Asymmetric Verifier Application for IoT Bootloader Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices face challenges in performing secure software updates due to limited memory, processing power, and communication bandwidth, making it infeasible to use asymmetric cryptography for verification.
Innovation Solution
The method involves storing the asymmetric verifier application in off-device storage and loading it only when needed, allowing for verification using asymmetric-key cryptography without permanent memory reservation, and using hash signatures to reduce computational complexity, while embedding keys and hashes during manufacture for enhanced security and bandwidth efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric cryptography is used for software update verification, then security is improved, but storage capacity is excessively consumed
Solution Approach 1:
The patent makes the asymmetric verifier application dynamic by loading it from external storage only when verification is needed, rather than permanently storing it on the device. This allows the device to have asymmetric cryptography capability when required while maintaining minimal permanent storage usage, resolving the contradiction between security and storage capacity constraints.
2Reliability
If asymmetric cryptography software is permanently stored on device, then verification capability is ensured, but storage capacity is significantly reduced for other uses
Solution Approach 1:
The patent segments the verification functionality by separating the asymmetric verifier application from the core device storage. The verifier is stored externally and loaded only when needed, allowing the device to maintain verification capability while keeping storage available for other purposes during normal operation.
3Quantity of substance
If symmetric cryptography is used for verification, then storage requirements are reduced, but security is compromised due to key leakage risk
Solution Approach 1:
The patent dynamically loads the asymmetric verifier application from external storage only when verification is required, rather than permanently storing it. This approach maintains the security advantages of asymmetric cryptography while minimizing permanent storage requirements, avoiding the key leakage risks associated with symmetric cryptography.
Data Source
AI summary
Device verification extension technology obtains, in response to a request to verify a signature associated with first data, an asymmetric verifier application from off-device storage. The asymmetric verifier application is loaded and executed. The signature associated with the first data is verified using the asymmetric verifier application using asymmetric-key cryptography.