CN110493345A - Method and system for software upgrade of Internet of Things terminal based on block chain - Google Patents

Abstract

The invention discloses a kind of internet-of-things terminal method for upgrading software and system based on block chain, the internet-of-things terminal method for upgrading software based on block chain includes: to be recorded in the software upgrade information of the software on some block of block chain by algorithm of knowing together after first terminal carries out a certain software upgrading；After the first terminal receives the software upgrading request of second terminal transmission, corresponding software package is sent to the second terminal, wherein, software upgrading request be the second terminal in inquiring the block chain there are new software upgrade information after send.The internet-of-things terminal method for upgrading software and system based on block chain can be suitable for the batch upgrade under Internet of Things magnanimity terminal equipment scene, and software upgrading is much sooner and reliably.

Description

Method and system for software upgrade of Internet of Things terminal based on block chain

technical field

The present invention relates to the field of the Internet of Things, in particular to a block chain-based method and system for upgrading the software of an Internet of Things terminal.

Background technique

WannaCry is a computer software ransomware virus that scans the TCP445 port on the computer, spreads in a manner similar to a worm, attacks the host and encrypts files stored on the host, and then demands ransom payment in the form of Bitcoin. The recent global outbreak of WannaCry ransomware has infected at least 300,000 users in at least 150 countries, causing a loss of US$8 billion. It has affected many industries such as finance, energy, and medical care, causing serious harm. The reason is that the user failed to upgrade the system software in time. Therefore, the software upgrade function is essential, which not only enables users to experience the new functions of the new version of the software, but also prevents software loopholes. Software upgrades not only need to check and verify the software version, but also must ensure the integrity of the downloaded data. The current software upgrade mode is also based on the C/S (client/server) mode. As shown in Figure 1, the server is used as the central node, and the client downloads the latest version of the software from the server to install and upgrade.

With the development of the Internet of Things and 5G technology, the era of the Internet of Everything is coming. It is estimated that by 2020, there will be 25 billion connected devices and will continue to grow. While the large-scale Internet of Things brings convenience to people's lives, it also raises higher security requirements. In the scenario of a large number of terminal devices in the Internet of Things, the existing software upgrade method based on the C/S mode is likely to cause network congestion problems, resulting in untimely software upgrades and causing security risks. And the disadvantage of centralization is that it is prone to single point of failure, that is, if the software center upgrade server is paralyzed, the entire system will go wrong, and it is difficult to prevent software upgrade patch data tampering, resulting in low reliability and security. Therefore, it is necessary to study a new solution to solve the software upgrade problem of massive terminal equipment.

The information disclosed in this Background section is only for enhancing the understanding of the general background of the present invention and should not be taken as an acknowledgment or any form of suggestion that the information constitutes the prior art that is already known to those skilled in the art.

Contents of the invention

The purpose of the present invention is to provide a block chain-based method and system for upgrading Internet of Things terminal software, which can be applied to batch upgrades in the scenario of massive Internet of Things terminal devices, and the software upgrade is more timely and reliable.

To achieve the above object, the present invention provides a blockchain-based IoT terminal software upgrade method, which includes: after the first terminal upgrades a certain software, the software upgrade information of the software is recorded in the block through a consensus algorithm on a certain block of the chain; after the first terminal receives the software upgrade request sent by the second terminal, it sends the corresponding software data packet to the second terminal, wherein the software upgrade request is the first The second terminal sends it after inquiring that there is new software upgrade information in the block chain.

In one embodiment of the present invention, the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information, time stamp information and digital signature, wherein the index is used as the The input of the block, the software identification, the size of the software, the hash verification information and the time stamp information are used as the output of the block.

The present invention also provides a block chain-based method for upgrading the terminal software of the Internet of Things, which includes: the second terminal periodically inquires whether there is new software update information in the block chain, wherein the software update information is the first terminal After the software is upgraded, it is recorded on a certain block of the block chain through a consensus algorithm; when the second terminal inquires that there is new software upgrade information in the block chain, it sends a message to the first terminal A software upgrade request; the second terminal receives the corresponding software data packet sent by the first terminal; the second terminal compares the new software upgrade information with the information of the software data packet, If the verification is passed, the second terminal performs a software upgrade and records the software upgrade information on the block chain through a consensus algorithm.

In one embodiment of the present invention, the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information, time stamp information and digital signature, wherein the index is used as the The input of the block is used to indicate the source of the software, and the software identifier, the size of the software, the hash verification information and the time stamp information are used as the output of the block.

In an embodiment of the present invention, the second terminal compares and verifies the new software upgrade information with the information of the software data package, and if the verification is passed, the second terminal performs software upgrade And recording the software upgrade information on the block chain through a consensus algorithm includes: the second terminal compares the software version number in the new software upgrade information with the software version number in the received software data packet Compare, if the two are consistent, then the second terminal will compare the hash verification information in the new software upgrade information with the hash verification information of the software data package, if the two If the hash verification information is consistent, the verification is passed, and the second terminal performs software upgrade and records the software upgrade information on the block chain through a consensus algorithm.

The present invention also provides a blockchain-based Internet of Things terminal software upgrade system, which includes: a software upgrade information recording module, a software data packet sending module, a software upgrade information query module, a software upgrade request sending module, and a software data packet receiving module module, a software upgrade information verification module, and a software upgrade module.

The software upgrade information recording module is used for recording the software upgrade information of the software on a certain block of the block chain through a consensus algorithm after the first terminal upgrades a certain software. The software data packet sending module is used for the first terminal to send the corresponding software data packet to the second terminal after receiving the software upgrade request sent by the second terminal, wherein the software upgrade request is the second It is sent after the terminal inquires that there is new software upgrade information in the block chain. The software upgrade information query module is used for the second terminal to periodically query whether there is new software upgrade information in the block chain, wherein the software upgrade information is recorded in the block chain by the consensus algorithm after the first terminal performs the software upgrade on a certain block. A software upgrade request sending module, coupled with the software upgrade information query module, is used to send a software upgrade to the first terminal when the second terminal inquires that there is new software upgrade information in the block chain ask. A software data packet receiving module, configured for the second terminal to receive a corresponding software data packet sent by the first terminal. The software upgrade information verification module is coupled to the software data packet receiving module, and is used for comparing and verifying the new software upgrade information with the information of the software data packet. The software upgrade module is coupled with the software upgrade information verification module, and is used to upgrade the software of the second terminal after the verification of the software upgrade information verification module is passed, and record the software upgrade information through a consensus algorithm on said blockchain.

In one embodiment of the present invention, the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information, time stamp information and digital signature, wherein the index is used as the The input of the block is used to indicate the source of the software, and the software identifier, the size of the software, the hash verification information and the time stamp information are used as the output of the block.

In an embodiment of the present invention, the software upgrade information verification module is used to compare the software version number in the new software upgrade information with the software version number in the received software data package, if If the two are consistent, then the hash verification information in the new software upgrade information is compared with the hash verification information of the software data package. If the two hash verification information are consistent, the verification is passed , performing software upgrade on the second terminal.

Compared with the prior art, according to the block chain-based Internet of Things terminal software upgrade method and system of the present invention, the terminal device can download the latest version of software from other Internet of Things devices by querying the block chain software upgrade information, and complete the process spontaneously. Software upgrades have the advantage of decentralization, while ensuring the timeliness and traceability of software upgrades. This solution ensures the safety and reliability of software upgrades through the non-tamperable modification of blockchain data, and this bill does not need to deploy a central server , can effectively reduce costs, so this solution is very suitable for batch upgrades in the scenario of massive IoT terminal devices.

Description of drawings

Fig. 1 is the software upgrade mode based on the C/S architecture according to the prior art;

Fig. 2 is a block chain-based software upgrade model according to an embodiment of the present invention;

Fig. 3 is the execution flow of the block chain-based software upgrade method according to an embodiment of the present invention;

Fig. 4 is a module composition of a blockchain-based IoT terminal software upgrade system according to an embodiment of the present invention.

Detailed ways

The specific embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, but it should be understood that the protection scope of the present invention is not limited by the specific embodiments.

Unless expressly stated otherwise, throughout the specification and claims, the term "comprise" or variations thereof such as "includes" or "includes" and the like will be understood to include the stated elements or constituents, and not Other elements or other components are not excluded.

In order to safely and efficiently upgrade the software of massive terminal devices, the present invention proposes a blockchain-based method and system for upgrading the software of Internet of Things terminals. The upgrade information is stored on the blockchain through the consensus algorithm. Terminal devices can query the software upgrade information of the blockchain, download the latest version of software from other devices in the Internet of Things, and complete the software upgrade spontaneously, which has the advantage of decentralization and guarantees Timeliness and traceability of software upgrades. This solution ensures the security and reliability of the blockchain data through the non-tamperable modification, and provides a new solution for the software upgrade of the Internet of Things terminal.

Fig. 2 is a block chain-based software upgrade model according to an embodiment of the present invention. Each block contains multiple software upgrade information, organized in the form of a Merkle tree, and stored on the blockchain after verification by the consensus algorithm, thereby ensuring the authenticity and reliability of data records.

In this embodiment, the software upgrade information is shown in Table 1, which firstly includes the terminal device and the software identification to illustrate the source of the generated record. Each upgrade record has only one input and one output. The input is mainly an index, which indicates the source of the new version of the software. The source of the software and the propagation process can be traced through the index link. The output includes software version number, software size, Hash verification information and timestamp information. In order to prevent the spread of malware, the software version number and Hash verification information must be consistent with the software upgrade information pointed to by the index, otherwise it cannot pass the consensus algorithm verification , so the empty software upgrade information of the first index is critical and must be issued by a terminal device authorized by the administrator. The last is a digital signature to prevent forged software upgrade information.

Table 1. Software Upgrade Information

Fig. 3 is an execution flow of the blockchain-based software upgrade method according to this embodiment. Different graphics in the figure represent different types of terminal equipment. A, B and C are the same type of terminal equipment. The specific software upgrade process is as follows:

After terminal A has completed a certain software upgrade, it will record the software upgrade information on the position (m, i) on the blockchain through the consensus algorithm, where m represents the position of the block in the blockchain, and i represents the area The i-th upgrade record on block m; terminal B regularly queries the latest version of the software through the blockchain, and when it finds the latest software upgrade information of terminal A on the blockchain position (m, i), terminal B needs to upgrade the software ;Terminal B directly sends a software upgrade request to terminal A; after receiving the software upgrade request from terminal B, A transmits the latest version of the software data package to B, as shown in the figure, the data transmission needs to pass through the C terminal node; terminal B receives After receiving the software data packet sent by A, verify its integrity by comparing the record information of the blockchain (m, i); after passing the verification, B completes the software upgrade, and then continues to record the upgrade information in the block through the consensus algorithm on the block chain. As shown in FIG. 3 , the position of the record is (n, j), and its index points to (m, i).

Among them, when performing software upgrade information verification, terminal B compares the software version number in the new software upgrade information with the software version number in the received software data packet, and if the two are consistent, terminal B then updates the new software The hash verification information in the upgrade information is compared with the hash verification information of the software data package. If the two hash verification information are consistent, the verification is passed. Terminal B performs software upgrade and passes the software upgrade information. The consensus algorithm is recorded on said blockchain.

The upgrade process of other terminal devices in the network can be deduced by analogy until all terminal software upgrades are completed. In this way, the traceability of the software upgrade version of the terminal device can be realized.

Based on the same inventive concept, the present invention also provides a block chain-based Internet of Things terminal software upgrade system. FIG. 4 is a block chain-based Internet of Things terminal software upgrade system according to an embodiment of the present invention. The system includes : software upgrade information recording module 10, software data packet sending module 11, software upgrade information query module 12, software upgrade request sending module 13, software data packet receiving module 14, software upgrade information verification module 15 and software upgrade module 16.

The software upgrade information recording module 10 is used for recording the software upgrade information of the software on a certain block of the block chain through a consensus algorithm after the first terminal performs a certain software upgrade. Among them, the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information, time stamp information and digital signature, wherein, the index is used as the input of the block, and the software identification, software size, hash verification information verification information and timestamp information as the output of the block.

The software data packet sending module 11 is used for the first terminal to send the corresponding software data packet to the second terminal after receiving the software upgrade request sent by the second terminal, wherein the software upgrade request is that the second terminal queries the block chain Sent after new software upgrade information exists in .

The software upgrade information query module 12 is used for the second terminal to periodically inquire whether there is new software upgrade information in the block chain, wherein the software upgrade information is recorded in a block chain by the consensus algorithm after the first terminal performs the software upgrade. on the block.

The software upgrade request sending module 13 is coupled with the software upgrade information query module 12, and is used to send a software upgrade request to the first terminal when the second terminal inquires that there is new software upgrade information in the block chain.

The software data packet receiving module 14 is used for the second terminal to receive the corresponding software data packet sent by the first terminal.

The software upgrade information verification module 15 is coupled with the software data packet receiving module 14, and is used for the second terminal to compare and verify the new software upgrade information with the information of the software data packet.

The software upgrade module 16 is coupled with the software upgrade information verification module 15, and is used for when the software upgrade information verification module 15 checks and passes, the second terminal performs software upgrade and records the software upgrade information in the block chain through the consensus algorithm. superior. Wherein, the verification of the software upgrade information verification module 15 includes: comparing the software version number in the new software upgrade information with the software version number in the received software data package, if the two are consistent, then the new software is upgraded The hash verification information in the information is compared with the hash verification information of the software data package for consistency. If the two hash verification information are consistent, the verification is passed, and the second terminal performs software upgrade and passes the software upgrade information. The consensus algorithm is recorded on the blockchain.

In summary, according to the blockchain-based IoT terminal software upgrade method and system of this embodiment, a decentralized software upgrade solution is proposed by using blockchain technology, and software upgrades are realized through peer-to-peer terminal device nodes. In this scheme, every upgrade of the terminal software will be recorded on the blockchain through the consensus algorithm. Other terminal nodes can query the blockchain software upgrade information, select adjacent nodes to obtain the latest software version, and perform software upgrades, ensuring that the software The traceability of the upgrade source and historical version ensures the integrity of the software source through the non-tamperable modification of the blockchain data, effectively preventing the spread of malicious software, and this solution also provides the specific execution process of the software upgrade of the IoT terminal device , and analyze its security and performance. By introducing smart contracts and setting relevant trigger conditions, information such as the time of terminal software upgrade and software source can be determined, and the software upgrade method that is better and more suitable for actual application needs can be customized flexibly. In addition, This solution redefines the data structure of blockchain software upgrade information to store relevant information about the software upgrade process. Each record has only one input and output to ensure the traceability of the upgrade process, and through digital signatures to ensure Record Validity. In short, compared with the software upgrade method based on the C/S mode, the software upgrade method of this embodiment is more secure, reliable, efficient and timely, and the source and version history of the software upgrade can be traced, and the cost is lower.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowcharts and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The foregoing descriptions of specific exemplary embodiments of the present invention have been presented for purposes of illustration and description. These descriptions are not intended to limit the invention to the precise form disclosed, and obviously many modifications and variations are possible in light of the above teaching. The exemplary embodiments were chosen and described in order to explain the specific principles of the invention and its practical application, thereby enabling others skilled in the art to make and use various exemplary embodiments of the invention, as well as various Choose and change. It is intended that the scope of the invention be defined by the claims and their equivalents.

Claims (10)

1. A block chain-based Internet of Things terminal software upgrade method, characterized in that, comprising: After the first terminal performs a software upgrade, the software upgrade information of the software is recorded on a certain block of the blockchain through a consensus algorithm; After the first terminal receives the software upgrade request sent by the second terminal, it sends the corresponding software data packet to the second terminal, wherein the software upgrade request is the result of the second terminal querying the area Sent after new software upgrade information exists in the block chain. 2. The IoT terminal software upgrade method based on block chain as claimed in claim 1, wherein the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information , timestamp information and digital signature, wherein the index is used as the input of the block, and the software identification, the software size, the hash verification information and the timestamp information are used as the output of the block . 3. A block chain-based Internet of Things terminal software upgrade method, characterized in that, comprising: The second terminal periodically inquires whether there is new software upgrade information in the block chain, wherein the software upgrade information is recorded on a certain block of the block chain by the first terminal through a consensus algorithm after the software upgrade; When the second terminal inquires that there is new software upgrade information in the blockchain, it sends a software upgrade request to the first terminal; The second terminal receives the corresponding software data packet sent by the first terminal; The second terminal compares and verifies the new software upgrade information with the information of the software data package, and if the verification is passed, the second terminal performs software upgrade and passes the software upgrade information through a consensus algorithm recorded on said blockchain. 4. The IoT terminal software upgrade method based on block chain as claimed in claim 3, wherein the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information , time stamp information and digital signature, wherein, the index is used as the input of the block to indicate the source of the software, and the software identification, the software size, the hash verification information and the time stamp information are used as The output of the block. 5. The blockchain-based IoT terminal software upgrade method according to claim 4, wherein the second terminal compares and verifies the new software upgrade information with the information of the software data package verification, if the verification is passed, the second terminal performs a software upgrade and records the software upgrade information on the block chain through a consensus algorithm, including: The second terminal compares the software version number in the new software upgrade information with the software version number in the received software data packet, and if the two are consistent, the second terminal compares the new The hash verification information in the software upgrade information is compared with the hash verification information of the software data package, if the two hash verification information are consistent, the verification is passed, and the second terminal performs software upgrade And the software upgrade information is recorded on the block chain through the consensus algorithm. 6. A blockchain-based Internet of Things terminal software upgrade system, characterized in that it comprises: The software upgrade information recording module is used for recording the software upgrade information of the software on a certain block of the block chain through the consensus algorithm after the first terminal performs a certain software upgrade; A software data packet sending module, configured for the first terminal to send a corresponding software data packet to the second terminal after receiving the software upgrade request sent by the second terminal, wherein the software upgrade request is the first The second terminal sends it after inquiring that there is new software upgrade information in the block chain. 7. The Internet of Things terminal software upgrade system based on block chain as claimed in claim 6, wherein said software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information , timestamp information and digital signature, wherein the index is used as the input of the block, and the software identification, the software size, the hash verification information and the timestamp information are used as the output of the block . 8. A blockchain-based Internet of Things terminal software upgrade system, characterized in that it comprises: The software upgrade information query module is used for the second terminal to periodically query whether there is new software upgrade information in the block chain, wherein the software upgrade information is recorded in the block chain by the consensus algorithm after the first terminal performs the software upgrade on a block; A software upgrade request sending module, coupled with the software upgrade information query module, is used to send a software upgrade to the first terminal when the second terminal inquires that there is new software upgrade information in the block chain ask; A software data packet receiving module, configured for the second terminal to receive the corresponding software data packet sent by the first terminal; A software upgrade information verification module, coupled with the software data packet receiving module, for comparing and verifying the new software upgrade information with the information of the software data packet; A software upgrade module, coupled with the software upgrade information verification module, is used to upgrade the software of the second terminal after the software upgrade information verification module passes the verification and pass the software upgrade information through the consensus algorithm recorded on said blockchain. 9. The IoT terminal software upgrade system based on block chain as claimed in claim 8, wherein the software upgrade information includes terminal identification and software identification, index, software version number, software size, hash verification information , time stamp information and digital signature, wherein, the index is used as the input of the block to indicate the source of the software, and the software identification, the software size, the hash verification information and the time stamp information are used as The output of the block. 10. The IoT terminal software upgrade system based on blockchain as claimed in claim 9, wherein the software upgrade information check module is used to compare the software version number in the new software upgrade information with the received Compare the software version number in the described software data package, if the two are consistent, then compare the hash verification information in the new software upgrade information with the hash verification information of the software data package Yes, if the two hash verification information are consistent, the verification is passed, and the software of the second terminal is upgraded.