Method for generating a secured boot image including an update boot loader for a secured update of the version information

摘要

In a secure boot method, an initial boot loader verifies a first digital signature included in a first boot loader using a public key. The first boot loader is executed if the first digital signature is valid. The first boot loader verifies a first message authentication code included in a second boot loader using a unique key. The second boot loader is executed if the first message authentication code is valid.

主权项

1. A secure boot method, comprising:
verifying, by an initial boot loader, a first digital signature included in a first boot loader using a public key; executing the first boot loader upon determining the first digital signature to be valid; verifying, by the first boot loader, a first message authentication code included in a second boot loader using a unique key; executing the second boot loader upon determining the first message authentication code to be valid; comparing a first build number included in the second boot loader stored in a nonvolatile memory device to a second build number included in an update boot loader stored in a volatile memory device; and overwriting the second boot loader with the update boot loader in the nonvolatile memory device upon determining that the second build number is higher than the first build number.