Device unit suitable for operation in a protected and/or open operating state and associated method

Abstract

The invention relates to a device unit (GE), comprising a module (M), which can configure the device unit (GE) with an operating state from among different operating states during the start-up processand / or during ongoing operation of the device unit, wherein a first protected operating state of the different operating states is designed to allow the execution of at least one operating process which can be predefined and to optionally protect said operating process by means of defined cryptographic means, wherein at least one second operating state of the different operating states is designed to deactivate the first protected operating state and to allow at least one other changeable operating process and to optionally protect said operating process by means of specifiable cryptographicmeans, and wherein, if the configured operating state corresponds to the first operating state, the module (M) maintains the first operating state, or, if the configured operating state corresponds tothe at least second operating state, the module (M) deactivates the first operating state and initiates and / or maintains the at least second operating state.

Description

technical field [0001] The invention relates to a device unit suitable for operating in a protected and / or open operating state, as well as an associated method and an associated computer program (product). Background technique [0002] Embedded systems (Embedded Systems or Devices) are often used in the context of Industry 4.0, in the Industrial Internet and in automation systems. These embedded systems can in individual cases be based on similar hardware, such as workstation computers. However, for these embedded systems, strict boundary conditions such as minimum cost, small space footprint, low power consumption and small memory footprint are usually required. Individual components such as processors and working memories are often based on further developments of older components. This facilitates long-term availability and procurement of spare parts. New embedded systems are often based on processor platforms that are highly integrated relative to peripheral modules ...

AI Technical Summary

Problems solved by technology

However, this is not possible on embedded platforms where the key is burned in a so-called fuse (combustible fuse)

This UEFI-BIOS variant also has the disadvantage that the security level of Secure Boot basically depends on the security of the BIOS password

Then although the user has the right to obtain the source code according to the license and modify it according to his vision, he has no technical possibility to run the modified software on the manufacturer's equipment

Images