Trusted modular firmware update using digital certificate

摘要

An electronic device includes a boot memory, a hardware memory programmed with a signing key, and a processor configured to implement a fixed trusted module and a dynamic trusted image module. The fixed trusted module contains a digital certificate, which includes a platform key used to verify a first boot module, and a package verification key used to validate authenticity of an image update file. The dynamic trusted image module contains a platform certificate signed by the signing key. The platform certificate includes a platform verification key used to validate at least one of (i) a second boot module, (ii) an operating system loader, (iii) an operating system, or (iv) a file system. The platform certificate also includes image information associated with one or more images stored in the platform certificate, key information associated with one or more public keys, and electronic device-specific data.

主权项

1. An electronic device arranged for secure download of a firmware update, the electronic device comprising:
a boot memory; a hardware memory with a signing key stored in the hardware memory; and a processor configured to implement
a fixed trusted module stored in non-updatable hardware memory, said fixed trusted module containing a digital certificate, wherein the digital certificate includes (i) a platform key and (ii) a package verification key, andan electronically updatable dynamic trusted image module containing a platform certificate signed by the signing key, wherein the platform certificate includes (i) a platform verification key, (ii) image information associated with one or more images covered by the platform certificate, (iii) key information associated with one or more public keys, and (iv) electronic device-specific data associated with the electronic device, wherein the platform verification key (i) is a public key portion of the signing key, and (ii) is used to validate at least one of
a second boot module,an operating system loader,an operating system, ora file system.