Securely recovering a computing device

摘要

A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a read only memory (ROM) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

主权项

1. A method, comprising:
by a computing device:
loading, from a first storage of the computing device, a code image digitally signed by a signature into a second storage of the computing device;determining if the code image is certified by verifying the signature using a fingerprint embedded within a read only memory (ROM) of the device; andexecuting the code image when the code image is certified to establish an operating environment of the computing device; andentering a Device Firmware Upgrade (DFU) mode when the code image is not certified to establish the operating environment of the computing device, wherein the DFU mode performs system management tasks for the computing device.