System and method for updating software, server and client thereof

A method for updating software comprising:

• reporting, by a client, an updating request;
• initiating, by the client, an authentication request;
• obtaining, by the client, first verification content from an updating server according to the authentication request;
• comparing, by the updating server, the first verification content sent from the client with second verification content which is stored in the updating server;
• returning, by the server, succeed information to the client when said comparing indicates a passed authentication;
• generating, by the updating server, configuration information according to the updating request;
• adding, by the updating server, a digital signature on the configuration information before sending, by the updating server, the configuration information with the added digital signature to the client;
• carrying out, by the client, signature verification on the configuration information;
• downloading, by the client, an updating data package from the updating server after the signature verification is successfully carried out.

A server comprising:

• a processor;
• and
• a memory storing machine instructions that, when executed by the processor, cause the processor to perform operations comprising:
• generating configuration information according to an updating request by a client;
• sending to the client first verification content according to an authentication request from the client;
• comparing the first verification content with stored second verification content for authentication;
• returning succeed information to the client when said comparing indicates a passed authentication;
• adding a digital signature on the configuration information;
• sending the configuration information with the added digital signature to the client;
• providing, after the client successfully carries out signature verification on the configuration information, the client with an updating data package.

A client, comprising:

• a processor;
• and
• a memory storing machine instructions that, when executed by the processor, causes the processor to perform operations comprising:
• obtaining first verification content from an updating server according to an authentication request initiated by the client;
• obtaining succeed information after an authentication through a comparison by the updating server between the first verification content and second verification content stored in the updating server indicates a passed authentication;
• obtaining configuration information that the updating server generates and has a digital signature added thereto by the updating server, according to an updating request by the client;
• carrying out signature verification on the configuration information;
• and
• downloading an updating data package from the updating server after the signature verification is successfully carried out.