Smart home appliances, control methods for smart home appliances, computer equipment and storage media

Abstract

This application relates to a smart home appliance, a control method for the smart home appliance, a computer device, and a storage medium. The smart home appliance includes: a communicator; a controller, which establishes communication connections with a firmware upgrade server and an operations support system server via the communicator; the controller is configured to: in response to a firmware upgrade command for the smart home appliance, send a first firmware upgrade request to the firmware upgrade server, and receive a first certificate chain returned by the firmware upgrade server in response to the first firmware upgrade request; if the verification of the first certificate chain using a pre-installed root certificate fails, send a target fault command to the operations support system server; receive a target root certificate returned by the operations support system server in response to the target fault command, and update the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of the smart home appliance, enabling the controller to update the root certificate in a timely manner and improving the reliability of firmware updates for the smart home appliance.

Description

Technical Field

[0001] This application relates to the field of smart home appliance technology, and in particular to a smart home appliance, a control method for a smart home appliance, a computer device, and a storage medium. Background Technology

[0002] When using third-party servers to provide OTA services (such as firmware upgrades), certificate verification is a core part of ensuring upgrade security. Verification of the root certificate can ensure that the firmware downloaded to the device comes from a legitimate server and has not been tampered with or replaced, preventing the implantation of malicious firmware.

[0003] If the root certificate of a third-party server needs to be updated due to expiration, security reasons (such as private key leakage), or changes in institutional policies, the root certificate built into the smart home appliance also needs to be updated synchronously. Otherwise, the smart home appliance will be unable to complete the root certificate verification when performing firmware upgrades.

[0004] Existing smart home appliances cannot update the root certificate of the built-in third-party server, or if the download address of the third-party server's root certificate changes after the update, the smart home appliance cannot obtain the new root certificate download address. This causes the smart home appliance to fail to complete root certificate verification during firmware upgrades. In this case, if the user keeps initiating firmware upgrade tasks on the mobile device, it will keep prompting failures, affecting the reliability of smart home appliance firmware updates. Summary of the Invention

[0005] Therefore, it is necessary to provide a smart home appliance, a control method for a smart home appliance, a computer device, a computer-readable storage medium, and a computer program product that can improve the reliability of firmware updates for smart home appliances, in response to the above-mentioned technical problems.

[0006] In a first aspect, this application provides a smart home appliance, including:

[0007] Communicator;

[0008] The controller establishes communication connections with the firmware upgrade server and the operations support system server via communicators; among them,

[0009] The controller is configured as follows:

[0010] In response to a firmware upgrade command for a smart home appliance, a first firmware upgrade request is sent to the firmware upgrade server, and a first certificate chain is received from the firmware upgrade server in response to the first firmware upgrade request.

[0011] If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault command is sent to the operations support system server.

[0012] Receive the target root certificate returned by the operation support system server in response to the target fault command, and update the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of smart home appliances;

[0013] The operations support system server is configured as follows:

[0014] In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address;

[0015] Send a second firmware upgrade request to the firmware upgrade server and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request.

[0016] If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

[0017] The above technical solution has the following advantages or effects: When the controller fails to verify the first certificate chain using the pre-installed root certificate, it sends a target fault command to the operation support system server. The operation support system server then downloads a new root certificate from the firmware upgrade server. If the second certificate chain is verified successfully using the new root certificate, the new root certificate is sent to the controller as the target root certificate. This enables the controller to update its root certificate in a timely manner, ensuring that the updated root certificate is consistent with the root certificate on the firmware upgrade server. This, in turn, ensures the validity of the controller's root certificate, thereby completing the subsequent firmware upgrade task for smart home appliances and improving the reliability of smart home appliance firmware updates.

[0018] In one embodiment, the operations support system server is configured as follows:

[0019] If the verification of the second certificate chain using the new root certificate fails, update the preset root certificate download address to obtain the updated download address;

[0020] Download the corresponding root certificate from the firmware upgrade server according to the updated download address, and use the corresponding root certificate as the new root certificate.

[0021] Return to the step of sending a second firmware upgrade request to the firmware upgrade server until the second certificate chain is verified using a new root certificate.

[0022] The above technical solution has the following advantages or effects: by updating the root certificate through the operation support system server and verifying the new root certificate to determine its validity, the target root certificate issued to the controller is guaranteed to be valid, thereby improving the reliability of smart home appliance firmware updates.

[0023] In one embodiment, the controller is configured to:

[0024] The system receives an encrypted and signed file package returned by the operations support system server. Based on a preset salt value, it decrypts the encrypted and signed file package to obtain the root certificate file and the first signature value. The first signature value is calculated by the operations support system server based on a preset signature algorithm, using the target root certificate and the preset salt value.

[0025] Based on the preset signature algorithm, the root certificate file and the preset salt value are used to calculate the second signature value;

[0026] If the second signature value is the same as the first signature value, the root certificate file will be used as the target root certificate.

[0027] The above technical solution has the following advantages or effects: By encrypting the target root certificate, the confidentiality of the target root certificate's data during transmission can be ensured. By comparing the second signature value with the first signature value, the integrity of the target root certificate's data during transmission can be ensured.

[0028] In one embodiment, the controller is configured to:

[0029] Obtain the validity period of the pre-installed root certificate;

[0030] Within a preset time period before the expiration date, send a root certificate update request to the operations support system server;

[0031] Receive the new root certificate returned by the operations support system server and update the pre-installed root certificate to the new root certificate.

[0032] The above technical solution has the following advantages or effects: by checking the validity period of the pre-installed root certificate by the controller, and requesting a new root certificate from the operation support system server before the expiration date, it can be ensured that the pre-installed root certificate can be updated in a timely manner.

[0033] In one embodiment, the root certificate update request includes a first identifier, which is generated based on a pre-installed root certificate and a preset salt value. The operations support system server is configured as follows:

[0034] Generate a second signature based on the new root certificate and the preset salt value;

[0035] If the second identifier is different from the first identifier, send a new root certificate to the controller.

[0036] The above technical solution has the following advantages or effects: by comparing the second identifier with the first identifier, it can be determined whether to issue a new root certificate to the controller, so as to realize the timely update of the root certificate pre-installed in the controller.

[0037] In one embodiment, the operations support system server is configured as follows:

[0038] Configure firmware upgrade tasks for smart home appliances; push firmware upgrade tasks to user terminals;

[0039] Receive the firmware upgrade confirmation command returned by the user terminal and send the firmware upgrade command to the controller.

[0040] The above technical solution has the following advantages or effects: through the communication and interaction between the user terminal, the operation support system server and the controller, it is convenient for users to manage and control the firmware upgrade of smart home appliances.

[0041] Secondly, this application also provides a control method for a smart home appliance, the smart home appliance including a controller, the method comprising:

[0042] In response to a firmware upgrade command for a smart home appliance, a first firmware upgrade request is sent to the firmware upgrade server, and a first certificate chain is received from the firmware upgrade server in response to the first firmware upgrade request.

[0043] If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault command is sent to the operations support system server.

[0044] Receive the target root certificate returned by the operation support system server in response to the target fault command, and update the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of smart home appliances;

[0045] The operations support system server is configured as follows:

[0046] In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address;

[0047] Send a second firmware upgrade request to the firmware upgrade server and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request.

[0048] If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

[0049] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method steps of the second aspect.

[0050] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method steps of the second aspect.

[0051] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the method steps of the second aspect.

[0052] The aforementioned smart home appliances, smart home appliance control methods, computer equipment, computer-readable storage media, and computer program products, through the controller, when the verification of the first certificate chain using the pre-installed root certificate fails, send a target fault command to the operation support system server. The operation support system server then downloads a new root certificate from the firmware upgrade server. If the verification of the second certificate chain using the new root certificate passes, the new root certificate is sent to the controller as the target root certificate. This enables the controller to update its root certificate in a timely manner, ensuring that the updated root certificate is consistent with the root certificate on the firmware upgrade server, thereby ensuring the validity of the controller's root certificate and completing the subsequent firmware upgrade task for the smart home appliances, thus improving the reliability of smart home appliance firmware updates. Attached Figure Description

[0053] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0054] Figure 1 This is a schematic diagram of a smart home appliance in one embodiment;

[0055] Figure 2 This is a structural block diagram of a smart home appliance in one embodiment;

[0056] Figure 3 This is a communication timing diagram of the controller, firmware server, and operation support system server in one embodiment;

[0057] Figure 4 This is a schematic diagram illustrating the process of updating the root certificate on the operations support system server in one embodiment;

[0058] Figure 5 This is a schematic diagram of the target root certificate decryption and designing process in one embodiment;

[0059] Figure 6 This is a schematic diagram of the root certificate update process in one embodiment;

[0060] Figure 7 This is a schematic diagram of the root certificate issuance process in one embodiment;

[0061] Figure 8 This is a schematic diagram of the firmware upgrade instruction generation process in one embodiment;

[0062] Figure 9 This is a firmware upgrade architecture diagram of a smart home appliance in one embodiment;

[0063] Figure 10 This is a schematic diagram of the firmware upgrade process for a smart home appliance in one embodiment;

[0064] Figure 11 This is a flowchart illustrating a control method for smart home appliances in one embodiment;

[0065] Figure 12 This is a structural block diagram of a control device for a smart home appliance in one embodiment;

[0066] Figure 13 This is a structural block diagram of the control device for a smart home appliance in another embodiment;

[0067] Figure 14 This is a structural block diagram of the control device for a smart home appliance in yet another embodiment;

[0068] Figure 15 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0069] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0070] Smart home appliances include, but are not limited to, smart air conditioners, smart TVs, smart refrigerators, and smart speakers.

[0071] OTA (Over the Air) refers to the technology of remotely managing and upgrading devices via wireless networks (such as Wi-Fi, mobile cellular networks, etc.).

[0072] Over-the-air (OTA) firmware upgrades refer to remotely upgrading device firmware (device software) using OTA technology. Firmware upgrades include feature iteration updates, vulnerability patching and security hardening, performance optimization, and problem fixing, among other things. Taking air conditioners as an example of smart home appliances, firmware upgrades in air conditioners include upgrades to the MCU, EEPROM, drivers, and display boards of both the indoor and outdoor units.

[0073] Certificate verification refers to a security mechanism used during firmware OTA upgrades to verify the legitimacy, integrity, and tamper-proof nature of the upgrade package source through digital certificate technology. It is a core safeguard against malicious firmware injection and ensures the trustworthiness of the upgrade process, essentially adding a "digital lock" to the OTA upgrade. The root certificate verification process generally follows: The smart home appliance initiates a TLS connection with the server (e.g., requesting OTA firmware). During the handshake, the server sends the "server certificate + intermediate certificate" together to the smart home appliance (forming a complete certificate chain). Upon receiving the certificate, the smart home appliance uses the pre-installed root certificate to verify the legitimacy of the intermediate certificate, and then uses the intermediate certificate to verify the legitimacy of the server certificate. If all requirements are met, the certificate verification passes; otherwise, it fails.

[0074] OSS server is an abbreviation for Operation Support System server, a core information system used by home appliance servers to support business operations, resource management, and service assurance. It integrates data, processes, and tools to monitor, manage, and optimize the entire business lifecycle, ensuring stable service operation and improving operational efficiency. The OSS server in this application can perform user account management, home appliance management, root certificate management, and firmware management for various home appliances (firmware OTA), etc.

[0075] Mobile devices refer to smartphones, tablets, or other embedded devices, which are hardware platforms on which apps can be installed.

[0076] A wireless module is a hardware component integrated within a smart home appliance to enable wireless communication between the smart appliance and external devices or networks. Wireless modules typically support one or more wireless communication protocols such as Wi-Fi, Bluetooth, Zigbee, and Z-Wave. In this application, the wireless module refers to a WiFi module or a WiFi+BLE module.

[0077] A salt is a randomly generated string, typically combined with the original password and then hashed. Its core function is to enhance the security of password storage and resist brute-force attacks and rainbow table attacks targeting hash values. In this application, the salt is a fixed-length string defined internally by the enterprise and will be stored on a cloud server and in the wireless modules of smart home appliances.

[0078] SHA-256 is a widely used cryptographic hash function, belonging to the SHA-2 (Secure Hash Algorithm 2) family. It is used to convert input data of arbitrary length into a fixed-length output (256 bits, or 32 bytes), known as a hash value or message digest. Due to its security and efficiency, SHA-256 is widely used in scenarios requiring verification of data integrity and authenticity. The SHA-256 digital signature value generated in this application is used for cloud certificate consistency verification.

[0079] The main function of a wireless router is to act as a wireless bridge, enabling WiFi modules to connect to cloud servers via the wireless router.

[0080] An app is a mobile application that enables user registration, network configuration and binding of smart home appliances, and other functions (control, query, refresh, and scene device functions; different apps have different functions). Each smart home appliance product has a corresponding app.

[0081] In one exemplary embodiment, such as Figure 1 The diagram shows a smart home appliance, which includes:

[0082] Communicator 110;

[0083] The controller 120 establishes communication connections with the firmware upgrade server 130 and the operation support system server 140 respectively via the communicator 110; wherein,

[0084] Controller 120 is configured as follows:

[0085] In response to the firmware upgrade command for smart home appliances, a first firmware upgrade request is sent to the firmware upgrade server 130, and a first certificate chain is returned by the firmware upgrade server 130 in response to the first firmware upgrade request.

[0086] If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault command is sent to the operations support system server 140.

[0087] The system receives the target root certificate returned by the operation support system server 140 in response to the target fault command, and updates the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of smart home appliances.

[0088] Operations support system server 140 is configured as follows:

[0089] In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server 130 according to the preset root certificate download address;

[0090] Send a second firmware upgrade request to firmware upgrade server 130, and receive the second certificate chain returned by firmware upgrade server 130 in response to the second firmware upgrade request.

[0091] If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to controller 120 as the target root certificate.

[0092] Among them, the communicator 110 can be a wireless router.

[0093] The controller 120 is equipped with a wireless communication module, which wirelessly routes to the firmware upgrade server 130 and the operation support system server 140 via a communicator.

[0094] The firmware upgrade instructions include, but are not limited to, the download address of the firmware to be upgraded for smart home appliances, firmware type (e.g., MCU, EEPROM, driver or display board, etc.), total firmware length, starting position of firmware upgrade, MD5, SHA256, CRC checksum, and other information.

[0095] The first firmware upgrade request is used to establish a TLS connection between the smart home appliance and the firmware upgrade server 130.

[0096] The first certificate chain includes, but is not limited to, the server certificate and intermediate certificates of the firmware upgrade server 130. The intermediate certificate is issued by the root certificate CA and is used to bridge the server certificate and the root certificate. The root certificate is issued by the intermediate certificate CA and contains the public key, subject information, and signature.

[0097] The root certificate is the starting point of the certificate trust chain and is used to verify the authenticity of all subordinate certificates issued by the root certificate CA.

[0098] The target fault instructions are used to characterize the invalidation of the pre-installed root certificate. Specifically, the target fault instructions include root certificate expiration instructions and root certificate mismatch instructions. For example, the root certificate expiration instruction is "4001", and the root certificate mismatch instruction is "4002".

[0099] The operation support system server 140 has a built-in preset root certificate download address, which can be obtained by the operation support system server 140 periodically from the firmware upgrade server 130.

[0100] The second firmware upgrade request is used to establish a TLS connection between the operations support system server 140 and the firmware upgrade server 130.

[0101] The second certificate chain includes, but is not limited to, the server certificate of the firmware upgrade server 130 and intermediate certificates.

[0102] In the embodiments of this application, please refer to Figure 2 This paper provides a schematic block diagram of a smart home appliance. The smart home appliance includes a wireless communication module and its hardware and software components. The wireless communication module includes a root certificate storage area and a Wi-Fi unit. The hardware and software components include a controller, other application software, and other hardware structures.

[0103] Please see Figure 3 This paper provides a communication timing diagram for a controller, a firmware server, and an operations support system server. When a firmware upgrade task of a smart home appliance is triggered, the controller 120 responds to the firmware upgrade command by sending a first firmware upgrade request to the firmware upgrade server 130. The firmware server 130 then issues a first certificate chain to the smart home appliance. The firmware upgrade command can be triggered by the controller 120 itself at preset time intervals, or it can be triggered by the controller 120 receiving a firmware upgrade confirmation from the user. Firmware upgrade refers to over-the-air (OTA) firmware upgrade.

[0104] Controller 120 retrieves the pre-installed root certificate from the root certificate store. It first verifies the legitimacy of the intermediate certificate using the pre-installed root certificate, and then verifies the signature validity of the server certificate using the intermediate certificate, ensuring that the trust chain of the server certificate can be traced back to the pre-installed root certificate. If the pre-installed root certificate is invalid, and the verification of the first certificate chain using the pre-installed root certificate fails, a target fault command is sent to the operations support system server 140. The target fault command can be a fault code.

[0105] After receiving the target fault command, the operation support system server 140 sends the target root certificate to the controller 120. Based on the target root certificate, the controller 120 completes the subsequent firmware upgrade process for the smart home appliance. The target root certificate is a new certificate downloaded by the operation support system server 140 from the firmware upgrade server 130, and this new certificate verifies the second certificate chain issued by the firmware upgrade server 130.

[0106] The subsequent firmware upgrade process for smart home appliances is as follows: the controller 120 receives the firmware upgrade installation package sent by the firmware upgrade server 130, parses the firmware upgrade installation package, and performs security repairs, function enhancements, and performance optimizations on the corresponding firmware of the smart home appliances.

[0107] In the aforementioned smart home appliance, if the controller 120 fails to verify the first certificate chain using the pre-installed root certificate, it sends a target fault command to the operation support system server 140. The operation support system server 140 then downloads a new root certificate from the firmware upgrade server 130. If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller 120 as the target root certificate. This enables the controller 120 to update its root certificate in a timely manner, ensuring that the updated root certificate is consistent with the root certificate of the firmware upgrade server 130. This guarantees the validity of the root certificate of the controller 120, thereby completing the subsequent firmware upgrade task of the smart home appliance and improving the reliability of the smart home appliance firmware update.

[0108] In one embodiment, see Figure 4 This document provides a flowchart illustrating the process of updating the root certificate on an operations support system server. The operations support system server is configured as follows:

[0109] Step S410: If the verification of the second certificate chain using the new root certificate fails, update the preset root certificate download address to obtain the updated download address.

[0110] In this embodiment, if the verification of the second certificate chain using the new root certificate fails, the operations support system server sends an anomaly alarm to the operations and maintenance personnel. The operations and maintenance personnel then contact the administrator of the firmware upgrade server to confirm the new root certificate download address. The operations and maintenance personnel configure the new root certificate download address on the operations support system server. In response to this configuration operation, the operations support system server updates the preset root certificate download address to the new root certificate download address, thus obtaining the updated download address.

[0111] Step S420: Download the corresponding root certificate from the firmware upgrade server according to the updated download address, and use the corresponding root certificate as the new root certificate;

[0112] Step S430: Return to the step of sending the second firmware upgrade request to the firmware upgrade server until the second certificate chain is verified using the new root certificate.

[0113] In this embodiment of the application, after obtaining the corresponding root certificate, the operation support system server needs to re-verify the corresponding root certificate to ensure that the corresponding root certificate is valid.

[0114] Specifically, the operations support system server sends a second firmware upgrade request to the firmware upgrade server. The firmware upgrade server responds to the second firmware upgrade request by sending a second certificate chain to the operations support system server. The operations support system server verifies the second certificate chain based on the corresponding root certificate. If the second certificate chain verification passes, the corresponding root certificate is stored. If the second certificate chain verification fails, steps S310-S330 are repeated until the second certificate chain verification passes.

[0115] This application embodiment updates the root certificate through the operation support system server and verifies the new root certificate to determine its validity, thereby ensuring the validity of the target root certificate issued to the controller and improving the reliability of smart home appliance firmware updates.

[0116] In one embodiment, see Figure 5 , Figure 5 A flowchart illustrating the decryption and designature process of a target root certificate is provided. The controller is configured as follows:

[0117] Step S510: Receive the encrypted and signed file package returned by the operation support system server, decrypt the encrypted and signed file package according to the preset salt value, and obtain the root certificate file and the first signature value; the first signature value is calculated by the operation support system server based on the preset signature algorithm, the target root certificate and the preset salt value.

[0118] The preset salt value can be set according to actual needs.

[0119] In this embodiment, the operations support system server uses a preset encryption algorithm to encrypt the target root certificate and a preset salt value to obtain ciphertext. Then, it uses a preset signature algorithm to sign the target root certificate and the preset salt value to obtain a first signature value. Finally, it packages the ciphertext and the first signature value to obtain an encrypted and signed file package. The preset encryption algorithm can be the base64 algorithm, and the preset signature algorithm can be the SHA-256 algorithm.

[0120] Step S520: Based on the preset signature algorithm, calculate the second signature value by analyzing the root certificate file and the preset salt value.

[0121] In this embodiment of the application, a preset signature algorithm is used to sign the target root certificate and a preset salt value to obtain a second signature value.

[0122] Step S530: If the second signature value is the same as the first signature value, the root certificate file is used as the target root certificate.

[0123] In this embodiment of the application, if the second signature value is the same as the first signature value, it indicates that the target root certificate has not been tampered with or lost data during transmission, and the root certificate file obtained by the controller from decrypting the encrypted and signed file package is consistent with the target root certificate.

[0124] If the second signature value is different from the first signature value, it indicates that the target root certificate has been tampered with or data has been lost during transmission. The controller can request the operations support system server to resend the encrypted and signed file package.

[0125] This application embodiment ensures the confidentiality of the target root certificate's data during transmission by encrypting it. By comparing the second signature value with the first signature value, the integrity of the target root certificate's data during transmission can be ensured.

[0126] In one embodiment, see Figure 6 , Figure 6 A flowchart illustrating the root certificate update process is provided, where the controller is configured as follows:

[0127] Step S610: Obtain the validity period of the pre-installed root certificate;

[0128] Step S620: Within a preset time period before the expiration date, send a root certificate update request to the operation support system server;

[0129] Step S630: Receive the new root certificate returned by the operation support system server and update the pre-installed root certificate to the new root certificate.

[0130] The preset time period before the expiration date can be set according to actual needs, such as one week or one month before the expiration date.

[0131] In this embodiment, the operations support system server periodically updates the root certificate. Specifically, the operations support system server can download new root certificates from the firmware upgrade server at preset time intervals. Within a preset time period before the expiration of the pre-installed root certificate, the controller requests the operations support system server to issue a new root certificate, thereby updating the pre-installed root certificate.

[0132] In this embodiment, the controller checks the validity period of the pre-installed root certificate and requests a new root certificate from the operation support system server before the expiration date, which can ensure that the pre-installed root certificate can be updated in a timely manner.

[0133] In one embodiment, see Figure 7 , Figure 7A flowchart illustrating the root certificate issuance process is provided. The root certificate update request includes a first identifier, which is generated based on the pre-installed root certificate and a preset salt value. The operation support system server is configured as follows:

[0134] Step S710: Generate a second signature based on the new root certificate and the preset salt value.

[0135] Among them, the identifier can be used to distinguish different versions of the root certificate.

[0136] In this embodiment of the application, a first digital signature value can be obtained by calculating the pre-installed root certificate and a preset salt value based on a preset signature algorithm. A preset number of bits in the first digital signature value are used as the first feature.

[0137] A second digital signature value can be obtained by calculating the new root certificate and a preset salt value based on a preset signature algorithm. A preset number of bits in the second digital signature value are then used as the second feature.

[0138] Specifically, the preset signature algorithm can be the SHA-256 algorithm, where both the first digital signature value and the second digital signature value are SHA256 signature values, and the last 12 bits of the first digital signature value are used as the first feature, and the last 12 bits of the second digital signature value are used as the second feature.

[0139] In step S720, if the second identifier is different from the first identifier, a new root certificate is sent to the controller.

[0140] In this embodiment of the application, if the second identifier is different from the first identifier, it indicates that the pre-installed root certificate is different from the new root certificate version, and the new root certificate is sent to the controller to update the pre-installed root certificate in the controller.

[0141] This application embodiment can determine whether to issue a new root certificate to the controller by comparing the second identifier with the first identifier, thereby enabling timely updates of the root certificate pre-installed in the controller.

[0142] In one embodiment, see Figure 8 , Figure 8 A flowchart illustrating the firmware upgrade command generation process is provided, in which the operations support system server is configured as follows:

[0143] Step S810: Configure the firmware upgrade task for smart home appliances; push the firmware upgrade task to the user terminal.

[0144] In this embodiment, maintenance personnel deploy firmware OTA upgrade tasks for smart home appliances on the operation support system server. The firmware OTA upgrade tasks can be deployed according to actual needs. Taking an air conditioner as an example, the upgrade tasks could be for the MCU, EEPROM, drivers, display board, etc., of the indoor and outdoor units of a split-type air conditioner.

[0145] After the operation support system server completes the firmware OTA upgrade task, users can see the firmware OTA upgrade information push in the user terminal's App. This information will include the reason, content, and importance of the firmware OTA upgrade, and users can choose whether to perform the firmware OTA upgrade.

[0146] Step S820: Receive the firmware upgrade confirmation command returned by the user terminal and send the firmware upgrade command to the controller.

[0147] In the embodiments of this application, please refer to Figure 9 , Figure 9 This is a firmware upgrade architecture diagram for smart home appliances. After the user selects and confirms the upgrade operation on the App of the user terminal 910, the user terminal 910 responds to the user's selection and confirmation by generating a firmware upgrade confirmation command and sending it to the operation support system server 140. The operation support system server 140 then sends the firmware upgrade command to the controller 120.

[0148] This application embodiment enables users to conveniently manage and control firmware upgrades for smart home appliances through communication and interaction between the user terminal, the operation support system server, and the controller.

[0149] To better understand the firmware upgrade implementation steps for the aforementioned smart home appliances, please refer to [link / reference]. Figure 10This document provides a schematic diagram of the firmware upgrade process for smart home appliances. The smart home appliance deploys firmware upgradeable tasks on the cloud (Operations Support System server), and users view these tasks in the app. When a user selects to upgrade, the app continues to display the upgradeable tasks, but the upgrade task is not sent to the smart home appliance. Upon selection, the Operations Support System server sends firmware download information to the smart home appliance, which requests the download from the OTA server (Firmware Upgrade Server). The OTA server sends a certificate chain to the smart home appliance, which verifies the certificate chain. If the verification passes, the app continues to display the upgradeable tasks, but the upgrade task is not sent to the smart home appliance. If the verification fails, the smart home appliance returns the certificate verification failure result to the OSS server (Operations Support System server) via a 101 command (Target Fault Instruction). Upon receiving the fault code, the OSS server downloads the new certificate from the system's default root certificate update address and initiates verification. If the new root certificate verification fails, the OSS server proactively alerts and notifies the administrator to update the root certificate download address and download it. When the new root certificate passes verification, the OSS service sends the new certificate to the smart home appliance via a 102 command. The smart home appliance receives the 102 command, parses the new certificate, updates the certificate in its storage, and uploads the update completion information to the cloud. The cloud then reissues a 101 firmware upgrade task to the smart home appliance. Upon receiving the firmware upgrade task, the smart home appliance downloads the firmware, verifies it, and then returns a firmware success message to the cloud.

[0150] like Figure 11 As shown, this application also provides a control method for a smart home appliance, the smart home appliance including a controller, the method including:

[0151] Step S1110: In response to the firmware upgrade instruction for the smart home appliance, send a first firmware upgrade request to the firmware upgrade server and receive the first certificate chain returned by the firmware upgrade server in response to the first firmware upgrade request.

[0152] Step S1120: If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault command is sent to the operation support system server.

[0153] Step S1130: Receive the target root certificate returned by the operation support system server in response to the target fault command, and update the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of smart home appliances;

[0154] The operations support system server is configured as follows:

[0155] In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address;

[0156] Send a second firmware upgrade request to the firmware upgrade server and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request.

[0157] If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

[0158] It should be noted that the specific limitations of the above steps can be found in the specific limitations of an air conditioner mentioned above, and will not be repeated here.

[0159] In one embodiment, the operations support system server is configured as follows:

[0160] If the verification of the second certificate chain using the new root certificate fails, update the preset root certificate download address to obtain the updated download address;

[0161] Download the corresponding root certificate from the firmware upgrade server according to the updated download address, and use the corresponding root certificate as the new root certificate.

[0162] Return to the step of sending a second firmware upgrade request to the firmware upgrade server until the second certificate chain is verified using a new root certificate.

[0163] In one embodiment, the controller is configured to:

[0164] The system receives an encrypted and signed file package returned by the operations support system server. Based on a preset salt value, it decrypts the encrypted and signed file package to obtain the root certificate file and the first signature value. The first signature value is calculated by the operations support system server based on a preset signature algorithm, using the target root certificate and the preset salt value.

[0165] Based on the preset signature algorithm, the root certificate file and the preset salt value are used to calculate the second signature value;

[0166] If the second signature value is the same as the first signature value, the root certificate file will be used as the target root certificate.

[0167] In one embodiment, the controller is configured to:

[0168] Obtain the validity period of the pre-installed root certificate;

[0169] Within a preset time period before the expiration date, send a root certificate update request to the operations support system server;

[0170] Receive the new root certificate returned by the operations support system server and update the pre-installed root certificate to the new root certificate.

[0171] In one embodiment, the root certificate update request includes a first identifier, which is generated based on a pre-installed root certificate and a preset salt value. The operations support system server is configured as follows:

[0172] Generate a second signature based on the new root certificate and the preset salt value;

[0173] If the second identifier is different from the first identifier, send a new root certificate to the controller.

[0174] In one embodiment, the operations support system server is configured as follows:

[0175] Configure firmware upgrade tasks for smart home appliances; push firmware upgrade tasks to user terminals;

[0176] Receive the firmware upgrade confirmation command returned by the user terminal and send the firmware upgrade command to the controller.

[0177] The technical solution of this embodiment involves the controller sending a target fault command to the operation support system server when the verification of the first certificate chain using the pre-installed root certificate fails. The operation support system server then downloads a new root certificate from the firmware upgrade server. If the verification of the second certificate chain using the new root certificate passes, the new root certificate is sent to the controller as the target root certificate. This enables the controller to update its root certificate in a timely manner, ensuring that the updated root certificate is consistent with the root certificate on the firmware upgrade server. This, in turn, ensures the validity of the controller's root certificate and completes the subsequent firmware upgrade task for smart home appliances, thereby improving the reliability of smart home appliance firmware updates.

[0178] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0179] Based on the same inventive concept, this application also provides a control device for a smart home appliance that implements the control method for the smart home appliance described above. The solution provided by this device is similar to the solution described in the above method; therefore, the specific limitations in one or more embodiments of the control device for a smart home appliance provided below can be found in the limitations of the control method for smart home appliances described above, and will not be repeated here.

[0180] In one exemplary embodiment, such as Figure 12 As shown, a control device for a smart home appliance is provided, comprising:

[0181] The first certificate link receiving module 1210 is used to respond to the firmware upgrade instruction for smart home appliances by sending a first firmware upgrade request to the firmware upgrade server and receiving the first certificate link returned by the firmware upgrade server in response to the first firmware upgrade request.

[0182] The target fault instruction sending module 1220 is used to send a target fault instruction to the operation support system server when the verification of the first certificate chain using the pre-installed root certificate fails.

[0183] The target root certificate receiving module 1230 is used to receive the target root certificate returned by the operation support system server in response to the target fault command, and update the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of smart home appliances;

[0184] The operations support system server is configured as follows:

[0185] In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address;

[0186] Send a second firmware upgrade request to the firmware upgrade server and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request.

[0187] If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

[0188] In one embodiment, please refer to Figure 13 A structural block diagram of a control device for smart home appliances is provided, comprising:

[0189] The file packet receiving module 1310 is used to receive the encrypted and signed file packet returned by the operation support system server, decrypt the encrypted and signed file packet according to the preset salt value, and obtain the root certificate file and the first signature value; the first signature value is calculated by the operation support system server based on the preset signature algorithm, the target root certificate and the preset salt value;

[0190] The second signature value acquisition module 1320 is used to calculate the second signature value based on the root certificate file and the preset salt value using a preset signature algorithm.

[0191] The target root certificate obtaining module 1330 is used to use the root certificate file as the target root certificate when the second signature value is the same as the first signature value.

[0192] In one embodiment, please refer to Figure 14 A structural block diagram of a control device for smart home appliances is provided, comprising:

[0193] The validity period acquisition module 1410 is used to obtain the validity period of the pre-installed root certificate;

[0194] The request sending module 1420 is used to send a root certificate update request to the operation support system server within a preset time period before the expiration date.

[0195] The root certificate receiving module 1430 is used to receive the new root certificate returned by the operation support system server and update the pre-installed root certificate to the new root certificate.

[0196] In one exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 15 As shown, the computer device includes a processor, memory, input / output interfaces, a communication interface, a display unit, and an input device. The processor, memory, and input / output interfaces are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interfaces. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The input / output interfaces are used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. When the computer program is executed by the processor, it implements a method for controlling smart home appliances. The display unit is used to form a visually visible image and can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.

[0197] Those skilled in the art will understand that Figure 15 The structures shown are merely block diagrams of some structures related to the present application and do not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than shown in the figures, or combine certain components, or have different component arrangements. In one embodiment, a computer device is provided, including a memory and a processor. The memory stores a computer program, which, when executed by the processor, causes the processor to perform the steps of the aforementioned smart home appliance control method. The steps of the smart home appliance control method described here can be steps from the smart home appliance control methods of the various embodiments described above.

[0198] In one embodiment, a computer-readable storage medium is provided, storing a computer program that, when executed by a processor, causes the processor to perform the steps of the aforementioned smart home appliance control method. The steps of the smart home appliance control method described herein can be the steps from the smart home appliance control methods of the various embodiments described above.

[0199] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, causes the processor to perform the steps of the aforementioned smart home appliance control method. The steps of the smart home appliance control method described herein can be the steps from the smart home appliance control methods of the various embodiments described above.

[0200] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0201] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic resistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0202] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0203] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A smart home appliance characterized by, include: Communicator; The controller establishes communication connections with the firmware upgrade server and the operation support system server respectively through the communicator; wherein, The controller is configured as follows: In response to a firmware upgrade instruction for a smart home appliance, a first firmware upgrade request is sent to the firmware upgrade server, and a first certificate chain is received from the firmware upgrade server in response to the first firmware upgrade request. If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault instruction is sent to the operation support system server. The system receives the target root certificate returned by the operation support system server in response to the target fault instruction, and updates the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of the smart home appliance. The operation support system server is configured as follows: In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address; Send a second firmware upgrade request to the firmware upgrade server, and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request; If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

2. The smart home appliance of claim 1, characterized in that, The operation support system server is configured as follows: If the verification of the second certificate chain using the new root certificate fails, the preset root certificate download address is updated to obtain the updated download address; According to the updated download address, download the corresponding root certificate from the firmware upgrade server and use the corresponding root certificate as the new root certificate. Return to the step of sending the second firmware upgrade request to the firmware upgrade server until the second certificate chain is verified using the new root certificate. 3.The smart home appliance according to any one of claims 1 to 2, characterized in that, The controller is configured as follows: The system receives an encrypted and signed file package returned by the operation support system server, decrypts the encrypted and signed file package according to a preset salt value, and obtains the root certificate file and the first signature value. The first signature value is calculated by the operation support system server based on a preset signature algorithm, using the target root certificate and the preset salt value. Based on the preset signature algorithm, a second signature value is obtained by calculating the root certificate file and the preset salt value. If the second signature value is the same as the first signature value, the root certificate file is used as the target root certificate.

4. The smart home appliance according to any one of claims 1 to 2, characterized in that, The controller is configured as follows: Obtain the validity period of the pre-installed root certificate; Within a preset time period before the expiration date, a root certificate update request is sent to the operation support system server; The system receives a new root certificate returned by the operation support system server and updates the pre-installed root certificate to the new root certificate.

5. The smart home appliance according to claim 4, characterized in that, The root certificate update request includes a first identifier, which is generated based on the pre-installed root certificate and a preset salt value. The operation support system server is configured as follows: Based on the new root certificate and the preset salt value, a second signature is generated; If the second identifier is different from the first identifier, the new root certificate is sent to the controller. 6.The smart home appliance according to any one of claims 1 to 2, wherein, The operation support system server is configured as follows: Configure firmware upgrade tasks for smart home appliances; push the firmware upgrade tasks to the user terminal; The system receives a firmware upgrade confirmation command from the user terminal and sends the firmware upgrade command to the controller.

7. A method for controlling smart home appliances, characterized in that, The smart home appliance includes a controller, and the method includes: In response to a firmware upgrade command for a smart home appliance, a first firmware upgrade request is sent to a firmware upgrade server, and a first certificate chain is received from the firmware upgrade server in response to the first firmware upgrade request. If the verification of the first certificate chain using the pre-installed root certificate fails, a target fault instruction is sent to the operation support system server. The system receives the target root certificate returned by the operation support system server in response to the target fault instruction, and updates the pre-installed root certificate to the target root certificate; the target root certificate is used for firmware upgrades of the smart home appliance. The operation support system server is configured as follows: In response to the target fault command, a new root certificate is downloaded from the firmware upgrade server according to the preset root certificate download address; Send a second firmware upgrade request to the firmware upgrade server, and receive the second certificate chain returned by the firmware upgrade server in response to the second firmware upgrade request; If the second certificate chain is successfully verified using the new root certificate, the new root certificate is sent to the controller as the target root certificate.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method of claim 7.

9. A computer readable storage medium having stored thereon a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the method of claim 7.

10. A computer program product comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the method of claim 7.

Images