a single signal sampling, which is dynamically adjusted according to the bit entropy value; the bit entropy value refers to an indicator and value range reflecting the randomness of the hardware fingerprint hash summary, and is calculated as 1 divided by the bit sequence length multiplied by the sum of the information entropy values ​​of the bit sequence; in this embodiment of the present application, the signal strength value of the preset frequency band in the electromagnetic radiation characteristic spectrum is collected, and the acquisition window size is adjusted according to the bit entropy value of the hardware fingerprint hash summary (such as window = 10ms when the entropy value is greater than 0.9, and window = 20ms when the entropy value is ≤0.9) to generate a signal strength numerical sequence of equally spaced samples.

[0051] Step 212: performing alternating interpolation processing on the signal strength value sequence and the bit sequence according to a preset interpolation rule to generate an extended sequence.

[0052] In this step, the preset interpolation rule refers to the rule that defines the position at which the signal value is inserted, specifically: insert in front of the odd-numbered bit segments and insert after the even-numbered bit segments; the extended sequence refers to a transition sequence formed by alternating combinations of signal values ​​and original sequences, and its length = original sequence length + signal sequence length; in this embodiment of the present application, according to the preset interpolation rule, that is, inserting signal values ​​in front of the odd-numbered bit segments and inserting signal values ​​after the even-numbered bit segments, the elements of the signal strength numerical sequence are alternately inserted into the bit sequence of the hardware fingerprint hash summary to generate a mixed extended sequence containing signal values ​​and bit segments.

[0053] Step 213: Perform bit width alignment processing on the signal strength values ​​in the extended sequence to generate a bit width normalized sequence.

[0054] In this step, the bit width normalization sequence refers to an equal-width binary sequence after high-bit zero padding, and the bit width of all elements is unified to 8 bits; in an embodiment of the present application, bit width alignment processing is performed on each signal strength value in the extended sequence: it is converted into an 8-bit binary number to make the bit width of all elements consistent, generating a bit width normalization sequence.

[0055] Step 214: Determine a block dimension according to the storage device identifier in the physical hardware characteristic parameter set, so as to divide the bit width normalized sequence into a plurality of data blocks according to the block dimension.

[0056] In this step, the block dimension refers to the geometric structure of the data block division (such as 8×8 represents 64 bits / block), which is determined by the last 4 bits of the storage device identifier; in this embodiment of the application, the block dimension is determined according to the last 4 bits of the storage device identifier, such as the last 4 bits = 1011, dimension = 8×8, and the bit width standardized sequence is divided into multiple equal-length data blocks according to this dimension.

[0057] Step 215: Perform a block reorganization operation on the data block to generate an initial binding data block.

[0058] In an embodiment of the present application, a block reorganization operation is performed on each data block, the bit values ​​in the block are read in row priority order, a random permutation sequence is generated using the first 4 bits of the storage device identifier as a seed, and all blocks are connected after the bit values ​​are rearranged according to the sequence to generate an initial bound data block; the embodiment of the present application improves the efficiency of electromagnetic feature acquisition through a dynamic acquisition window; odd-even differentiated interpolation enhances data obfuscation; forced bit width unification solves the problem of heterogeneous data fusion; device identifier-driven block division realizes personalized data structure; random seed block reorganization greatly improves the anti-analysis capability of bound data blocks.

[0059] This application provides a specific embodiment, step 103, performing chaotic parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted, specifically including the following steps: Step 301: Separate a first parameter sequence corresponding to the electromagnetic characteristic component and a second parameter sequence corresponding to the hardware hash component from the composite key.

[0060] In this step, the first parameter sequence refers to the high 128-bit sequence of the composite key, which carries the quantitative data of the electromagnetic radiation characteristic spectrum; the second parameter sequence refers to the low 128-bit sequence of the composite key, which carries the bit stream of the hardware fingerprint hash summary; in this embodiment of the present application, the high 128 bits are separated from the 256-bit composite key as the first parameter sequence corresponding to the electromagnetic characteristic component, and the low 128 bits are separated as the second parameter sequence corresponding to the hardware hash component.

[0061] Step 302: According to a preset alternating arrangement rule, the first parameter sequence and the second parameter sequence are combined into an initial parameter sequence.

[0062] In this step, the preset alternating permutation rule refers to a rule defining the mixing order of dual sequence elements; the initial parameter sequence refers to a transition sequence generated by alternating permutation, and the transition sequence length = the first sequence length + the second sequence length; in the embodiment of the present application, according to the preset alternating permutation rule, that is, the first parameter sequence elements and the second parameter sequence elements are alternated in a ratio of 3:1, and the two sequences are merged into a 256-bit initial parameter sequence.

[0063] Step 303: Perform bit extension and superposition operations on the electromagnetic characteristic elements and adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence.

[0064] In this step, the electromagnetic characteristic element refers to the 8-bit basic unit of the first parameter sequence, which represents the average electromagnetic intensity of a specific time window; the hardware hash bit segment refers to the 8-bit continuous segment of the second parameter sequence, which is derived from the local hash value of the hardware fingerprint; the extended parameter sequence refers to the encrypted intermediate sequence generated after the bit expansion and superposition operations, and its length is doubled to 512 bits; in this embodiment of the present application, 16-bit extension (high-bit zero padding) is performed on each electromagnetic characteristic element in the initial parameter sequence, and parity bit swapping and reorganization are performed on adjacent hardware hash bit segments; the expanded electromagnetic unit and the reorganized hash unit are superimposed according to the rule of high-bit straight-through and low-bit XOR to generate an extended parameter sequence.

[0065] Step 304: extracting chaotic mapping input parameters from the extended parameter sequence to generate a chaotic parameter sequence, wherein the chaotic mapping input parameters include a starting value and an iteration step.

[0066] In this step, the chaotic map input parameters refer to the initialization parameters of the chaotic system, including the starting value and the iteration step; the chaotic parameter sequence refers to the pseudo-random sequence generated by the chaotic map iteration, which is used to control the encryption operation; the iteration step refers to the step value of the chaotic iteration, and the calculation formula is the last 8-bit value of the extended sequence divided by 16 and rounded up; in the embodiment of the present application, 24 bits are extracted from the head of the extended parameter sequence as the chaotic map starting value, and 8 bits are extracted from the tail to calculate the iteration step; a 512-bit chaotic parameter sequence is generated by the chaotic map iteration.

[0067] Step 305: Divide the chaotic parameter sequence into multiple sub-parameter groups corresponding to the data segments of the incremental update packet to be transmitted.

[0068] In this step, multiple sub-parameter groups refer to a set of fragments after the chaotic parameter sequence is divided equally according to the number of data segments; in an embodiment of the present application, the chaotic parameter sequence is divided into an equal number of sub-parameter groups according to the number of data segments of the incremental update package to be transmitted (such as 18 segments).

[0069] Step 306: Establish a binding relationship between the data segment of the incremental update package to be transmitted and the corresponding sub-parameter group to generate a chaotic encryption strategy.

[0070] In an embodiment of the present application, a one-to-one binding relationship is established between each data segment and a sub-parameter group, and a chaotic encryption strategy including a bit order control vector and a mask parameter is generated; the embodiment of the present application realizes electromagnetic feature-dominated encryption control through a 3:1 alternating arrangement; 16-bit expansion and reorganization enhance the parameter anti-analysis capability; the superposition rule of the high 8-bit pass-through and the low 8-bit XOR balances efficiency and security; the device-driven chaotic parameters ensure that the same input produces differentiated outputs at different terminals; and equal molecular parameter groups realize precise matching of encryption strategies and data segments.

[0071] The present application provides a specific embodiment, step 303, performing bit extension and superposition operations on the electromagnetic characteristic elements and adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence, specifically comprising the following steps: Step 311: performing bit expansion processing on the electromagnetic characteristic elements in the initial parameter sequence to obtain an extended electromagnetic characteristic unit.

[0072] In this step, the extended electromagnetic feature unit refers to a binary unit after the electromagnetic feature element is expanded by 16 bits, the upper 8 bits are fixed to 0, and the lower 8 bits are the original value; in the embodiment of the present application, bit expansion processing is performed on each 8-bit electromagnetic feature element in the initial parameter sequence, and it is expanded to a 16-bit binary number by the high-bit zero-padding method to generate an extended electromagnetic feature unit.

[0073] Step 312: Grouping and exchanging the hardware hash bit segments adjacent to the electromagnetic characteristic elements to obtain exchanged bit segments, performing a cyclic right shift operation on the exchanged bit segments to generate a reorganized hash unit.

[0074] In this step, the swapped bit segment refers to the intermediate result after the hardware hash bit segment is divided into two 4-bit groups and the positions are swapped; the reorganized hash unit refers to the 8-bit unit generated by the swapped bit segment through a circular right shift, and the shift number is determined by the last 3 bits of the adjacent electromagnetic characteristic element; in the embodiment of the present application, an 8-bit hardware hash bit segment adjacent to the electromagnetic characteristic element is selected, first divided into two groups of 4 bits, and the positions of the two groups are swapped; then a circular right shift operation is performed on the swapped bit segment (the shift number = the last 3 bits of the electromagnetic characteristic element) to generate a reorganized hash unit.

[0075] Step 313: According to a preset superposition rule, the extended electromagnetic feature unit and the recombined hash unit are combined into an extended unit segment.

[0076] In this step, the preset superposition rule refers to the rule that defines the method of generating the extended unit segment, that is, the upper 8 bits of the electromagnetic unit are retained, and the lower 8 bits of the electromagnetic are XORed with the lower 8 bits of the hash; the extended unit segment refers to the 16-bit data unit output after the superposition operation, and the structure is: the upper 8 bits of the electromagnetic + the XOR result 8 bits; in the embodiment of the present application, according to the preset superposition rule, that is, the upper 8 bits of the extended electromagnetic feature unit are directly output, the lower 8 bits of the hash unit are reorganized and XORed with the lower 8 bits of the electromagnetic feature unit, and the two are combined into a 16-bit extended unit segment.

[0077] Step 314: Determine the target sequence length according to the number of data segments of the incremental update packet to be transmitted, so as to perform connection and length adaptation operations on the extension unit segments and generate an extension parameter sequence.

[0078] In this step, the target sequence length refers to the target bit length of the extended parameter sequence, and the target bit length calculation formula is the number of data segments multiplied by 32. In the embodiment of the present application, the target sequence length is determined according to the number of data segments of the incremental update package, and all extended unit segments are connected in sequence. The length adaptation operation is performed on the connected sequence, that is, if it is insufficient, the high bits are filled with zeros, and if it exceeds, the lower 32 bits are truncated to generate an extended parameter sequence.

[0079] The embodiments of the present application enhance parameter randomness through the triple operations of bit extension, packet switching and shift reorganization; the high 8 bits are passed through to retain the dominance of electromagnetic characteristics; and the length adaptation driven by the data segment ensures that the encryption strategy accurately matches the transmission requirements.

[0080] This application provides a specific embodiment, step 104, based on the chaotic encryption strategy, the data segments of the incremental update package to be transmitted are encrypted in segments to obtain multiple encrypted data segments, and based on the composite key, a verification code is generated for each encrypted data segment, specifically including the following steps: Step 401: extract the sub-parameter group and the bit sequence control vector bound to the data segment of the incremental update package to be transmitted from the chaotic encryption strategy, and rearrange the byte sequence of the data segment based on the bit sequence control vector to generate a rearranged bit sequence.

[0081] In this step, the bit order control vector refers to an index array (such as [2,0,3,1]) that defines the order of byte bit rearrangement, and its length is equal to the bit width of the data segment; the byte sequence refers to the original binary representation of the data segment to be encrypted, and each 8 bits constitutes a byte unit; the rearranged bit sequence refers to the bit stream after the byte sequence is rearranged according to the bit order control vector; in an embodiment of the present application, the sub-parameter group and the bit order control vector bound to the current data segment are extracted from the chaotic encryption strategy, and according to the bit order mapping rule defined by the bit order control vector, the bit position rearrangement operation is performed on the byte sequence of the data segment to generate a rearranged bit sequence.

[0082] Step 402: Perform a mask superposition operation on the rearranged bit sequence based on the mask parameters in the sub-parameter group to generate a masked data block.

[0083] In this step, the mask parameter refers to a fixed or dynamic value used for the bitwise exclusive OR operation; the masked data block refers to the intermediate data block after the rearranged bit sequence and the mask parameter are exclusive ORed; in an embodiment of the present application, the mask parameter is extracted from the sub-parameter group, and a bitwise exclusive OR mask superposition operation is performed on the rearranged bit sequence to generate a masked data block.

[0084] Step 403: According to a preset padding rule, the masked data block is extended to a target length to generate a padded data block.

[0085] In this step, the preset filling rule refers to the data block length standardization rule, that is, if it is less than 128 bits, the tail is padded with zeros, and if it is too long, the lower bits are truncated; the padded data block refers to the 128-bit standard data block after length adaptation; in the embodiment of the present application, according to the preset filling rule, that is, if the length is insufficient, the tail is padded with 0x00, and if it is too long, the lower bits are truncated, the masked data block is extended to the target length of 128 bits to generate the padded data block.

[0086] Step 404: intercepting a check bit segment according to the hardware hash component of the composite key, and injecting the check bit segment into a designated position of the padded data block through interpolation to generate an encrypted data segment.

[0087] In this step, the check bit segment refers to the 8-bit verification identifier truncated from the hardware hash component of the composite key.

[0088] In an embodiment of the present application, the last 8 bits are intercepted from the hardware hash component of the composite key as a check bit segment, and the padded data block is inserted according to a preset injection position (such as inserting 2 bits every 32 bits) to generate an encrypted data segment.

[0089] Step 405: extracting the check bit segment from the encrypted data segment, combining it with the electromagnetic characteristic component of the composite key, performing an alternating bit splicing operation, and generating a verification code input sequence.

[0090] In this step, the verification code input sequence refers to the bit sequence formed by alternating the check bit segment and the electromagnetic characteristic component; in the embodiment of the present application, the injected check bit segment is extracted from the encrypted data segment and alternately spliced ​​with the first 8 bits of the composite key electromagnetic characteristic component, that is, 1 check bit + 1 characteristic bit, to generate the verification code input sequence.

[0091] Step 406: Compression processing is performed on the verification code input sequence to generate a verification code for each encrypted data segment; in the embodiment of the present application, compression processing is performed on the verification code input sequence to generate an 8-digit verification code.

[0092] This scheme disrupts the original data structure by rearranging the bits, introduces nonlinear transformation by dynamic mask superposition, ensures the encryption block is compatible with the transmission protocol by standardized padding, and realizes end-to-end integrity verification by fusing the two components of the key to generate a verification code.

[0093] This application provides a specific embodiment, step 105, synchronously monitoring the network type of the terminal device during the segmented encryption process, and when detecting that the network type switches between a mobile network and WiFi, updating the chaotic encryption strategy according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby achieving security verification in a network switching scenario, specifically comprising the following steps: Step 501: During the segmented encryption process, the network interface status of the terminal device is polled to monitor the network interface type of the terminal device. Step 502: When it is detected that the network interface type is switched from a mobile network to WiFi or from WiFi to a mobile network, the electromagnetic signal acquisition parameters are determined based on the switched network interface type, and an updated electromagnetic radiation characteristic spectrum and an updated hardware fingerprint hash digest are generated according to the electromagnetic signal acquisition parameters. Step 503: According to the bit weight allocation rule, the updated electromagnetic radiation characteristic spectrum is re-bound with the updated hardware fingerprint hash digest to generate an updated chaotic encryption strategy. Step 504: Incomplete transmission data segments caused by the network interface type switching are identified, and the updated chaotic encryption strategy is used to re-execute segmented encryption processing on the incomplete transmission data segments to generate a target verification code, thereby achieving security verification in the network switching scenario.

[0094] In the above process, the network interface status refers to the real-time information of the terminal device's network connection, including connection status, signal strength, and network type code; the network interface type refers to the currently activated network connection technology classification, including mobile networks and WiFi; the electromagnetic signal acquisition parameters refer to the configuration set for signal acquisition, including the target frequency band and sampling rate; the updated electromagnetic radiation characteristic spectrum refers to the electromagnetic signal time-frequency matrix generated by the new parameters after the network is switched; the updated hardware fingerprint hash summary refers to the 128-bit hardware feature summary recalculated during network switching to prevent device camouflage attacks; the bit weight allocation rule refers to the calculation formula that defines the proportion of electromagnetic features and hash features in key binding: mobile network weight = 0.7×electromagnetic + 0.3×hash; the updated chaotic encryption strategy refers to the encryption rule set generated based on the new binding relationship, which includes elements such as the bit order control vector and mask parameters; the unfinished transmission data segment refers to the data packet that has been sent but not confirmed by the server during network switching, and is identified by the TCP sequence number.

[0095] In an embodiment of the present application, during the segmented encryption processing, the network connection manager of the terminal device is called to poll the network interface status every 100 milliseconds to obtain the current network interface type identifier; when it is detected that the network interface type is switched from a mobile network to WiFi or vice versa, the electromagnetic signal acquisition parameters are determined based on the new interface type (such as when WiFi switches to 4G, the frequency band is switched from 5GHz to 800MHz); the electromagnetic signal is re-collected according to the new parameters to generate an updated electromagnetic radiation characteristic spectrum, and the hardware fingerprint hash summary is recalculated at the same time; according to the bit weight allocation rule (such as the electromagnetic characteristic weight of 0.7 in the mobile network environment and the weight of 0.6 in the WiFi environment), the updated electromagnetic radiation characteristic spectrum is re-bound to the hardware fingerprint hash summary to generate an updated chaotic encryption strategy; the encrypted data segment that did not receive a confirmation character response from the server due to the network switch is identified, and the new chaotic encryption strategy is used to re-segment and encrypt it to generate a secure data packet containing a target verification code, thereby realizing security verification in the network switching scenario.

[0096] The embodiment of the present application realizes real-time switching perception through millisecond-level network polling; frequency band adaptive acquisition ensures that the electromagnetic characteristics match the environment; and dynamic weight binding solves the problem of cross-network key failure.

[0097] Figure 2 The following is a schematic diagram showing the structure of a security verification system for incremental updates of game patches provided by the present application. Figure 2 As shown, the system includes: The acquisition module 21 is used to obtain the incremental update package to be transmitted according to the operation of starting the incremental update of the game patch by the game client, and synchronously collect the electromagnetic signals generated when the terminal device runs the game client to start the incremental update of the game patch to generate an electromagnetic radiation characteristic spectrum.

[0098] The binding module 22 is configured to generate a hardware fingerprint hash digest according to the hardware identification information of the terminal device, so as to bind the hardware fingerprint hash digest and the electromagnetic radiation characteristic spectrum to generate a composite key.

[0099] The processing module 23 is configured to perform chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted.

[0100] The encryption module 24 is used to perform segmented encryption processing on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and generate a verification code for each encrypted data segment based on the composite key.

[0101] The update module 25 is used to synchronously monitor the network type of the terminal device during the segmented encryption process. When it is detected that the network type switches between the mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby realizing security verification in the network switching scenario.

[0102] Figure 2 The security verification system for incremental updates of game patches can be executed Figure 1 The implementation principles and technical effects of the security verification method for incremental game patch updates described in the illustrated embodiment will not be elaborated upon. The specific manner in which each module and unit performs operations in the security verification system for incremental game patch updates in the aforementioned embodiment has been described in detail in the relevant embodiments of the method and will not be elaborated upon here.

[0103] In one possible design, Figure 2 A security verification system for incremental updating of a game patch in the embodiment shown can be implemented as a computing device, such as Figure 3 As shown, the computing device may include a storage component 31 and a processing component 32; The storage component 31 stores one or more computer instructions, wherein the one or more computer instructions are called and executed by the processing component 32 .

[0104] The processing component 32 is used for the above Figure 1 The embodiment of the present invention provides a security verification method for incremental updates of game patches. The processing component 32 may include one or more processors to execute computer instructions to complete all or part of the steps of the above method. Of course, the processing component may also be implemented as one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above method.

[0105] The storage component 31 is configured to store various types of data to support operations on the terminal. The storage component can be implemented by any type of volatile or non-volatile storage device, or a combination thereof, such as random access memory (RAM), static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. Of course, a computing device may also include other components, such as input / output interfaces, a display component, and a communication component. The input / output interface provides an interface between the processing component and peripheral interface modules, which may be output devices, input devices, etc. The communication component is configured to facilitate wired or wireless communication between the computing device and other devices.

[0106] Among them, the computing device can be a physical device or an elastic computing host provided by a cloud computing platform, etc. In this case, the computing device can refer to a cloud server, and the above-mentioned processing components, storage components, etc. can be basic server resources rented or purchased from the cloud computing platform.

[0107] The present application also provides a computer storage medium storing a computer program, wherein the computer program can achieve the above-mentioned Figure 1 The illustrated embodiment provides a security verification method for incremental updates of game patches.

[0108] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0109] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one location or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of the present embodiment. Persons of ordinary skill in the art will be able to understand and implement the present invention without inventive effort.

[0110] Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented using software plus a necessary general-purpose hardware platform, or of course, hardware. Based on this understanding, the essence of the above technical solution, or the portion that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, or an optical disk, and includes a number of instructions for causing a computer device (such as a personal computer, server, or network device) to execute the methods described in each embodiment or certain portions of the embodiments.

[0111] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A security verification method for incremental updates of game patches, characterized in that: include: According to the operation of the game client initiating the incremental update of the game patch, the incremental update package to be transmitted is obtained, and the electromagnetic signal generated when the terminal device runs the operation of the game client initiating the incremental update of the game patch is synchronously collected to generate an electromagnetic radiation characteristic spectrum; Generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, and bind the hardware fingerprint hash digest to the electromagnetic radiation characteristic spectrum to generate a composite key; Performing chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted; Performing segmented encryption processing on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and generating a verification code for each encrypted data segment based on the composite key; During the segmented encryption process, the network type of the terminal device is synchronously monitored. When it is detected that the network type switches between the mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate the target verification code, thereby realizing security verification in the network switching scenario.

2. The method according to claim 1, characterized in that Generating a hardware fingerprint hash digest according to the hardware identification information of the terminal device, and binding the hardware fingerprint hash digest with the electromagnetic radiation characteristic spectrum to generate a composite key, including: Extracting a set of physical hardware feature parameters from the hardware identification information of the terminal device, wherein the set of physical hardware feature parameters includes a storage device identification; Converting each physical hardware characteristic parameter in the physical hardware characteristic parameter set into a bit sequence, performing segmented reassembly processing on the bit sequence to obtain an intermediate bit sequence; Performing a cross-iteration operation on the intermediate bit sequence to generate a hardware fingerprint hash summary, wherein the cross-iteration operation process includes exchanging bit values ​​of adjacent bit segments and performing a logical exclusive-OR operation across bit segments; converting the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block; A dynamic weight parameter is calculated according to the change value of the signal strength of the electromagnetic radiation characteristic spectrum within a preset time window. Based on the dynamic weight parameter, the bit sequence in the initial binding data block is shifted and replaced to obtain an optimized bit sequence, so as to generate a composite key based on the optimized bit sequence.

3. The method according to claim 2, characterized in that Converting the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block, including: Collecting signal strength values ​​of a preset frequency band in the electromagnetic radiation characteristic spectrum to generate a signal strength value sequence, wherein the size of the collection window is adjusted according to the bit entropy value of the hardware fingerprint hash summary; performing alternating interpolation processing on the signal strength value sequence and the bit sequence according to a preset interpolation rule to generate an extended sequence; Performing bit width alignment processing on the signal strength values ​​in the extended sequence to generate a bit width normalized sequence; determining a block dimension according to a storage device identifier in the physical hardware characteristic parameter set, so as to divide the bit width normalized sequence into a plurality of data blocks according to the block dimension; A block reorganization operation is performed on the data blocks to generate an initial binding data block.

4. The method according to claim 1, wherein Performing a chaotic parameter initialization process based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted, including: Separating a first parameter sequence corresponding to the electromagnetic characteristic component and a second parameter sequence corresponding to the hardware hash component from the composite key; According to a preset alternating arrangement rule, merging the first parameter sequence and the second parameter sequence into an initial parameter sequence; performing bit extension and superposition operations on the electromagnetic characteristic elements and adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence; Extracting chaotic mapping input parameters from the extended parameter sequence to generate a chaotic parameter sequence, wherein the chaotic mapping input parameters include a starting value and an iteration step size; Dividing the chaotic parameter sequence into a plurality of sub-parameter groups corresponding to the data segments of the incremental update packet to be transmitted; A binding relationship between the data segment of the incremental update package to be transmitted and the corresponding sub-parameter group is established to generate a chaotic encryption strategy.

5. The method according to claim 4, characterized in that Performing bit extension and superposition operations on the electromagnetic characteristic elements in the initial parameter sequence and adjacent hardware hash bit segments to generate an extended parameter sequence, including: performing bit expansion processing on the electromagnetic characteristic elements in the initial parameter sequence to obtain an extended electromagnetic characteristic unit; performing grouping and swapping of hardware hash bit segments adjacent to the electromagnetic characteristic elements to obtain swapped bit segments, and performing a cyclic right shift operation on the swapped bit segments to generate a recombined hash unit; According to a preset superposition rule, the extended electromagnetic feature unit and the recombined hash unit are combined into an extended unit segment; The target sequence length is determined according to the number of data segments of the incremental update packet to be transmitted, so as to perform connection and length adaptation operations on the extension unit segments to generate an extension parameter sequence.

6. The method according to claim 1, characterized in that The data segments of the incremental update package to be transmitted are encrypted in segments based on the chaotic encryption strategy to obtain multiple encrypted data segments, and a verification code for each encrypted data segment is generated based on the composite key, including: Extracting a sub-parameter group and a bit sequence control vector bound to a data segment of the incremental update package to be transmitted from the chaotic encryption strategy, and performing bit sequence rearrangement on a byte sequence of the data segment based on the bit sequence control vector to generate a rearranged bit sequence; performing a mask superposition operation on the rearranged bit sequence based on the mask parameters in the sub-parameter group to generate a masked data block; According to a preset padding rule, the masked data block is extended to a target length to generate a padded data block; intercepting a check bit segment according to the hardware hash component of the composite key, and injecting the check bit segment into a designated position of the padded data block through interpolation to generate an encrypted data segment; Extracting a check bit segment from the encrypted data segment, combining it with the electromagnetic characteristic component of the composite key, performing an alternating bit splicing operation, and generating a verification code input sequence; Compression processing is performed on the verification code input sequence to generate a verification code for each encrypted data segment.

7. The method according to claim 1, characterized in that During the segmented encryption process, the network type of the terminal device is synchronously monitored. When it is detected that the network type switches between a mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate a target verification code, thereby achieving security verification in a network switching scenario, including: Polling the network interface status of the terminal device during the segment encryption process to monitor the network interface type of the terminal device; When detecting that the network interface type is switched from a mobile network to WiFi or from WiFi to a mobile network, determining electromagnetic signal acquisition parameters based on the switched network interface type, and generating an updated electromagnetic radiation signature spectrum and an updated hardware fingerprint hash digest based on the electromagnetic signal acquisition parameters; Rebinding the updated electromagnetic radiation signature spectrum with the updated hardware fingerprint hash summary according to a bit weight distribution rule to generate an updated chaotic encryption strategy; Identify the unfinished transmission data segments caused by the switching of network interface types, use the updated chaotic encryption strategy to re-execute segmented encryption processing on the unfinished transmission data segments, generate target verification codes, and realize security verification in the network switching scenario.

8. A security verification system for incremental updates of game patches, characterized in that: include: An acquisition module is used to acquire the incremental update package to be transmitted based on the operation of initiating the incremental update of the game patch by the game client, and synchronously collect the electromagnetic signals generated when the terminal device runs the operation of initiating the incremental update of the game patch by the game client to generate an electromagnetic radiation characteristic spectrum; a binding module, configured to generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, so as to bind the hardware fingerprint hash digest to the electromagnetic radiation characteristic spectrum to generate a composite key; A processing module, configured to perform chaos parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update package to be transmitted; An encryption module, configured to perform segmented encryption processing on the data segments of the incremental update package to be transmitted based on the chaotic encryption strategy to obtain a plurality of encrypted data segments, and generate a verification code for each encrypted data segment based on the composite key; The update module is used to synchronously monitor the network type of the terminal device during the segmented encryption process. When it is detected that the network type switches between the mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform the segmented encryption process to generate the target verification code, thereby realizing security verification in the network switching scenario.

9. A computing device, characterized in that It includes a processing component and a storage component; the storage component stores one or more computer instructions; the one or more computer instructions are used to be called and executed by the processing component to implement a security verification method for incremental update of a game patch as described in any one of claims 1 to 7.

10. A computer storage medium, characterized in that A computer program is stored, and when the computer program is executed by a computer, a security verification method for incremental updating of a game patch as described in any one of claims 1 to 7 is implemented.

Images