Controlled secure code authentication

Abstract

Systems, methods, circuits and computer-readable mediums for controlled secure code authentication are provided. In one aspect, a method performed by a host device includes transmitting a request to a client device, the request including a challenge for a property of a code stored within the client device, receiving a response to the request, the response comprising information associated with the property of the code, verifying correctness of the response based on the received information, and based on the verifying of the correctness of the response, determining that the code is an authorized code.

Description

technical field [0001] The present invention relates generally to code authentication, and in particular to controlled security code authentication. Background technique [0002] In an example scenario, a method is implemented to protect code or programs executing on a device against fraudulently operating modifications or attacks. To illustrate, in an example secure boot method, a processor in the device generates a digest of the boot code and validates the digest of the boot code using a stored authentication signature of the boot code. However, this bootstrap implementation is executed locally by the device's processor, and is thus constrained by the performance, storage, and security of this local processor. Therefore, the security of the host / client network becomes dependent on the security of the processor system on the client side. Due to cost constraints, the security of local secure boot may be limited due to limited computing power or lack of protection of the bo...

AI Technical Summary

Problems solved by technology

Due to cost constraints, the security of local secure boot can be limited due to limited comp

Images