SYSTEM AND METHOD FOR UPDATING SOFTWARE, SERVER AND CLIENT THEREOF

摘要

A system and method for updating software, a server and a client. The method includes: a client reporting an updating request and initiating an authentication request; the client obtaining first verification content from an updating server according to the authentication request; the updating server comparing the first verification content sent from the client with second verification content which is stored in the updating server, and returning succeed information to the client after a passed authentication; the updating server generating configuration information according to the updating request, and adding a digital signature on the configuration information before sending the configuration information with the digital signature to the client; the client carrying out signature verification on the configuration information, and downloading an updating data package from the updating server after the signature verification is passed. Through the bidirectional identification, the security of the software updating is improved.

主权项

1. A system for updating software comprising:
a client; and an updating server, wherein
the client is used to report an updating request to the updating server, the updating server is used to generate configuration information according to the updating request, the client is further used to initiate an authentication request and to obtain first verification content from the updating server, the updating server is used to compare the first verification content with second verification content that is stored in the updating server for authentication and to return succeed information to the client when said compare indicates a passed authentication, the updating server is further used to add a digital signature on the configuration information, and to send the configuration information with the digital signature to the client, and the client is further used for carrying out signature verification on the configuration information and, if the signature verification is successfully carried out, to download an updating data package from the updating server.