升级签名固件的方法、电子设备和存储介质

升级签名固件的方法、电子设备和存储介质

摘要：本发明公开了一种升级签名固件的方法、电子设备和存储介质，由可信安全操作系统中的静态可信应用生成一随机数，并将随机数、公钥参数信息和数字签名算法类型保存至安全存储，将随机数写入命令行参数中，由静态可信应用基于命令行参数中的随机数、安全存储中的公钥参数信息和数字签名算法类型对签名后的待升级固件进行校验，校验成功后才进行升级，以此将公钥存储和校验过程均在可信环境中执行，同时使用随机数可以确保每次设备启动的值都不一样，从而最大程度地提高签名固件升级的安全性。

Method for upgrading signature firmware, electronic equipment and storage medium

Abstract:The invention discloses a method for upgrading signature firmware, electronic equipment and a storage medium, wherein a static trusted application in a trusted security operation system generates a random number, public key parameter information and digital signature algorithm type are stored in a security storage, the random number is written into a command line parameter, the static trusted application checks the signed firmware to be upgraded based on the random number in the command line parameter, the public key parameter information in the security storage and the digital signature algorithm type, and the firmware to be upgraded is upgraded after the verification is successful, so that the public key storage and the verification process are executed in a trusted environment, and meanwhile, the random number can ensure that the starting value of each equipment is different, thereby maximally improving the security of signature firmware upgrading.

Download paper here

Recommended citation:

纪大峣. 升级签名固件的方法、电子设备和存储介质[P]. 中国：CN116204867A,2023-06-02.

D. Ji,”Method for upgrading signature firmware, electronic equipment and storage medium,” China Patent CN116204867A, June 02,2023.