Boot Controller TCM Verification Before Processor Wake-Up

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing computing devices face challenges in ensuring the integrity of boot code during the boot process, as attackers can modify software during a power-off state, compromising security and reliability.

Innovation Solution

A boot controller is introduced to verify the integrity of boot code stored in ROM by generating a check log based on expected values from a secure memory, determining a boot mode, and outputting a core reset signal to wake up the processor core only if the integrity is confirmed, thus isolating the processor from potentially compromised boot code.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the processor core is involved in verifying boot code integrity, then the verification process can be performed, but the processor may be exposed to compromised boot code and security risks

Engineering Contradiction:

Improveboot code integrity verificationVSAvoidprocessor exposure to compromised code

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a boot controller as an intermediary component that performs boot code integrity verification independently of the processor core. The boot controller reads boot code from ROM, verifies its integrity using hash comparison against stored expected values, and only then activates the processor core. This mediator approach allows verification to occur without exposing the processor to potentially compromised code.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into distinct functional components: the boot controller handles verification tasks, the ROM stores boot code, and the processor core executes approved code. This segmentation separates the verification function from the execution function, allowing the processor to remain isolated from the verification process while still benefiting from it.

Inventive Principle:

Principle #1Segmentation

2Reliability

If boot code integrity verification is implemented, then security is improved, but the boot process complexity increases

Engineering Contradiction:

Improveboot process securityVSAvoidboot controller and verification mechanism

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The boot controller performs self-verification by comparing the hash of retrieved boot code against pre-stored expected hash values in its internal memory. This self-service approach eliminates the need for external verification mechanisms or additional processor involvement, reducing overall system complexity while maintaining security.

Inventive Principle:

Principle #25Self-service

3Speed

If the processor core wakes up immediately after power-on, then boot speed is improved, but the processor may execute compromised code before verification

Engineering Contradiction:

Improveboot speedVSAvoidcode execution safety

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The boot controller performs integrity verification in advance before activating the processor core. By conducting the verification action preliminarily, the system ensures that only authenticated boot code will be executed, preventing the processor from running compromised code while minimizing the delay through efficient hash comparison operations.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12547726B2Boot controller has tightly coupled smart memory (TCM) unit comprising boot code accessed by ROM memory unit for verifying integrity of boot code

Publication Date: 2026.02.10 SAMSUNG ELECTRONICS CO LTD

AI summary

Provided are a boot controller and a computing device including the boot controller. After receiving a power-on-reset signal from the computing device, the boot controller verifies the integrity of boot code stored in read only memory (ROM) of the computing device by reading the boot code from the ROM, and determines a boot mode of the computing device based on results of the verification of the integrity of the boot code stored in the ROM.