A security verification method and system for game patch delta update

Abstract

The application provides a security verification method and system for game patch incremental update, which comprises the following steps: generating an electromagnetic radiation characteristic spectrum according to the operation of starting the game patch incremental update of the game client; generating a hardware fingerprint hash digest according to the hardware identification information of the terminal device, and binding the hardware fingerprint hash digest and the electromagnetic radiation characteristic spectrum to generate a composite key; performing chaotic parameter initialization processing based on the electromagnetic characteristic component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted; generating a verification code of each encrypted data segment based on the chaotic encryption strategy; synchronously monitoring the network type of the terminal device in the segmented encryption process, updating the chaotic encryption strategy, and re-performing segmented encryption processing to generate a target verification code, so as to realize security verification in the network switching scene; and the application realizes multi-dimensional security verification for incremental update tamper resistance and anti-replay attack in a cross-network environment.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of software update security verification, in particular to a security verification method and system for game patch incremental update. BACKGROUND

[0002] Under the background of rapid development of mobile games, game manufacturers need to frequently update patches to repair vulnerabilities, optimize experiences, or add new functions. However, in the mobile scenario where 4G, 5G, WiFi and other network environments are mixed, the incremental update process of game patches faces security threats such as data being hijacked by intermediaries and tampered with. Especially when switching between different network types, the instability of the transmission link further increases the difficulty of data integrity and identity verification.

[0003] Current research has proposed a method of generating an encryption key based on the unique hardware identifier of the terminal device, which is used to encrypt the incremental update package end-to-end. It extracts the physical feature information of key components such as the device motherboard, central processor, and memory, generates a unique hardware fingerprint, and uses it as an encryption seed to encrypt and integrity check the patch data. However, this existing solution has certain limitations, for example, it relies only on static hardware fingerprints to generate fixed encryption parameters, which is difficult to adapt to dynamically changing transmission paths and channel characteristics, resulting in a decrease in security strength; when the hardware fingerprint is illegally extracted and simulated, the entire encryption system will face the risk of failure, and cannot have real dynamic protection and real-time adaptation capabilities, etc. SUMMARY

[0004] The present application provides a security verification method and system for game patch incremental update, to solve the problems in the prior art of relying on static hardware fingerprints to generate fixed encryption parameters, insufficient security strength; when the hardware fingerprint is illegally extracted and simulated, it cannot have real dynamic protection and real-time adaptation capabilities, etc.

[0005] In a first aspect, the present application provides a security verification method for game patch incremental update, comprising:

[0006] According to the operation of starting the game patch incremental update of the game client, an incremental update package to be transmitted is obtained, and an electromagnetic signal generated when the terminal device runs the game client to start the game patch incremental update operation is synchronously collected to generate an electromagnetic radiation characteristic spectrum;

[0007] According to the hardware identifier information of the terminal device, a hardware fingerprint hash digest is generated to bind the hardware fingerprint hash digest and the electromagnetic radiation characteristic spectrum to generate a composite key;

[0008] Based on the electromagnetic characteristic component and the hardware hash component of the composite key, a chaotic parameter initialization process is performed to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted.

[0009] segmenting and encrypting the data segment of the to-be-transmitted incremental update package based on the chaotic encryption strategy, to obtain a plurality of encrypted data segments, and generating a verification code of each encrypted data segment based on the composite key;

[0010] Synchronously monitoring the network type of the terminal device in the process of segmenting and encrypting, and when detecting that the network type switches between a mobile network and a WiFi, updating the chaotic encryption strategy according to the network interface after the switching, to re-perform the segmenting and encrypting to generate a target verification code, and realizing the security verification in the network switching scenario.

[0011] Optionally, a hardware fingerprint hash digest is generated according to the hardware identification information of the terminal device, to bind the hardware fingerprint hash digest and the electromagnetic radiation characteristic spectrum to generate a composite key, including:

[0012] extracting a set of physical hardware characteristic parameters from the hardware identification information of the terminal device, the set of physical hardware characteristic parameters including a storage device identifier;

[0013] converting each physical hardware characteristic parameter in the set of physical hardware characteristic parameters into a bit sequence, and performing segmenting and recombining processing on the bit sequence to obtain an intermediate bit sequence;

[0014] performing cross-iteration operation on the intermediate bit sequence to generate a hardware fingerprint hash digest, the process of cross-iteration operation including bit value exchange of adjacent bit segments and logic XOR operation across bit segments;

[0015] converting the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, to perform alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block;

[0016] calculating a dynamic weight parameter according to the change value of the signal strength of the electromagnetic radiation characteristic spectrum within a preset time window, performing position offset and permutation processing on the bit sequence in the initial binding data block based on the dynamic weight parameter to obtain an optimized bit sequence, and generating a composite key based on the optimized bit sequence.

[0017] Optionally, the signal strength of a preset frequency band in the electromagnetic radiation characteristic spectrum is converted into a numerical sequence, to perform alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block, including:

[0018] collecting the signal strength value of a preset frequency band in the electromagnetic radiation characteristic spectrum to generate a signal strength numerical sequence, wherein the collection window size is adjusted according to the bit entropy value of the hardware fingerprint hash digest;

[0019] According to a preset interpolation rule, the signal strength value sequence and the bit sequence are alternately interpolated to generate an extended sequence;

[0020] The signal strength values in the extended sequence are subjected to bit width alignment processing to generate a bit width standardized sequence;

[0021] According to the storage device identifier in the physical hardware feature parameter set, a block dimension is determined to divide the bit width standardized sequence into a plurality of data blocks according to the block dimension;

[0022] The data blocks are subjected to block reorganization to generate an initial binding data block.

[0023] Optionally, based on the electromagnetic feature component and the hardware hash component of the composite key, chaotic parameter initialization processing is performed to obtain a chaotic encryption strategy corresponding to the transmission of the to-be-transmitted incremental update package, including:

[0024] The first parameter sequence corresponding to the electromagnetic feature component and the second parameter sequence corresponding to the hardware hash component are separated from the composite key;

[0025] According to a preset alternating arrangement rule, the first parameter sequence and the second parameter sequence are combined into an initial parameter sequence;

[0026] The electromagnetic feature elements in the initial parameter sequence and the adjacent hardware hash bit segments are subjected to bit extension and superposition operations to generate an extended parameter sequence;

[0027] Chaotic mapping input parameters are extracted from the extended parameter sequence to generate a chaotic parameter sequence, the chaotic mapping input parameters including a starting value and an iteration step length;

[0028] The chaotic parameter sequence is divided into a plurality of sub-parameter groups corresponding to the data segments of the to-be-transmitted incremental update package;

[0029] The data segments of the to-be-transmitted incremental update package and the corresponding sub-parameter groups are established in a binding relationship to generate a chaotic encryption strategy.

[0030] Optionally, the electromagnetic feature elements in the initial parameter sequence and the adjacent hardware hash bit segments are subjected to bit extension and superposition operations to generate an extended parameter sequence, including:

[0031] The electromagnetic feature elements in the initial parameter sequence are subjected to bit extension processing to obtain extended electromagnetic feature elements;

[0032] The hardware hash bit segments adjacent to the electromagnetic feature elements are subjected to grouping and exchange grouping processing to obtain exchanged bit segments, and the exchanged bit segments are subjected to a cyclic right shift operation to generate reorganized hash elements;

[0033] According to the preset superposition rules, the extended electromagnetic feature unit and the recombined hash unit are combined into an extended unit segment;

[0034] Based on the number of data segments in the incremental update packet to be transmitted, the target sequence length is determined, and the extended unit segments are connected and length adapted to generate an extended parameter sequence.

[0035] Optionally, the data segments of the incremental update packet to be transmitted are segmented and encrypted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and a verification code for each encrypted data segment is generated based on the composite key, including:

[0036] Extract the sub-parameter group and bit order control vector bound to the data segment of the incremental update packet to be transmitted from the chaotic encryption strategy, and rearrange the bit order of the byte sequence of the data segment based on the bit order control vector to generate a rearranged bit sequence;

[0037] Based on the mask parameters in the sub-parameter group, a mask overlay operation is performed on the rearranged sequence to generate a mask processing data block;

[0038] According to the preset padding rules, the mask processing data block is expanded to the target length to generate a padded data block;

[0039] The verification bit segment is extracted from the hardware hash component of the composite key, and the verification bit segment is interpolated and injected into the specified position of the padded data block to generate an encrypted data segment.

[0040] Extract the verification bit segment from the encrypted data segment, combine it with the electromagnetic feature components of the composite key, perform an alternating bit concatenation operation, and generate the verification code input sequence.

[0041] The input sequence of the verification code is compressed to generate a verification code for each encrypted data segment.

[0042] Optionally, during the segmented encryption process, the network type of the terminal device is monitored synchronously. When the network type is detected to switch between mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption and generate the target verification code, thereby achieving security verification in network switching scenarios, including;

[0043] During the segmented encryption process, the network interface status of the terminal device is polled to monitor the network interface type of the terminal device;

[0044] When the network interface type is detected to switch from mobile network to WiFi or from WiFi to mobile network, the electromagnetic signal acquisition parameters are determined based on the switched network interface type, and an updated electromagnetic radiation feature spectrum and an updated hardware fingerprint hash digest are generated according to the electromagnetic signal acquisition parameters.

[0045] According to the bit weight allocation rule, the updated electromagnetic radiation feature spectrum is re-bound with the updated hardware fingerprint hash digest to generate an updated chaotic encryption strategy.

[0046] The system identifies incomplete data segments due to network interface type switching, re-executes segmented encryption on the incomplete data segments using the updated chaotic encryption strategy, generates a target verification code, and achieves secure verification in network switching scenarios.

[0047] Secondly, this application provides a security verification system for incremental updates of game patches, including:

[0048] The acquisition module is used to acquire the incremental update package to be transmitted based on the operation of the game client to start the incremental update of the game patch, and simultaneously collect the electromagnetic signals generated when the terminal device runs the operation of the game client to start the incremental update of the game patch, and generate an electromagnetic radiation characteristic spectrum.

[0049] The binding module is used to generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, so as to bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key;

[0050] The processing module is used to perform chaotic parameter initialization processing based on the electromagnetic feature components and hardware hash components of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update packet to be transmitted.

[0051] The encryption module is used to perform segmented encryption processing on the data segments of the incremental update packet to be transmitted based on the chaotic encryption strategy, to obtain multiple encrypted data segments, and to generate a verification code for each encrypted data segment based on the composite key.

[0052] The update module is used to synchronously monitor the network type of the terminal device during the segmented encryption process. When the network type is detected to be switching between mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform the segmented encryption process and generate the target verification code, thereby realizing secure verification in network switching scenarios.

[0053] Thirdly, embodiments of this application provide a computing device, including a processing component and a storage component; the storage component stores one or more computer instructions; the one or more computer instructions are invoked and executed by the processing component to implement a security verification method for incremental game patch updates as described in the first aspect above.

[0054] Fourthly, embodiments of this application provide a computer storage medium storing a computer program, which, when executed by a computer, implements a security verification method for incremental updates of game patches as described in the first aspect.

[0055] In this application, based on the operation of the game client to initiate an incremental update of the game patch, an incremental update package to be transmitted is obtained, and electromagnetic signals generated when the terminal device runs the game client to initiate the incremental update of the game patch are collected simultaneously to generate an electromagnetic radiation feature spectrum; based on the hardware identification information of the terminal device, a hardware fingerprint hash digest is generated to bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key; based on the electromagnetic feature components and hardware hash components of the composite key, chaotic parameter initialization processing is performed to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted; based on the chaotic encryption strategy, the data segments of the incremental update package to be transmitted are segmented and encrypted to obtain multiple encrypted data segments, and based on the composite key, a verification code for each encrypted data segment is generated; during the segmented encryption process, the network type of the terminal device is monitored simultaneously, and when the network type is detected to switch between mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing to generate the target verification code, thereby realizing secure verification in network switching scenarios. The technical solution provided in this application achieves real-time binding of physical environment characteristics and update operations by synchronously collecting electromagnetic signals during terminal device operation and generating feature spectra. This solves the security risks of software behavior being disconnected from the hardware environment in traditional solutions and provides a physical layer basis for dynamic security verification. It dynamically binds hardware fingerprint hashes with electromagnetic feature spectra to generate composite keys that are both device-unique and environmentally adaptable, overcoming the vulnerability of static hardware binding to cloning and fundamentally blocking replay attack paths. Based on the dual feature components of the composite key, a chaotic encryption strategy is generated, allowing the encryption rules to dynamically evolve with the device's physical state, solving the problem of verification failure caused by changes in the network environment in fixed encryption algorithms. Through data segment-level encryption and composite key-driven verification code generation, end-to-end integrity protection of transmitted data is achieved, avoiding the blind spots in local tampering detection present in traditional batch encryption. During network switching, the encryption strategy is updated in real-time and the verification code is regenerated, eliminating security gaps in cross-network transmission and overcoming the risk of data exposure due to switching delays in existing solutions. Specifically, physical feature parameters are extracted from the hardware identifier of the terminal device and converted into a bit sequence. After segmentation, recombination and cross-iteration operations, an anti-collision hardware fingerprint hash is generated. The electromagnetic signal strength sequence of the preset frequency band is interpolated and bound to the hash bit sequence according to dynamic weight rules, and an environmental response composite key is generated through displacement permutation operation.

[0056] These or other aspects of this application will become more apparent in the following description of the embodiments. Attached Figure Description

[0057] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0058] Figure 1 A flowchart of a security verification method for incremental updates of game patches provided in this application is shown;

[0059] Figure 2 This application provides a schematic diagram of the structure of a security verification system for incremental updates of game patches.

[0060] Figure 3 A schematic diagram of the structure of a computing device provided in this application is shown. Detailed Implementation

[0061] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings.

[0062] In some of the processes described in the specification, claims, and accompanying drawings of this application, multiple operations appearing in a specific order are included. However, it should be clearly understood that these operations may not be executed in the order they appear herein, or may be executed in parallel. The operation numbers, such as 101, 102, etc., are merely used to distinguish different operations and do not themselves represent any execution order. Furthermore, these processes may include more or fewer operations, and these operations may be executed sequentially or in parallel. It should be noted that the descriptions such as "first," "second," etc., in this document are used to distinguish different messages, devices, modules, etc., and do not represent a chronological order, nor do they limit "first" and "second" to different types.

[0063] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0064] To address the security threats faced by mobile games during incremental patch updates in mixed 4G, 5G, and WiFi network environments, existing technologies primarily rely on static hardware fingerprints to generate encryption keys, which are insufficient to handle dynamic attacks during network switching scenarios. Since fixed encryption parameters are easily monitored and replayed, authentication mechanisms can be bypassed, failing to provide continuous security protection. To resolve these issues, this application integrates the physical characteristics of the terminal device with dynamic encryption mechanisms for security verification. This ensures strong data integrity protection and identity binding capabilities even with frequent network changes, effectively improving the security and robustness of game client patch updates in complex network environments.

[0065] Figure 1 A flowchart of a security verification method for incremental updates of game patches provided in this application is shown, such as... Figure 1 As shown, the method includes:

[0066] Step 101: Based on the operation of the game client to initiate the incremental update of the game patch, obtain the incremental update package to be transmitted, and simultaneously collect the electromagnetic signals generated when the terminal device runs the operation of the game client to initiate the incremental update of the game patch, and generate an electromagnetic radiation characteristic spectrum.

[0067] In this step, the game client refers to the game application software entity installed on the terminal device, which is responsible for initiating patch update operations; the incremental update package refers to a compressed file containing game version difference data; the terminal device refers to the physical hardware device running the game client, including mobile terminals such as mobile phones and tablets; the electromagnetic signal refers to the electromagnetic radiation analog signal generated by the central processing unit or image processor when the terminal device runs the game, with a frequency range of 1MHz-2.4GHz; the electromagnetic radiation characteristic spectrum refers to the time-frequency matrix of the electromagnetic signal after sampling and quantization by an analog-to-digital converter, which contains timestamp-intensity value pairs.

[0068] In this embodiment of the application, the incremental update package to be transmitted is obtained according to the operation instruction of the game client to start the incremental update of the game patch; at the same time, the original electromagnetic signal generated when the game client is running is collected by the electromagnetic sensor built into the terminal device, and the original electromagnetic signal is subjected to frequency band filtering, analog-to-digital conversion and time window integration processing to generate an electromagnetic radiation feature spectrum containing the time-frequency characteristics of the signal strength.

[0069] Step 102: Generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, and bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key.

[0070] In this step, hardware identification information refers to the unique physical identifier set of the terminal device, including processor serial number, storage device ID, and media access control address; hardware fingerprint hash digest refers to a 128-bit fixed-length digest of hardware identification information generated by a 256-bit secure hash algorithm; composite key refers to a 256-bit dynamic encryption key that combines electromagnetic features and hardware hash, and its validity period is one update session.

[0071] In this embodiment, physical feature values ​​are extracted from the hardware identification information of the terminal device, including the processor serial number and storage device ID; a 128-bit hardware fingerprint hash digest is generated using a 256-bit secure hash algorithm; the signal strength sequence in the electromagnetic radiation feature spectrum and the hardware fingerprint hash digest bit sequence are fused according to the odd-even bit alternation interpolation rule, and then a 256-bit composite key is generated through dynamic weight confusion.

[0072] Step 103: Perform chaotic parameter initialization processing based on the electromagnetic feature components and hardware hash components of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update packet to be transmitted.

[0073] In this step, the chaotic encryption strategy refers to a set of encryption rules containing elements such as bit order control vectors and mask parameters. In this embodiment, the electromagnetic feature component and the hardware hash component of the composite key are separated; bit expansion (e.g., 16-bit, 32-bit) is performed on the electromagnetic feature component, and chaotic parameter initialization processing is performed on the hardware hash component; the expanded dual components are superimposed proportionally to generate a chaotic parameter sequence; the incremental update packet is divided into several sub-parameter groups according to the size of the incremental update packet, and a binding relationship with the data segment is established to form a chaotic encryption strategy containing bit order control vectors.

[0074] Step 104: Based on the chaotic encryption strategy, the data segments of the incremental update packet to be transmitted are segmented and encrypted to obtain multiple encrypted data segments, and based on the composite key, a verification code for each encrypted data segment is generated.

[0075] In this step, the data segment refers to the unit to be processed after the incremental update packet is divided into 128KB blocks; the encrypted data segment refers to the data segment after bit rearrangement and masking, with an 8-bit checksum appended to the end; the verification code refers to the check value of the cyclic redundancy check generated based on the last 8 bits of the encrypted data segment and the first 8 bits of the electromagnetic feature.

[0076] In this embodiment, based on the sub-parameter group in the chaotic encryption strategy, segmentation and encryption operations are performed on the data segment to be encrypted; an 8-bit check code is extracted from the composite key and injected into the end of the data segment to generate an encrypted data segment; the last 8 bits of the encrypted data segment are extracted and XORed with the first 8 bits of the electromagnetic feature component, and then compressed through cyclic redundancy check to generate a verification code.

[0077] Step 105: During the segmented encryption process, the network type of the terminal device is monitored synchronously. When the network type is detected to be switching between mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption processing and generate the target verification code, thereby achieving secure verification in network switching scenarios.

[0078] In this step, the target verification code refers to the verification code regenerated after the network switch, which is mutually exclusive with the verification code before the switch. In this embodiment, the network interface status is polled in real time during the encryption process. When the network type is detected to switch from 4G to WiFi, the electromagnetic acquisition frequency band is adjusted according to the new interface type. The chaotic encryption strategy is regenerated based on the new electromagnetic feature spectrum and hardware hash. The data segments that have not been transmitted are re-encrypted and the target verification code is generated to achieve secure verification in the network switching scenario.

[0079] This application's embodiments generate dynamic composite keys by binding hardware hashes with electromagnetic features, solving the problem of static keys being easily cracked; they utilize chaotic parameter sequences to achieve precise matching between encryption strategies and data segments, preventing replay attacks; and they complete key regeneration in a very short time during network switching, ensuring continuous verification across network transmissions.

[0080] For example, when a user clicks the update button, the client obtains a 2.3MB incremental packet, simultaneously collects electromagnetic signals from the phone's central processing unit in the 1.8GHz band, and generates a feature spectrum containing 1500 sampling points; it reads the phone's processor serial number and storage ID, generates a hash digest, binds it to the electromagnetic feature spectrum according to parity rules, and outputs a composite key; it divides the composite key into electromagnetic / hardware components, generates a chaotic parameter sequence through bit expansion and superposition, and divides it into 18 sub-parameter groups according to the number of data segments; it performs bit rearrangement on the first 128KB data segment, injects a checksum after mask superposition, generates an encrypted data segment, and calculates the verification code; if the 4G to WiFi switch is detected during transmission, it immediately adjusts the electromagnetic acquisition to the 5GHz band, regenerates the key and strategy, and re-encrypts and transmits the remaining data segments.

[0081] This application provides a specific embodiment. Step 102 involves generating a hardware fingerprint hash digest based on the hardware identification information of the terminal device, and binding the hardware fingerprint hash digest with the electromagnetic radiation feature spectrum to generate a composite key. This specifically includes the following steps:

[0082] Step 201: Extract a set of physical hardware feature parameters from the hardware identification information of the terminal device, wherein the set of physical hardware feature parameters includes a storage device identifier.

[0083] In this step, the physical hardware feature parameter set refers to the unique physical identifier group extracted from the terminal device firmware, including unmodifiable parameters such as storage device identifier and processor serial number; the storage device identifier refers to the unique code of the storage medium, including the manufacturer ID and device serial number; in this embodiment, hardware identifier information is obtained by calling the system application interface of the terminal device, and the physical hardware feature parameter set is extracted from it; the set includes storage device identifier, processor serial number, and baseband chip version number; each parameter is converted into a binary string and merged into the original bit sequence.

[0084] Step 202: Convert each physical hardware feature parameter in the set of physical hardware feature parameters into a bit sequence, and perform segmentation and recombination processing on the bit sequence to obtain an intermediate bit sequence.

[0085] In this step, the bit sequence refers to the continuous bit stream after the hardware parameters are converted into binary, with a length range of 256-1024 bits; the intermediate bit sequence refers to the transitional bit sequence after segmentation and reassembly, which has the characteristics of bit reversal and parity segment swapping; in this embodiment of the application, the original bit sequence is segmented and reassembled: first, it is divided into multiple bit segments with a length of 64 bits, and bit reversal operation is performed on each bit segment [e.g., 1011, 1101]; then, the parity and even number bit segments are swapped (e.g., the 1st segment is swapped with the 2nd segment, and the 3rd segment is swapped with the 4th segment); finally, all bit segments are connected to generate the intermediate bit sequence.

[0086] Step 203: Perform cross-iteration operation on the intermediate bit sequence to generate hardware fingerprint hash digest. The cross-iteration operation process includes bit value swapping between adjacent bit segments and logical XOR operation across bit segments.

[0087] In this embodiment, a cross-iteration operation is performed on the middle bit sequence: the sequence is grouped into 32-bit groups, and bit swapping is performed on adjacent groups, such as swapping bits 16-32 of group i with bits 0-16 of group i+1; then, a cross-segment XOR operation is performed on non-adjacent groups, such as XORing group j with group j+2 bit by bit; after 3 rounds of iteration, a 128-bit hardware fingerprint hash digest is output.

[0088] Step 204: Convert the signal intensity of the preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and then perform alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block.

[0089] In this step, the preset frequency band refers to the target frequency range of electromagnetic signal acquisition (e.g., 2.4GHz±50MHz), matching the harmonic characteristics of the central processing unit's main frequency; the signal strength refers to the field strength amplitude detected by the electromagnetic sensor within a unit time window, in dBμV / m; the numerical sequence refers to the discrete digital sequence after the signal strength is quantized by the analog-to-digital converter, with a sampling precision of 12 bits; the initial binding data block refers to the intermediate data block generated by the first fusion of the hardware fingerprint and electromagnetic features; in this embodiment, the signal strength value in the electromagnetic radiation feature spectrum is extracted and sampled to generate a numerical sequence; this sequence and the hardware fingerprint hash digest bit sequence are interpolated alternately according to the rule of one-bit numerical sequence with two-bit sequence, such as inserting numerical sequence element A between bit sequences B and C to form [A,B,C]; the operation is repeated until the numerical sequence is exhausted, generating the initial binding data block.

[0090] Step 205: Calculate dynamic weight parameters based on the change in signal intensity of the electromagnetic radiation characteristic spectrum within a preset time window. Based on the dynamic weight parameters, perform position offset and permutation processing on the bit sequence in the initial binding data block to obtain an optimized bit sequence, and generate a composite key based on the optimized bit sequence.

[0091] In this step, the preset time window refers to the time interval for dynamic weight calculation, covering the stable period of the electromagnetic signal; the change value of signal strength refers to the peak-to-peak value of signal strength within the time window, reflecting the fluctuation of the equipment's operating status; the dynamic weight parameter refers to the displacement control quantity calculated based on the signal change value, and the calculation formula for the dynamic weight parameter is: weight = change value × proportional coefficient; the optimized bit sequence refers to the anti-analysis sequence after position offset and permutation processing, satisfying the avalanche effect criterion; the composite key refers to the finally generated 256-bit dynamic encryption key, with the high 128 bits being the electromagnetic feature binding value and the low 128 bits being the hardware hash binding value; in this embodiment, the dynamic weight parameter is calculated based on the range change value ΔS of the signal strength within the preset time window; position offset and permutation processing is performed on the initial bound data block; and the optimized bit sequence is output as the 256-bit composite key.

[0092] This application's embodiments enhance device uniqueness and prevent counterfeit terminals through hardware parameter bit recombining; cross-iterative hashing improves the digest's anti-collision capability; electromagnetic signal interpolation binding realizes dynamic coupling between the physical environment and hardware fingerprint; and weight adaptive displacement enables the key to change in real time with the electromagnetic environment.

[0093] This application provides a specific embodiment. Step 204 involves converting the signal intensity of a preset frequency band in the electromagnetic radiation characteristic spectrum into a numerical sequence, and then performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block. This specifically includes the following steps:

[0094] Step 211: Collect signal intensity values ​​of a preset frequency band in the electromagnetic radiation characteristic spectrum to generate a signal intensity value sequence, wherein the size of the acquisition window is adjusted according to the bit entropy value of the hardware fingerprint hash digest.

[0095] In this step, the signal strength value of the preset frequency band refers to the instantaneous value of the electromagnetic field strength detected within a specific frequency range (e.g., 1.8 GHz - 2.0 GHz), with the unit dBμV / m; the signal strength numerical sequence refers to the digital sequence formed by discrete sampling of the signal strength values, with the sequence length = sampling duration / acquisition window; the acquisition window refers to the time length of a single signal sampling, which is dynamically adjusted according to the bit entropy value; the bit entropy value refers to the index and value range reflecting the randomness of the hardware fingerprint hash digest, and is calculated by dividing 1 by the bit sequence length multiplied by the sum of the information entropy values ​​of the bit sequence; in this embodiment, the signal strength values ​​of the preset frequency band in the electromagnetic radiation characteristic spectrum are acquired, and the acquisition window size is adjusted according to the bit entropy value of the hardware fingerprint hash digest (e.g., window = 10 ms when entropy value > 0.9, window = 20 ms when entropy value ≤ 0.9), generating a signal strength numerical sequence sampled at equal intervals.

[0096] Step 212: According to the preset interpolation rules, the signal strength numerical sequence and the bit sequence are interpolated alternately to generate an extended sequence.

[0097] In this step, the preset interpolation rule refers to the rule that defines the insertion position of the signal value, specifically: odd-numbered bit segments are inserted before the bit segments and even-numbered bit segments are inserted after the bit segments; the extended sequence refers to the transition sequence formed by alternating combinations of signal values ​​and the original sequence, with a length equal to the length of the original sequence plus the length of the signal sequence; in this embodiment, according to the preset interpolation rule, i.e., the signal value is inserted before the odd-numbered bit segments and after the even-numbered bit segments, the elements of the signal strength value sequence are alternately inserted into the bit sequence of the hardware fingerprint hash digest to generate a hybrid extended sequence containing signal values ​​and bit segments.

[0098] Step 213: Perform bit-width alignment processing on the signal strength values ​​in the extended sequence to generate a bit-width normalized sequence.

[0099] In this step, the bit-width normalized sequence refers to the equal-width binary sequence after high-bit padding with zeros, where all elements have a uniform bit width of 8 bits. In this embodiment, bit-width alignment is performed on each signal strength value in the extended sequence: it is converted into an 8-bit binary number to make all elements have the same bit width, thus generating the bit-width normalized sequence.

[0100] Step 214: Determine the block dimension based on the storage device identifier in the set of physical hardware feature parameters, so as to divide the bit-width normalized sequence into multiple data blocks according to the block dimension.

[0101] In this step, the block dimension refers to the geometric structure of the data block division (e.g., 8×8 represents 64 bits / block), which is determined by the last 4 bits of the storage device identifier. In this embodiment, the block dimension is determined according to the last 4 bits of the storage device identifier. For example, if the last 4 bits = 1011, the dimension = 8×8. The bit-width normalized sequence is divided into multiple data blocks of equal length according to this dimension.

[0102] Step 215: Perform a block reorganization operation on the data block to generate an initial bound data block.

[0103] In this embodiment, a block reorganization operation is performed on each data block. The bit values ​​within the block are read in row-major order, and a random permutation sequence is generated using the first 4 bits of the storage device identifier as a seed. After rearranging the bit values ​​according to the sequence, all blocks are connected to generate an initial bound data block. This embodiment improves the efficiency of electromagnetic feature acquisition through a dynamic acquisition window; parity differential interpolation enhances data obfuscation; forced bit width uniformity solves the problem of heterogeneous data fusion; device identifier-driven block segmentation realizes personalized data structure; and random seed block reorganization significantly improves the anti-analysis capability of bound data blocks.

[0104] This application provides a specific embodiment. Step 103 involves performing chaotic parameter initialization processing based on the electromagnetic feature components and hardware hash components of the composite key to obtain a chaotic encryption strategy corresponding to the incremental update packet to be transmitted. This specifically includes the following steps:

[0105] Step 301: Separate the first parameter sequence corresponding to the electromagnetic feature component and the second parameter sequence corresponding to the hardware hash component from the composite key.

[0106] In this step, the first parameter sequence refers to the high 128-bit sequence of the composite key, which carries the quantized data of the electromagnetic radiation feature spectrum; the second parameter sequence refers to the low 128-bit sequence of the composite key, which carries the bit stream of the hardware fingerprint hash digest; in this embodiment, the high 128 bits are separated from the 256-bit composite key as the first parameter sequence corresponding to the electromagnetic feature component, and the low 128 bits are separated as the second parameter sequence corresponding to the hardware hash component.

[0107] Step 302: According to the preset alternation rule, merge the first parameter sequence and the second parameter sequence into an initial parameter sequence.

[0108] In this step, the preset alternating arrangement rule refers to the rule that defines the mixing order of the two sequence elements; the initial parameter sequence refers to the transition sequence generated by the alternating arrangement, and the length of the transition sequence = the length of the first sequence + the length of the second sequence; in this embodiment of the application, according to the preset alternating arrangement rule, that is, the elements of the first parameter sequence and the elements of the second parameter sequence alternate in a 3:1 ratio, and the two sequences are merged into a 256-bit initial parameter sequence.

[0109] Step 303: Perform bit expansion and superposition operations on the electromagnetic feature elements in the initial parameter sequence and the adjacent hardware hash bit segments to generate an expanded parameter sequence.

[0110] In this step, the electromagnetic feature element refers to the 8-bit basic unit of the first parameter sequence, representing the average electromagnetic intensity within a specific time window; the hardware hash segment refers to the 8-bit continuous segment of the second parameter sequence, derived from the local hash value of the hardware fingerprint; the extended parameter sequence refers to the encrypted intermediate sequence generated after bit expansion and superposition operations, with its length doubled to 512 bits; in this embodiment, each electromagnetic feature element in the initial parameter sequence is expanded by 16 bits (padded with zeros at the high bits), and adjacent hardware hash segments are recombined by parity bit swapping; the expanded electromagnetic unit and the recombined hash unit are superimposed according to the rule of passing the high 8 bits through and XORing the low 8 bits to generate the extended parameter sequence.

[0111] Step 304: Extract chaotic mapping input parameters from the extended parameter sequence to generate a chaotic parameter sequence, wherein the chaotic mapping input parameters include the initial value and the iteration step size.

[0112] In this step, the chaotic mapping input parameters refer to the initialization parameters of the chaotic system, including the initial value and the iteration step size; the chaotic parameter sequence refers to the pseudo-random sequence generated by the chaotic mapping iteration, which is used to control the encryption operation; the iteration step size refers to the step value of the chaotic iteration, and the calculation formula is the last 8 bits of the extended sequence divided by 16 and rounded down; in this embodiment, 24 bits are extracted from the beginning of the extended parameter sequence as the chaotic mapping starting value, and 8 bits are extracted from the end to calculate the iteration step size; a 512-bit chaotic parameter sequence is generated through chaotic mapping iteration.

[0113] Step 305: Divide the chaotic parameter sequence into multiple sub-parameter groups corresponding to the data segments of the incremental update packet to be transmitted.

[0114] In this step, multiple sub-parameter groups refer to the set of fragments after the chaotic parameter sequence is divided equally according to the number of data segments; in the embodiment of this application, the chaotic parameter sequence is divided into an equal number of sub-parameter groups according to the number of data segments of the incremental update packet to be transmitted (e.g., 18 segments).

[0115] Step 306: Establish the binding relationship between the data segment of the incremental update packet to be transmitted and the corresponding sub-parameter group to generate a chaotic encryption strategy.

[0116] In this embodiment, a one-to-one binding relationship is established between each data segment and a sub-parameter group, generating a chaotic encryption strategy that includes a bit order control vector and mask parameters. This embodiment achieves electromagnetic feature-driven encryption control through a 3:1 alternating arrangement; 16-bit extension and recombination enhance the parameter's anti-analysis capability; the superposition rule of high 8-bit passthrough and low 8-bit XOR balances efficiency and security; device-driven chaotic parameters ensure that the same input produces differentiated outputs on different terminals; and equal sub-parameter groups achieve precise matching between the encryption strategy and the data segment.

[0117] This application provides a specific embodiment. Step 303 involves performing bit expansion and superposition operations on the electromagnetic feature elements in the initial parameter sequence and adjacent hardware hash bit segments to generate an expanded parameter sequence. This specifically includes the following steps:

[0118] Step 311: Perform bit expansion processing on the electromagnetic feature elements in the initial parameter sequence to obtain expanded electromagnetic feature units.

[0119] In this step, the extended electromagnetic feature unit refers to the binary unit after the electromagnetic feature element has been extended by 16 bits, with the high 8 bits fixed as 0 and the low 8 bits as the original value. In this embodiment, bit extension processing is performed on each 8-bit electromagnetic feature element in the initial parameter sequence, and it is extended to a 16-bit binary number by padding the high bits with zeros to generate the extended electromagnetic feature unit.

[0120] Step 312: Group and swap the hardware hash segments adjacent to the electromagnetic feature element to obtain swapped segments, and perform a cyclic right shift operation on the swapped segments to generate recombined hash units.

[0121] In this step, the swapped bit segment refers to the intermediate result after the hardware hash bit segment is divided into two 4-bit groups and their positions are swapped; the recombined hash unit refers to the 8-bit unit generated by the swapped bit segment through a cyclic right shift, and the shift number is determined by the last 3 bits of the adjacent electromagnetic feature element; in this embodiment, an 8-bit hardware hash bit segment adjacent to the electromagnetic feature element is selected, first divided into two groups of 4 bits each, and the positions of the two groups are swapped; then a cyclic right shift operation is performed on the swapped bit segment (shift number = the last 3 bits of the electromagnetic feature element) to generate a recombined hash unit.

[0122] Step 313: According to the preset superposition rules, combine the extended electromagnetic feature unit and the recombined hash unit into an extended unit segment.

[0123] In this step, the preset superposition rule refers to the rule defining the generation method of the extended unit segment, that is, retaining the high 8 bits of the electromagnetic unit, and XORing the low 8 bits of the electromagnetic unit with the low 8 bits of the hash unit; the extended unit segment refers to the 16-bit data unit output after the superposition operation, with the structure of: high 8 bits of electromagnetic unit + 8 bits of XOR result; in this embodiment of the application, according to the preset superposition rule, that is, the high 8 bits of the extended electromagnetic feature unit are output directly, the low 8 bits of the recombined hash unit are XORed with the low 8 bits of the electromagnetic feature unit, and the two are combined into a 16-bit extended unit segment.

[0124] Step 314: Determine the target sequence length based on the number of data segments in the incremental update packet to be transmitted, and perform connection and length adaptation operations on the extended unit segments to generate an extended parameter sequence.

[0125] In this step, the target sequence length refers to the target bit length of the extended parameter sequence. The target bit length is calculated by multiplying the number of data segments by 32. In this embodiment, the target sequence length is determined according to the number of data segments in the incremental update packet, and all extended unit segments are connected in sequence. The length adaptation operation is performed on the connected sequence, that is, if it is insufficient, the high bits are padded with zeros, and if it exceeds the limit, the lower 32 bits are truncated to generate the extended parameter sequence.

[0126] The embodiments of this application enhance parameter randomness through a triple operation of bit extension, packet switching, and shift reassembly; the high 8 bits pass through to preserve the dominance of electromagnetic characteristics; and the data segment-driven length adaptation ensures that the encryption strategy accurately matches the transmission requirements.

[0127] This application provides a specific embodiment. Step 104 involves segmenting and encrypting the data segment of the incremental update packet to be transmitted based on the chaotic encryption strategy to obtain multiple encrypted data segments, and generating a verification code for each encrypted data segment based on the composite key. The specific steps include:

[0128] Step 401: Extract the sub-parameter group and bit order control vector bound to the data segment of the incremental update packet to be transmitted from the chaotic encryption strategy. Based on the bit order control vector, rearrange the bit order of the byte sequence of the data segment to generate a rearranged bit sequence.

[0129] In this step, the bit order control vector refers to the index array (such as [2,0,3,1]) that defines the byte bit rearrangement order, and its length is equal to the data segment bit width; the byte sequence refers to the original binary representation of the data segment to be encrypted, with each 8 bits constituting a byte unit; the rearranged bit sequence refers to the bit stream after the byte sequence is rearranged according to the bit order control vector; in this embodiment, the sub-parameter group and bit order control vector bound to the current data segment are extracted from the chaotic encryption strategy, and the bit position rearrangement operation is performed on the byte sequence of the data segment according to the bit order mapping rule defined by the bit order control vector to generate the rearranged bit sequence.

[0130] Step 402: Perform a mask overlay operation on the rearranged sequence based on the mask parameters in the sub-parameter group to generate a mask processing data block.

[0131] In this step, the mask parameter refers to a fixed or dynamic value used for the bitwise XOR operation; the mask processing data block refers to the intermediate data block after the rearranged sequence is XORed with the mask parameter; in this embodiment of the application, the mask parameter is extracted from the sub-parameter group, and a bitwise XOR mask superposition operation is performed on the rearranged sequence to generate the mask processing data block.

[0132] Step 403: According to the preset padding rules, expand the mask processing data block to the target length to generate the padded data block.

[0133] In this step, the preset padding rule refers to the data block length standardization rule, that is, if the length is less than 128 bits, zeros are added to the end, and if the length is too long, the low bits are truncated; the padded data block refers to the 128-bit standard data block after length adaptation; in this embodiment of the application, according to the preset padding rule, that is, if the length is less than 128 bits, 0x00 is added to the end, and if the length is too long, the low bits are truncated, the masked data block is extended to the target length of 128 bits to generate the padded data block.

[0134] Step 404: Extract the verification bit segment based on the hardware hash component of the composite key, and inject the verification bit segment into the specified position of the padded data block to generate an encrypted data segment.

[0135] In this step, the verification bit field refers to the 8-bit verification identifier extracted from the hardware hash component of the composite key.

[0136] In this embodiment, the last 8 bits of the hardware hash component of the composite key are extracted as a check bit segment, and the data block after filling is inserted at a preset injection position (e.g., 2 bits are inserted every 32 bits) to generate an encrypted data segment.

[0137] Step 405: Extract the check bit segment from the encrypted data segment, combine it with the electromagnetic feature components of the composite key, perform an alternating bit concatenation operation, and generate the verification code input sequence.

[0138] In this step, the verification code input sequence refers to the bit sequence formed by alternating concatenation of the verification bit segment and the electromagnetic feature component. In this embodiment, the injected verification bit segment is extracted from the encrypted data segment and alternately concatenated with the first 8 bits of the composite key electromagnetic feature component, i.e., 1 verification bit + 1 feature bit, to generate the verification code input sequence.

[0139] Step 406: Perform compression processing on the verification code input sequence to generate a verification code for each encrypted data segment; in this embodiment of the application, the verification code input sequence is compressed to generate an 8-bit verification code.

[0140] This scheme disrupts the original data structure by rearranging bit order, introduces nonlinear transformation by dynamic mask superposition, ensures that the encrypted block is compatible with the transmission protocol by standardized padding, and achieves end-to-end integrity verification by fusing the two components of the key to generate a verification code.

[0141] This application provides a specific embodiment. Step 105 involves synchronously monitoring the network type of the terminal device during the segmented encryption process. When a switch between mobile network and WiFi is detected, the chaotic encryption strategy is updated according to the switched network interface to re-perform segmented encryption and generate the target verification code, thereby achieving secure verification in network switching scenarios. Specifically, this includes the following steps:

[0142] Step 501: During the segmented encryption process, poll the network interface status of the terminal device to monitor the network interface type of the terminal device; Step 502: When the network interface type is detected to switch from mobile network to WiFi or from WiFi to mobile network, determine the electromagnetic signal acquisition parameters based on the switched network interface type, and generate an updated electromagnetic radiation feature spectrum and an updated hardware fingerprint hash digest according to the electromagnetic signal acquisition parameters; Step 503: Rebind the updated electromagnetic radiation feature spectrum and the updated hardware fingerprint hash digest according to the bit weight allocation rules to generate an updated chaotic encryption strategy; Step 504: Identify the incomplete transmission data segments caused by the network interface type switch, and re-execute the segmented encryption process on the incomplete transmission data segments using the updated chaotic encryption strategy to generate a target verification code, thereby achieving security verification in network switching scenarios.

[0143] In the above process, network interface status refers to the real-time network connection information of the terminal device, including connection status, signal strength, and network type encoding; network interface type refers to the currently active network connection technology classification, including mobile network and WiFi; electromagnetic signal acquisition parameters refer to the configuration set of signal acquisition, including target frequency band and sampling rate; updated electromagnetic radiation feature spectrum refers to the electromagnetic signal time-frequency matrix generated after network switching according to the new parameters; updated hardware fingerprint hash digest refers to the 128-bit hardware feature digest recalculated during network switching to prevent device spoofing attacks; bit weight allocation rule refers to the calculation formula defining the proportion of electromagnetic feature and hash feature in key binding as: mobile network weight = 0.7 × electromagnetic + 0.3 × hash; updated chaotic encryption strategy refers to the encryption rule set generated based on the new binding relationship, including elements such as bit order control vector and mask parameters; incomplete transmission data segment refers to data packets that have been sent but have not received server confirmation during network switching, identified by TCP sequence number.

[0144] In this embodiment, during the segmented encryption process, the network interface status is polled every 100 milliseconds by calling the network connection manager of the terminal device to obtain the current network interface type identifier. When it is detected that the network interface type has switched from mobile network to WiFi or vice versa, the electromagnetic signal acquisition parameters are determined based on the new interface type (e.g., when WiFi switches to 4G, the frequency band switches from 5GHz to 800MHz). The electromagnetic signal is reacquired according to the new parameters to generate an updated electromagnetic radiation feature spectrum, and the hardware fingerprint hash digest is recalculated. According to the bit weight allocation rules (e.g., the electromagnetic feature weight in the mobile network environment is 0.7, and the weight in the WiFi environment is 0.6), the updated electromagnetic radiation feature spectrum and the hardware fingerprint hash digest are rebound to generate an updated chaotic encryption strategy. Encrypted data segments that have not received a server confirmation character response due to network switching are identified, and the new chaotic encryption strategy is used to re-segment and encrypt them to generate a secure data packet containing the target verification code, thereby achieving security verification in network switching scenarios.

[0145] This application's embodiments achieve real-time switching awareness through millisecond-level network polling; frequency band adaptive acquisition ensures that electromagnetic characteristics match the environment; and dynamic weight binding solves the problem of cross-network key failure.

[0146] Figure 2 This application provides a schematic diagram of the security verification system for incremental updates of game patches. Figure 2 As shown, the system includes:

[0147] The acquisition module 21 is used to acquire the incremental update package to be transmitted based on the operation of the game client to start the incremental update of the game patch, and simultaneously collect the electromagnetic signals generated when the terminal device runs the operation of the game client to start the incremental update of the game patch, and generate an electromagnetic radiation characteristic spectrum.

[0148] The binding module 22 is used to generate a hardware fingerprint hash digest based on the hardware identification information of the terminal device, so as to bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key.

[0149] Processing module 23 is used to perform chaotic parameter initialization processing based on the electromagnetic feature component and hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update packet to be transmitted.

[0150] The encryption module 24 is used to perform segmented encryption processing on the data segments of the incremental update packet to be transmitted based on the chaotic encryption strategy, to obtain multiple encrypted data segments, and to generate a verification code for each encrypted data segment based on the composite key.

[0151] The update module 25 is used to synchronously monitor the network type of the terminal device during the segmented encryption process. When the network type is detected to be switching between mobile network and WiFi, the chaotic encryption strategy is updated according to the switched network interface to re-perform the segmented encryption process and generate the target verification code, thereby realizing security verification in the network switching scenario.

[0152] Figure 2 The aforementioned security verification system for incremental game patch updates can execute... Figure 1 The implementation principle and technical effects of the security verification method for incremental game patch updates described in the illustrated embodiment will not be elaborated further. The specific methods by which each module and unit performs operations in the security verification system for incremental game patch updates described in the above embodiments have been described in detail in the embodiments related to this method, and will not be elaborated upon here.

[0153] In one possible design, Figure 2 The security verification system for incremental updates of game patches in the illustrated embodiment can be implemented as a computing device, such as... Figure 3 As shown, the computing device may include a storage component 31 and a processing component 32;

[0154] The storage component 31 stores one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processing component 32.

[0155] The processing component 32 is used for the above Figure 1 The embodiment describes a security verification method for incremental updates of game patches. The processing component 32 may include one or more processors to execute computer instructions to complete all or part of the steps in the method described above. Alternatively, the processing component may be implemented as one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to execute the method.

[0156] Storage component 31 is configured to store various types of data to support operations on the terminal. The storage component can be implemented from any type of volatile or non-volatile storage device or a combination thereof, such as Random Access Memory (RAM), Static Random-Access Memory (SRAM), Electrically Erasable Programmable Read Only Memory (EEPROM), Erasable Programmable Read Only Memory (EPROM), Programmable Read Only Memory (PROM), Read Only Memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. Of course, the computing device may also include other components, such as input / output interfaces, display components, and communication components. Input / output interfaces provide an interface between the processing components and peripheral interface modules, which can be output devices, input devices, etc. Communication components are configured to facilitate wired or wireless communication between the computing device and other devices.

[0157] The computing device can be a physical device or an elastic computing host provided by a cloud computing platform. In this case, the computing device can refer to a cloud server, and the aforementioned processing components, storage components, etc., can be basic server resources rented or purchased from the cloud computing platform.

[0158] This application also provides a computer storage medium storing a computer program, which, when executed by a computer, can perform the above-described functions. Figure 1 The illustrated embodiment provides a security verification method for incremental updates of game patches.

[0159] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0160] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0161] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0162] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A security verification method for patch delta update of a game, characterized in that, The method comprises the following steps: According to the operation of starting the game patch incremental update of the game client, the incremental update package to be transmitted is obtained, and the electromagnetic signal generated when the terminal device runs the game client to start the game patch incremental update is synchronously collected to generate an electromagnetic radiation feature spectrum; According to the hardware identification information of the terminal device, a hardware fingerprint hash digest is generated to bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key; Chaotic parameter initialization processing is performed based on the electromagnetic feature component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted; Based on the chaotic encryption strategy, the data segments of the incremental update package to be transmitted are segmented and encrypted to obtain a plurality of encrypted data segments, and based on the composite key, a verification code of each encrypted data segment is generated; In the process of segmenting and encrypting, the network type of the terminal device is synchronously monitored, and when it is detected that the network type switches between a mobile network and a WiFi, the chaotic encryption strategy is updated according to the network interface after the switching to re-perform the segmenting and encrypting to generate a target verification code, thereby realizing the security verification in the network switching scenario.

2. The method of claim 1, wherein, According to the hardware identification information of the terminal device, a hardware fingerprint hash digest is generated to bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum to generate a composite key, comprising: Extracting a set of physical hardware feature parameters from the hardware identification information of the terminal device, the set of physical hardware feature parameters including a storage device identifier; Converting each physical hardware feature parameter in the set of physical hardware feature parameters into a bit sequence, and performing segmenting and recombining processing on the bit sequence to obtain an intermediate bit sequence; Performing cross-iteration operation on the intermediate bit sequence to generate a hardware fingerprint hash digest, the process of cross-iteration operation including bit value exchange of adjacent bit segments and logical XOR operation across bit segments; Converting the signal strength of a preset frequency band in the electromagnetic radiation feature spectrum into a numerical sequence, and performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block; According to the change value of the signal strength of the electromagnetic radiation feature spectrum within a preset time window, a dynamic weight parameter is calculated, and based on the dynamic weight parameter, position offset and permutation processing are performed on the bit sequence in the initial binding data block to obtain an optimized bit sequence, and the composite key is generated based on the optimized bit sequence.

3. The method of claim 2, wherein, Converting the signal strength of a preset frequency band in the electromagnetic radiation feature spectrum into a numerical sequence, and performing alternating interpolation processing on the numerical sequence and the bit sequence to generate an initial binding data block, comprising: Collecting the signal strength value of a preset frequency band in the electromagnetic radiation feature spectrum to generate a signal strength numerical sequence, wherein the collection window size is adjusted according to the bit entropy value of the hardware fingerprint hash digest; According to a preset interpolation rule, the signal strength numerical sequence and the bit sequence are alternately interpolated to generate an extended sequence; Performing bit width alignment processing on the signal strength values in the extended sequence to generate a bit width standardized sequence; According to the storage device identifier in the physical hardware feature parameter set, a block dimension is determined to divide the bit width standardization sequence into a plurality of data blocks according to the block dimension; A block reorganization operation is performed on the data blocks to generate initial binding data blocks.

4. The method of claim 1, wherein, Chaotic parameter initialization processing is performed based on the electromagnetic feature component and the hardware hash component of the composite key to obtain a chaotic encryption strategy corresponding to the transmission of the incremental update package to be transmitted, including: Separating the first parameter sequence corresponding to the electromagnetic feature component and the second parameter sequence corresponding to the hardware hash component from the composite key; According to a preset alternating arrangement rule, the first parameter sequence and the second parameter sequence are combined into an initial parameter sequence; Bit extension and superposition operations are performed on the electromagnetic feature elements and the adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence; Chaotic mapping input parameters are extracted from the extended parameter sequence to generate a chaotic parameter sequence, and the chaotic mapping input parameters include a starting value and an iteration step length; The chaotic parameter sequence is divided into a plurality of sub-parameter groups corresponding to the data segments of the incremental update package to be transmitted; A binding relationship between the data segments of the incremental update package to be transmitted and the corresponding sub-parameter groups is established to generate a chaotic encryption strategy.

5. The method of claim 4, wherein, Bit extension and superposition operations are performed on the electromagnetic feature elements and the adjacent hardware hash bit segments in the initial parameter sequence to generate an extended parameter sequence, including: Bit extension processing is performed on the electromagnetic feature elements in the initial parameter sequence to obtain extended electromagnetic feature elements; Grouping and exchange grouping processing is performed on the hardware hash bit segments adjacent to the electromagnetic feature elements to obtain exchanged bit segments, and a right circular shift operation is performed on the exchanged bit segments to generate reorganized hash elements; According to a preset superposition rule, the extended electromagnetic feature elements and the reorganized hash elements are combined into an extended unit segment; According to the number of data segments of the incremental update package to be transmitted, a target sequence length is determined to connect and length-adapt the extended unit segment to generate an extended parameter sequence.

6. The method of claim 1, wherein, Based on the chaotic encryption strategy, the data segments of the incremental update package to be transmitted are subjected to segmented encryption processing to obtain a plurality of encrypted data segments, and based on the composite key, a verification code for each encrypted data segment is generated, including: From the chaotic encryption strategy, a sub-parameter group and a bit sequence control vector bound to the data segments of the incremental update package to be transmitted are extracted, and based on the bit sequence control vector, the byte sequence of the data segments is subjected to bit sequence rearrangement to generate a rearranged bit sequence; Based on the mask parameter in the sub-parameter group, mask superposition operations are performed on the rearranged bit sequence to generate a mask processing data block; According to a preset padding rule, the mask processing data block is extended to a target length to generate a padded data block; According to the hardware hash component of the composite key, a check bit segment is intercepted and inserted into a specified position of the padded data block to generate an encrypted data segment; From the encrypted data segment, a check bit segment is extracted, combined with the electromagnetic feature component of the composite key, and subjected to alternating bit splicing operations to generate a verification code input sequence; The verification code input sequence is compressed to generate a verification code for each encrypted data segment.

7. The method of claim 1, wherein, Synchronously monitor the network type of the terminal device during the segmented encryption process, and when detecting that the network type switches between a mobile network and WiFi, update the chaotic encryption strategy according to the network interface after the switching, to re-perform the segmented encryption process to generate a target verification code, thereby achieving security verification in a network switching scenario. Poll the network interface state of the terminal device during the segmented encryption process, to monitor the network interface type of the terminal device. When detecting that the network interface type switches from a mobile network to WiFi or from WiFi to a mobile network, determine electromagnetic signal acquisition parameters based on the network interface type after the switching, and generate an updated electromagnetic radiation feature spectrum and an updated hardware fingerprint hash digest according to the electromagnetic signal acquisition parameters. Re-bind the updated electromagnetic radiation feature spectrum and the updated hardware fingerprint hash digest according to a bit weight allocation rule, to generate an updated chaotic encryption strategy. Identify incomplete transmission data segments caused by network interface type switching, re-perform segmented encryption processing on the incomplete transmission data segments using the updated chaotic encryption strategy, generate a target verification code, and achieve security verification in a network switching scenario.

8. A security verification system for patch delta updates for games, characterized in that, The method comprises the following steps: The acquisition module is configured to acquire an incremental update package to be transmitted according to an operation of starting an incremental update of a game patch by a game client, and synchronously collect electromagnetic signals generated when the terminal device runs the game client to start the incremental update of the game patch, to generate an electromagnetic radiation feature spectrum. The binding module is configured to generate a hardware fingerprint hash digest according to hardware identification information of the terminal device, bind the hardware fingerprint hash digest and the electromagnetic radiation feature spectrum, and generate a composite key. The processing module is configured to perform chaotic parameter initialization processing based on electromagnetic feature components and hardware hash components of the composite key, to obtain a chaotic encryption strategy corresponding to transmission of the incremental update package to be transmitted. The encryption module is configured to perform segmented encryption processing on data segments of the incremental update package to be transmitted based on the chaotic encryption strategy, to obtain a plurality of encrypted data segments, and generate a verification code for each encrypted data segment based on the composite key. The update module is configured to synchronously monitor the network type of the terminal device during the segmented encryption process, and when detecting that the network type switches between a mobile network and WiFi, update the chaotic encryption strategy according to the network interface after the switching, to re-perform the segmented encryption process to generate a target verification code, thereby achieving security verification in a network switching scenario.

9. A computing device, comprising: The processing component and the storage component are included; the storage component stores one or more computer instructions; the one or more computer instructions are used to be called and executed by the processing component, to implement the security verification method for the incremental update of the game patch according to any one of claims 1-7.

10. A computer storage medium, characterized in that, The computer program is stored in the computer, and when the computer program is executed by the computer, the security verification method for the incremental update of the game patch according to any one of claims 1-7 is implemented.

Images