Remote security upgrading method, system and edge device for electric red-keg Internet of Things fusion terminal

Abstract

The invention relates to the technical field of terminal upgrading, in particular to a remote security upgrading method and system for an electric red-keyed Internet of Things fusion terminal and edge equipment, and the method comprises the following steps: collecting upgrading content needing to be issued, and associatively storing version number information and original data of an upgrading package, so that the original data of each upgrading package has a unique version identifier; and packaging the original data, the version number information, the hash value and the digital signature of the upgrade package according to a predefined format to form a complete upgrade package. By combining version number information, Hash verification and a digital signature mechanism, the integrity and source credibility verification of the upgrade package is realized, the tampering or counterfeiting risk caused by lack of end-to-end verification in the existing method is avoided, the upgrade package has a unique version identifier in the generation process, and the upgrade package has the unique version identifier in the generation process. Therefore, the accuracy and the traceability of the upgrading process are ensured, and a basis is provided for integrity verification of the equipment end before the equipment end executes upgrading, so that the safety of remote upgrading is remarkably improved.

Description

Technical Field

[0001] This invention relates to the field of terminal upgrade technology, specifically to a remote security upgrade method, system, and edge device for Dianhong IoT converged terminals. Background Technology

[0002] Remote upgrade of power grid terminals refers to the unified update of the software or firmware of distributed power grid terminal equipment through centralized control to ensure continuous optimization of equipment functions and stability of system operation. This process usually relies on the upgrade control terminal to generate upgrade packages and distribute them to terminal equipment, thereby achieving functional expansion, vulnerability repair or performance improvement.

[0003] While existing remote upgrade methods for power grid terminals can achieve centralized updates of software or firmware for distributed devices to some extent, they still have several shortcomings. First, the integrity and source verification measures for upgrade packages are often inadequate, lacking end-to-end digital signatures or hash verification. This makes them susceptible to tampering or replacement during the upgrade process, and if malicious code is injected, it will severely impact the stability and reliability of power grid equipment. Furthermore, in large-scale distributed device upgrade scenarios, existing methods generally lack atomicity and consistency guarantees. Different devices may experience partial success and partial failure, leading to inconsistent operating versions within the same control area. This can trigger coordination control anomalies or even cascading failures. These problems collectively limit the effectiveness of existing remote upgrade methods under the high security and reliability requirements of power grids. Summary of the Invention

[0004] To address the aforementioned issues, this invention provides a method, system, and edge device for remote security upgrades of the Dianhong IoT converged terminal.

[0005] This invention adopts the following technical solution: a remote security upgrade method for Dianhong IoT converged terminals, comprising:

[0006] Collect the upgrade content that needs to be distributed, preprocess the upgrade content, and generate the raw data of the upgrade package to be signed;

[0007] The upgrade control terminal generates corresponding version number information based on the current device running version and the target version, and stores the version number information in association with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier;

[0008] A hash algorithm is run on the original data of the upgrade package to generate a unique hash value. The hash value is then encrypted to generate a digital signature.

[0009] The original data, version number information, hash value and digital signature of the upgrade package are packaged according to a predefined format to form a complete upgrade package;

[0010] The upgrade control terminal obtains the i devices corresponding to the i upgrade requests received, i≥1, and marks them as target devices. The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit.

[0011] The upgraded control terminal sends the generated upgrade package to the devices within the upgrade unit. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification. When all devices pass the verification, the upgrade is executed. If any device fails the verification, the upgrade unit is not upgraded.

[0012] As a further description of the above technical solution: when the complete upgrade package is formed, a corresponding metadata file is generated for the upgrade package through the upgrade control terminal. The metadata file includes the version number, release time and the compatible device model. The metadata and the upgrade package are stored together on the upgrade server for the device to match and download when requesting an upgrade.

[0013] The upgrade includes firmware files, patches, or configuration data.

[0014] As a further description of the above technical solution: the running version includes three levels: major version number, minor version number, and revision number;

[0015] The method for generating the corresponding version number information includes:

[0016] Differential parsing is performed between the current version number and the target version number to obtain the upgrade type, which includes architecture-level upgrade, functional upgrade and fix upgrade;

[0017] An upgrade type label and version mapping table are constructed. The upgrade control terminal records the mapping relationship between the current version and the target version in the version mapping table. When generating the final upgrade package, the upgrade control terminal generates version number information based on the information obtained from the type label and version mapping table.

[0018] As a further description of the above technical solution: the method for obtaining the upgrade type by performing differential parsing between the current version number and the target version number is as follows:

[0019] When the major version numbers are different, it indicates an architecture-level upgrade;

[0020] When the version numbers are different, it indicates a feature-level upgrade;

[0021] Different revision numbers indicate corrective upgrades.

[0022] As a further description of the above technical solution: the method for generating a digital signature includes:

[0023] The hash value is passed to the local security module through a secure interface;

[0024] The local security module performs encryption operations internally, encrypting the hash value using an internal private key without exporting the private key, and outputting the encrypted hash value to form a digital signature.

[0025] As a further description of the above technical solution: the method for dividing the target device into multiple logical groups includes:

[0026] The basic attribute information of the target device includes the device's latitude and longitude coordinates, control domain range, and operating load;

[0027] Based on the latitude and longitude information of the devices, a preset spacing threshold is set, and devices whose spatial adjacent distance is less than or equal to the preset spacing threshold are divided into the same primary group;

[0028] Based on the control range of the dispatch center or the boundary of the communication subnet, devices located in the same control domain within the primary group are grouped into the same intermediate group.

[0029] Get the operating load of all devices in the intermediate group, preset the load threshold, and classify the device into a delayed upgrade group when the operating load of a device is greater than or equal to the preset load threshold. When the operating load of a device is less than the preset load threshold, classify it into an immediate upgrade group.

[0030] As a further description of the above technical solution: the method for forming a complete upgrade package includes:

[0031] Step a1: Predefine the upgrade package format and pre-determine the file structure of the upgrade package, including the type, order, length, and encoding method of each field; the fields include the packet header, data body, hash value, and digital signature;

[0032] Step a2: Encapsulate the packet header information and write the version number information into the packet header according to the predefined encoding method;

[0033] Step a3: Encapsulate the data body by writing the original data of the upgrade package into the data body in a predefined order;

[0034] Step a4: Encapsulate the hash value. Run a hash algorithm on the original data of the upgrade package to generate a unique hash value, and write the hash value to the end of the upgrade package.

[0035] Step a5: Encapsulate the digital signature. After calling the digital signature generated by the local security module and writing it into the hash value, a complete verification chain is formed.

[0036] Step a6: Form a complete upgrade package by combining the packet header, data body, hash value and digital signature in a predefined order to form a complete upgrade package.

[0037] As a further description of the above technical solution: the method for performing the upgrade includes:

[0038] The upgrade control terminal sends upgrade requests to all devices within the upgrade unit;

[0039] After confirming the local upgrade conditions, including the availability of resources and the upgradeability of the operating status, the device sends an approval or rejection response to the upgrade control terminal.

[0040] When all devices within the upgrade unit respond with agreement, the upgrade control terminal sends an upgrade submission command to the upgrade unit.

[0041] When any device in the upgrade unit rejects the upgrade, the upgrade control terminal issues a unified stop upgrade command to keep all devices on the original old version.

[0042] The Dianhong IoT converged terminal remote security upgrade system is used to implement the aforementioned Dianhong IoT converged terminal remote security upgrade method. The system includes:

[0043] The upgrade content packaging module collects the upgrade content to be distributed, preprocesses the upgrade content, and generates the raw data of the upgrade package to be signed.

[0044] The version information generation module generates a version number based on the current device running version and the target version. The version number is then associated with and stored with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier.

[0045] The digital signature generation module runs a hash algorithm on the original data of the upgrade package to generate a unique hash value, performs encryption operations on the hash value, and generates a digital signature.

[0046] The upgrade package encapsulation module encapsulates the original upgrade package data, version number information, hash value and digital signature according to a predefined format to form a complete upgrade package;

[0047] The logical grouping module obtains the i devices corresponding to the i upgrade requests received by the upgrade control terminal. If i ≥ 1, they are marked as target devices. The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit.

[0048] The distribution and verification module sends the generated upgrade package to the devices in the upgrade unit through the upgrade control terminal. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification. When all devices pass the verification, the upgrade is executed. If any device fails the verification, the upgrade unit is not upgraded.

[0049] An edge device includes a remote security upgrade system for a converged IoT terminal, a connection module, a memory, a processor, and a target application loaded onto the memory and capable of running on the processor. When the target application is executed by the processor, it implements the remote security upgrade method for the converged IoT terminal.

[0050] Beneficial effects:

[0051] In the above technical solution, the remote security upgrade method for the Dianhong IoT converged terminal provided by the present invention preprocesses the upgrade content and combines version number information, hash verification and digital signature mechanism to realize the integrity and source credibility verification of the upgrade package. This avoids the risk of tampering or forgery caused by the lack of end-to-end verification in existing methods. The upgrade package has a unique version identifier during the generation process, which not only ensures the accuracy and traceability of the upgrade process, but also provides a basis for the device to perform integrity verification before performing the upgrade, thereby significantly improving the security of remote upgrades.

[0052] Meanwhile, by introducing a logical grouping and upgrade unit mechanism, the lack of atomicity and consistency in large-scale distributed device upgrades is solved. All devices within the same upgrade unit must pass verification before entering version switching. If any device fails verification, the entire system is rolled back to the old version, ensuring the consistency of upgrade results within the group and avoiding version splits with partial success and partial failure. This method can achieve safe, controllable, and stable upgrades of large-scale distributed terminals under the high security and high reliability requirements of the power grid, thereby improving the overall operational reliability of the power grid system. Attached Figure Description

[0053] The present invention will be further explained below with reference to the accompanying drawings and embodiments:

[0054] Figure 1 A flowchart of the remote security upgrade method for the Dianhong IoT converged terminal provided in Embodiment 1 of the present invention;

[0055] Figure 2 This is a flowchart of a method for dividing a target device into multiple logical groups according to Embodiment 1 of the present invention;

[0056] Figure 3 This is a flowchart of a method for forming a complete upgrade package provided in Embodiment 1 of the present invention;

[0057] Figure 4 This is a module connection diagram of the remote security upgrade system for the Dianhong IoT converged terminal provided in Embodiment 2 of the present invention. Detailed Implementation

[0058] To make the technical means, creative features, objectives, and effects of this invention readily understandable, the invention is further described below with reference to specific illustrations. It should be noted that, unless otherwise specified, the embodiments and features described in these embodiments can be combined with each other.

[0059] Example 1

[0060] Please see Figures 1-3 This invention provides a technical solution: a method for remote security upgrade of power grid terminals, comprising:

[0061] Collect the upgrade content that needs to be distributed, preprocess the upgrade content, and generate the raw data of the upgrade package to be signed;

[0062] The upgrade content includes firmware files, patches, or configuration data;

[0063] Preprocessing of the upgraded content includes file compression and format standardization.

[0064] It should be noted that file compression involves compressing binary files, scripts, or resource files within the upgrade content to reduce the overall size of the upgrade package. Differential compression can be used during the compression process to retain only the parts that differ from the old version, further reducing transmission bandwidth usage. File compression effectively reduces the size of the upgrade package, as well as transmission time and bandwidth usage, making it particularly suitable for remote upgrade scenarios involving large-scale distributed terminals in power grids.

[0065] The format unification refers to standardizing files from different sources or of different types according to a unified encoding format and storage structure, such as unifying them to UTF-8 encoding and using a specific binary data block arrangement method; and performing syntax standardization on script files, configuration files, etc., to ensure that they can be correctly parsed and executed on the target device. Format unification enables different devices to correctly identify and parse the upgrade content, avoiding upgrade failures caused by format inconsistencies.

[0066] The upgrade control terminal generates corresponding version number information based on the current device running version and the target version, and stores the version number information in association with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier;

[0067] It should be noted that the methods for generating the corresponding version number information include:

[0068] The running version includes three levels: major version number, minor version number, and revision number;

[0069] Differential parsing is performed between the current version number and the target version number to obtain the upgrade type, which includes architecture-level upgrade, functional upgrade and fix upgrade;

[0070] When the major version number is different, it indicates an architecture-level upgrade; when the minor version number is different, it indicates a feature-level upgrade; when the revision number is different, it indicates a fix-level upgrade.

[0071] An upgrade type label and version mapping table are constructed. The upgrade control terminal records the mapping relationship between the current version and the target version in the version mapping table. When generating the final upgrade package, the upgrade control terminal generates version number information based on the information obtained from the type label and version mapping table.

[0072] Optionally, architecture-level upgrades, feature-level upgrades, and remedial upgrades can be labeled A, B, and C, respectively.

[0073] Optionally, the version mapping table is:

[0074] The current version number plus the target version number corresponds to the mapped version number; the mapped version number can be set manually.

[0075] In this embodiment, by using difference parsing and upgrade identifier generation, different levels of upgrade requirements can be quickly distinguished, improving upgrade efficiency. By establishing a version mapping table, the upgrade process becomes traceable, facilitating rollback and maintenance. Furthermore, by dynamically generating a version number in a unified format, the manageability and uniqueness of the upgrade package in multi-device and multi-batch environments are improved.

[0076] The original data of the upgrade package is processed by a hash algorithm to generate a unique hash value. The upgrade control terminal calls the private key in the local security module (such as HSM or Trusted Platform Module TPM) to perform encryption operations on the hash value and generate a digital signature.

[0077] It should be noted that the hash algorithm is an existing technology, such as SHA-256, SHA-3 or the domestic SM3. By running the hash algorithm on the original data of the upgrade package, a fixed-length hash value is obtained.

[0078] Methods for generating digital signatures include:

[0079] The hash value is passed to the local security module through a secure interface;

[0080] The local security module performs encryption operations internally, encrypting the hash value using an internal private key without exporting the private key, and outputting the encrypted hash value to form a digital signature.

[0081] It should be noted that a local security module is a hardware or hardware / software security component installed on the upgrade control terminal or device terminal. It is used to securely store keys, perform encryption operations, and generate digital signatures to prevent key leakage or unauthorized tampering. Local security modules include HSM and TPM.

[0082] HSM is a hardware security module, a dedicated hardware device used to store keys and perform encryption operations. The private key never leaves the module, ensuring key security.

[0083] TPM stands for Trusted Platform Module, a security chip embedded on the motherboard used to store keys, perform cryptographic operations, and verify integrity.

[0084] The original data, version number information, hash value and digital signature of the upgrade package are encapsulated according to a predefined format to form a complete upgrade package. The upgrade control terminal generates a corresponding metadata file for the upgrade package. The metadata file contains the version number, release time and compatible device model. The metadata and the upgrade package are stored together on the upgrade server for the device to match and download when requesting an upgrade.

[0085] It should be noted that the method for forming a complete upgrade package includes:

[0086] Step a1: Predefine the upgrade package format and pre-determine the file structure of the upgrade package, including the type, order, length, and encoding method of each field; the fields include the packet header, data body, hash value, and digital signature;

[0087] Step a2: Encapsulate the packet header information and write the version number information into the packet header according to the predefined encoding method;

[0088] Step a3: Encapsulate the data body by writing the original data of the upgrade package into the data body in a predefined order;

[0089] Step a4: Encapsulate the hash value. Run a hash algorithm on the original data of the upgrade package to generate a unique hash value, and write the hash value to the end of the upgrade package.

[0090] Step a5: Encapsulate the digital signature. After calling the digital signature generated by the local security module and writing it into the hash value, a complete verification chain is formed.

[0091] Step a6: Form a complete upgrade package by combining the packet header, data body, hash value and digital signature in a predefined order to form a complete upgrade package.

[0092] The complete upgrade package can be used directly for distribution and remote upgrades.

[0093] The upgrade control terminal obtains the i devices corresponding to the i upgrade requests received, i≥1, and marks them as target devices. The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit.

[0094] It should be noted that devices within each logical group are treated as an upgrade unit to ensure that devices within the same group maintain consistency in their running versions during the upgrade process.

[0095] In this embodiment, through a logical grouping strategy, the upgrade control terminal can perform hierarchical and batch security upgrades on tens of thousands of devices, which not only ensures local consistency but also facilitates the gradual expansion of the entire network, adapting to the large-scale distributed operation environment of the power grid.

[0096] Methods for dividing a target device into multiple logical groups include:

[0097] The basic attribute information of the target device includes the device's latitude and longitude coordinates, control domain range, and operating load;

[0098] Based on the latitude and longitude information of the devices, a preset spacing threshold is set, and devices whose spatial adjacent distance is less than or equal to the preset spacing threshold are divided into the same primary group;

[0099] Based on the control range of the dispatch center or the boundary of the communication subnet, devices located in the same control domain within the primary group are grouped into the same intermediate group.

[0100] Get the operating load of all devices in the intermediate group, preset the load threshold, when the operating load of a device is greater than or equal to the preset load threshold, classify it into the delayed upgrade group, when the operating load of a device is less than the preset load threshold, classify it into the immediate upgrade group;

[0101] In this embodiment, by setting a load threshold and comparing and analyzing, immediate upgrade groups and delayed upgrade groups are generated to achieve load balancing during the upgrade process and avoid system operation risks caused by large-scale simultaneous upgrades.

[0102] The distribution and verification module sends the generated upgrade package to the devices in the upgrade unit through the upgrade control terminal. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification.

[0103] The upgrade process will only begin once all devices have passed verification.

[0104] If any device fails verification, the upgrade unit will not be upgraded, thus avoiding the generation of inconsistent versions.

[0105] In this embodiment, before entering the consistency verification, all devices in the upgrade unit must complete the hash value and digital signature verification of the upgrade package to ensure that the upgrade package is from a trustworthy source and that its content has not been tampered with. Combined with the consistency verification, this ensures that the version running on all devices comes from a legitimate and valid upgrade package, thereby improving the overall security of the system.

[0106] The method for performing the upgrade includes:

[0107] The upgrade control terminal sends upgrade requests to all devices within the upgrade unit;

[0108] After confirming the local upgrade conditions, including the availability of resources and the upgradeability of the operating status, the device sends an approval or rejection response to the upgrade control terminal.

[0109] When all devices within the upgrade unit respond with agreement, the upgrade control terminal sends an upgrade submission command to the upgrade unit.

[0110] When any device in the upgrade unit rejects the upgrade, the upgrade control terminal issues a unified stop upgrade command to keep all devices on the original old version.

[0111] In this embodiment, by preprocessing the upgrade content and combining version number information, hash verification, and digital signature mechanisms, the integrity and source credibility verification of the upgrade package are achieved. This avoids the risk of tampering or forgery caused by the lack of end-to-end verification in existing methods. The upgrade package has a unique version identifier during the generation process, which not only ensures the accuracy and traceability of the upgrade process, but also provides a basis for the device to perform integrity verification before performing the upgrade, thereby significantly improving the security of remote upgrades.

[0112] Meanwhile, by introducing a logical grouping and upgrade unit mechanism, the lack of atomicity and consistency in large-scale distributed device upgrades is solved. All devices within the same upgrade unit must pass verification before entering version switching. If any device fails verification, the entire system is rolled back to the old version, ensuring the consistency of upgrade results within the group and avoiding version splits with partial success and partial failure. This method can achieve safe, controllable, and stable upgrades of large-scale distributed terminals under the high security and high reliability requirements of the power grid, thereby improving the overall operational reliability of the power grid system.

[0113] Example 2

[0114] Please see Figure 4 This invention provides a technical solution: a remote security upgrade system for Dianhong IoT converged terminals, used to implement the aforementioned remote security upgrade method for Dianhong IoT converged terminals. The system includes:

[0115] The upgrade content packaging module collects the upgrade content to be distributed, preprocesses the upgrade content, and generates the raw data of the upgrade package to be signed.

[0116] The upgrade content includes firmware files, patches, or configuration data;

[0117] The version information generation module generates a version number based on the current device running version and the target version. The version number is then associated with and stored with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier.

[0118] The digital signature generation module runs a hash algorithm on the original data of the upgrade package to generate a unique hash value, performs encryption operations on the hash value, and generates a digital signature.

[0119] The upgrade package encapsulation module encapsulates the original upgrade package data, version number information, hash value and digital signature according to a predefined format to form a complete upgrade package;

[0120] The logical grouping module obtains the i devices corresponding to the i upgrade requests received by the upgrade control terminal, where i≥1, and marks them as target devices;

[0121] The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit;

[0122] The distribution and verification module sends the generated upgrade package to the devices in the upgrade unit through the upgrade control terminal. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification.

[0123] Once all devices have passed verification, proceed with the upgrade process.

[0124] If any device fails verification, the upgrade unit will not be upgraded.

[0125] Example 3

[0126] This invention provides a technical solution: an edge device, the edge device including a remote security upgrade system for Dianhong IoT converged terminals, a connection module, a memory, a processor, and a target application loaded onto the memory and capable of running on the processor, the target application implementing the Dianhong IoT converged terminal remote security upgrade method when executed by the processor.

[0127] Specifically, the connectivity module can connect to various IoT terminals using different communication protocols, and convert the data into a unified standard format before uploading it to the cloud to achieve interconnection. The processor and memory enable it to analyze, filter, and aggregate data in real time, uploading only valuable results or abnormal data to the cloud, which greatly reduces network bandwidth consumption and the computing pressure on the cloud platform.

[0128] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the present invention as claimed. The scope of protection of this invention is defined by the appended claims and their equivalents.

Claims

1. A remote security upgrade method for Dianhong IoT converged terminals, characterized in that, include: Collect the upgrade content that needs to be distributed, preprocess the upgrade content, and generate the raw data of the upgrade package to be signed; The upgrade control terminal generates corresponding version number information based on the current device running version and the target version, and stores the version number information in association with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier; A hash algorithm is run on the original data of the upgrade package to generate a unique hash value. The hash value is then encrypted to generate a digital signature. The original data, version number information, hash value and digital signature of the upgrade package are packaged according to a predefined format to form a complete upgrade package; The upgrade control terminal obtains the i devices corresponding to the i upgrade requests received, i≥1, and marks them as target devices. The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit. The upgraded control terminal sends the generated upgrade package to the devices within the upgrade unit. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification. When all devices pass the verification, the upgrade is executed. If any device fails the verification, the upgrade unit is not upgraded.

2. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, When the complete upgrade package is formed, a corresponding metadata file is generated for the upgrade package through the upgrade control terminal. The metadata file contains the version number, release time and compatible device model. The metadata and the upgrade package are stored together on the upgrade server for the device to match and download when requesting an upgrade. The upgrade includes firmware files, patches, or configuration data.

3. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, The running version includes three levels: major version number, minor version number, and revision number; The method for generating the corresponding version number information includes: Differential parsing is performed between the current version number and the target version number to obtain the upgrade type, which includes architecture-level upgrade, functional upgrade and fix upgrade; An upgrade type label and version mapping table are constructed. The upgrade control terminal records the mapping relationship between the current version and the target version in the version mapping table. When generating the final upgrade package, the upgrade control terminal generates version number information based on the information obtained from the type label and version mapping table.

4. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 3, characterized in that, The method for obtaining the upgrade type by performing differential parsing between the current version number and the target version number is as follows: When the major version numbers are different, it indicates an architecture-level upgrade; When the version numbers are different, it indicates a feature-level upgrade; Different revision numbers indicate corrective upgrades.

5. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, The method for generating a digital signature includes: The hash value is passed to the local security module through a secure interface; The local security module performs encryption operations internally, encrypting the hash value using an internal private key without exporting the private key, and outputting the encrypted hash value to form a digital signature.

6. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, The method for dividing the target device into multiple logical groups includes: The basic attribute information of the target device includes the device's latitude and longitude coordinates, control domain range, and operating load; Based on the latitude and longitude information of the devices, a preset spacing threshold is set, and devices whose spatial adjacent distance is less than or equal to the preset spacing threshold are divided into the same primary group; Based on the control range of the dispatch center or the boundary of the communication subnet, devices located in the same control domain within the primary group are grouped into the same intermediate group. Get the operating load of all devices in the intermediate group, preset the load threshold, and classify the device into a delayed upgrade group when the operating load of a device is greater than or equal to the preset load threshold. When the operating load of a device is less than the preset load threshold, classify it into an immediate upgrade group.

7. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, The method for forming a complete upgrade package includes: Step a1: Predefine the upgrade package format and pre-determine the file structure of the upgrade package, including the type, order, length, and encoding method of each field; the fields include the packet header, data body, hash value, and digital signature; Step a2: Encapsulate the packet header information and write the version number information into the packet header according to the predefined encoding method; Step a3: Encapsulate the data body by writing the original data of the upgrade package into the data body in a predefined order; Step a4: Encapsulate the hash value. Run a hash algorithm on the original data of the upgrade package to generate a unique hash value, and write the hash value to the end of the upgrade package. Step a5: Encapsulate the digital signature. After calling the digital signature generated by the local security module and writing it into the hash value, a complete verification chain is formed. Step a6: Form a complete upgrade package by combining the packet header, data body, hash value and digital signature in a predefined order to form a complete upgrade package.

8. The remote security upgrade method for the Dianhong IoT converged terminal according to claim 1, characterized in that, The method for performing the upgrade includes: The upgrade control terminal sends upgrade requests to all devices within the upgrade unit; After confirming the local upgrade conditions, including the availability of resources and the upgradeability of the operating status, the device sends an approval or rejection response to the upgrade control terminal. When all devices within the upgrade unit respond with agreement, the upgrade control terminal sends an upgrade submission command to the upgrade unit. When any device in the upgrade unit rejects the upgrade, the upgrade control terminal issues a unified stop upgrade command to keep all devices on the original old version.

9. A remote security upgrade system for Dianhong IoT converged terminals, used to implement the remote security upgrade method for Dianhong IoT converged terminals as described in any one of claims 1-8, characterized in that, The system includes: The upgrade content packaging module collects the upgrade content to be distributed, preprocesses the upgrade content, and generates the raw data of the upgrade package to be signed. The version information generation module generates a version number based on the current device running version and the target version. The version number is then associated with and stored with the original data of the upgrade package, so that each original data of the upgrade package has a unique version identifier. The digital signature generation module runs a hash algorithm on the original data of the upgrade package to generate a unique hash value, performs encryption operations on the hash value, and generates a digital signature. The upgrade package encapsulation module encapsulates the original upgrade package data, version number information, hash value and digital signature according to a predefined format to form a complete upgrade package; The logical grouping module obtains the i devices corresponding to the i upgrade requests received by the upgrade control terminal. If i ≥ 1, they are marked as target devices. The upgrade control terminal obtains the basic attribute information of each target device, divides the target devices into multiple logical groups, and marks the devices within a single logical group as an upgrade unit. The distribution and verification module sends the generated upgrade package to the devices in the upgrade unit through the upgrade control terminal. Before performing the upgrade, the devices verify the integrity and trusted source of the upgrade package through digital signature and hash value verification. When all devices pass the verification, the upgrade is executed. If any device fails the verification, the upgrade unit is not upgraded.

10. An edge device, characterized in that, The edge device includes a remote security upgrade system for the Dianhong IoT converged terminal, a connection module, a memory, a processor, and a target application loaded onto the memory and capable of running on the processor. When the target application is executed by the processor, it implements the remote security upgrade method for the Dianhong IoT converged terminal as described in any one of claims 1-8.

Images