How OTA Updates Work
TkushPatch delivers instant code updates to production Flutter mobile applications without requiring App Store or Google Play re-validation.
1. Operating Principle
Over-The-Air (OTA) updates rely on sending optimized binary diffs:
- Automatic Check: The mobile app queries the TkushPatch server on startup or in the background to check if an update is available for its release.
- Eligibility & Targeting: The server evaluates delivery policies (staged rollout percentage, target countries, track) and returns patch metadata if the device is eligible.
- Optimized Download: The app downloads only a lightweight compressed patch (a few hundred kilobytes) instead of an entire multi-megabyte app package.
- Integrity & Signature Verification: Before any local installation, the app validates the digital signature and cryptographic hash of the patch.
- Seamless Activation: The patch is prepared in the background and activated smoothly on the next app restart.
2. Update Flow
| Step | Client Action (Mobile) | Server Action (TkushPatch) |
|---|---|---|
| 1. Check | App sends current release version and target architecture. | Server evaluates rollout rules, patch status, and governance. |
| 2. Decision | If no patch is available, execution continues normally. | If an eligible patch exists, server returns secure download metadata. |
| 3. Download | App downloads the compressed patch file in the background. | Server logs delivery metrics for real-time fleet analytics. |
| 4. Validation | App verifies the digital signature to ensure authenticity. | — |
| 5. Activation | Patch is stored locally and activated on next launch. | Installation success events are reported to the web dashboard. |
3. Built-in Security and Safeguards
Security is enforced at every step of the delivery lifecycle:
- Cryptographic Signatures: Every patch is digitally signed before distribution. Devices strictly reject any tampered or unverified files.
- Strict Version Binding: Patches are tied to specific release versions and cannot be cross-applied.
- Instant Rollback (Kill-Switch): If an issue occurs, operators can revoke a patch instantly, returning devices to the base release.