升级签名固件的方法、电子设备和存储介质

升级签名固件的方法、电子设备和存储介质

摘要：本发明公开了升级签名固件的方法、电子设备和存储介质，通过可信操作系统将公钥参数信息和数字签名算法类型保存至安全存储中，由可信操作系统计算与公钥参数信息相对应的消息摘要，并对消息摘要进行加密，将加密后的消息摘要写入命令行参数，后续基于安全存储中的公钥参数信息和数字签名算法类型以及命令行参数中的加密后的消息摘要对签名后的待升级固件进行校验，校验成功才进行升级，以此提高了公钥信息的安全性，且将命令行参数中加密后的消息摘要作为与可信操作系统之间的通信凭证，从而有效提高签名固件升级的安全性。

Method for upgrading signature firmware, electronic equipment and storage medium

Abstract:The invention discloses a method for upgrading signature firmware, electronic equipment and a storage medium, wherein public key parameter information and a digital signature algorithm type are stored in a secure storage through a trusted operating system, a message digest corresponding to the public key parameter information is calculated by the trusted operating system, the message digest is encrypted, the encrypted message digest is written into a command line parameter, the signed firmware to be upgraded is checked based on the public key parameter information and the digital signature algorithm type in the secure storage and the encrypted message digest in the command line parameter, and the verification is successful, so that the security of the public key information is improved, and the encrypted message digest in the command line parameter is used as a communication certificate with the trusted operating system, thereby effectively improving the security of upgrading the signature firmware.

Download paper here

Recommended citation:

纪大峣. 升级签名固件的方法、电子设备和存储介质[P]. 中国：CN116257839A,2023-06-13.

D. Ji,”Method for upgrading signature firmware, electronic equipment and storage medium,” China Patent CN116257839A, June 13,2023.