Securely recovering a computing device

摘要

A method and an apparatus for establishing an operating environment by certifying a code image received from a host over a communication link are described. The code image may be digitally signed through a central authority server. Certification of the code image may be determined by a fingerprint embedded within a secure storage area such as a ROM (read only memory) of the portable device based on a public key certification process. A certified code image may be assigned a hash signature to be stored in a storage of the portable device. An operating environment of the portable device may be established after executing the certified code.

主权项

1. A computer implemented method, comprising:
loading a code image digitally signed by a signature into a device, the code image being received from a server over a communication network; determining if the code image is certified by verifying the signature using a fingerprint embedded within ROM (read only memory) of the device; and executing the code image if the code image is certified to establish an operating environment of the device; entering a DFU (Device Firmware Upgrade) mode if the code image is not certified to establish the operating environment of the device, wherein the DFU mode performs system management tasks for the device.