Firmware offline verification method and system for embedded equipment

Abstract

The invention discloses an embedded equipment firmware offline verification method, which comprises the steps that a firmware manufacturing tool manufactures firmware and generates a firmware abstract; the firmware making tool sends the abstract to a server; the server generates a public key and a private key; the server signs the firmware abstract; the server sends the signature and the public key; the firmware making tool writes the firmware, the signature and the public key into a device; the firmware making tool sends the firmware abstract to the equipment; the device generates a firmwareabstract to be compared through the public key, the public key and a digital signature algorithm; and when the firmware abstract to be compared is consistent with the firmware abstract, the equipmentis started. Compared with the prior art, the method has the following beneficial effects that the firmware authentication starting is realized on equipment without a safety function, the constructionlink needs to be carried out in a local area network environment, and offline authentication needs to be carried out on the firmware.

Description

technical field [0001] The present application relates to the field of the Internet of Things, and in particular, relates to a method for offline verification of embedded device firmware. Background technique [0002] With the development of the Internet of Things environment, more and more embedded devices are used in the smart home industry. Due to the emphasis on development costs in the embedded industry, most of the devices use ordinary external flash, which leads to The only thing is that it is easy to inject firmware and cause the device to be compromised. [0003] At present, a common method is to use the security functions attached to the more advanced processors to implement secure booting of the firmware, but this solution cannot be well implemented on older chip platforms. Contents of the invention [0004] The main purpose of this application is to provide a method for offline verification of embedded device firmware, including: [0005] The firmware making ...

AI Technical Summary

Problems solved by technology

[0002] With the development of the Internet of Things environment, more and more embedded devices are used in the smart home industry. Due to the emphasis on development costs in the embedded industry, most of the devices use ordinary external flash, which leads to The most important thing is that it is easy to inject firmware and cause the device to be compromised

[0003] At present, the common practice is to use the security function attached to the more advanced processor itself to realize the secure boot of the firmware, but this solution cannot be well implemented on the older chip platform

Images