Trust Transference From a Trusted Processor to an Untrusted Processor

摘要

A trusted processor is pre-booted using a secure pre-boot loader integrated with the trusted processor. The trusted processor verifies whether an external boot loader is valid, and when valid, the trusted processor is booted using the external boot loader, thereby enabling trusted operation of the trusted processor. The trusted processor verifies whether a firmware image for a field programmable device is valid, and when valid, a firmware image loading process for the field programmable device is triggered. When the firmware image loading process is triggered, the firmware image is loaded into the field programmable device and the field programmable device is released to execute of the firmware image. The field programmable device verifies whether an external boot loader for an untrusted processor is valid, and when valid, the untrusted processor is booted using the external boot loader for the untrusted processor, thereby enabling trusted operation of the untrusted processor.

主权项

1. A method comprising:
pre-booting a trusted processor using a secure pre-boot loader integrated with the trusted processor; verifying whether an external boot loader for the trusted processor is valid; when the external boot loader for the secure processor is valid, booting the trusted processor using the external boot loader, thereby enabling trusted operation of the trusted processor; first verifying, by the trusted processor, whether a firmware image for a field programmable device is valid; and when the firmware image for the field programmable device is valid, triggering a firmware image loading process for the field programmable device.