Secure recovery apparatus and method

摘要

A system and method is disclosed for recovering a boot image from a secure location. Hardware instructions initiate a sequence of boot cycles to launch a computer operating system on a computer-enabled device. During the boot cycles, multiple levels of boot code are verified and a determination is made whether each level is usable by the device. If a level of boot code is determined to be unusable, a secure copy of the boot code is loaded from a secure read-only location to repair the unusable code to launch the computer operating system.

主权项

1. A computing device, comprising:
a processor; a secure read-only location for storing at least one secure boot image; and a memory including initiation and recovery instructions for initiating a boot cycle of the computing device that, when executed by the processor, cause the computing device to:
initiate loading of a boot image, the boot image including multiple levels of boot code;determine, during the boot cycle, whether each of the multiple levels of boot code is usable or unusable; andin response to determining a respective level of boot code is unusable, stop the boot cycle, load a corresponding secure level of boot code from the secure read-only location, replace the respective level of boot code with the secure level of boot code, and resume the same boot cycle at a last known level of boot code determined to be usable.