Boot Firmware Integrity Validation via Pre-Stored Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing devices face issues with boot firmware corruption due to malicious attacks, electromigration, and radiation, leading to operational failures, especially in critical applications like medical and financial systems, where reliable boot processes are essential.
Innovation Solution
A computing system with a security processor that verifies and validates multiple copies of boot firmware using digital signatures, generating and comparing hash values to ensure integrity, and switching to a valid copy during bootup, while maintaining logs for mismatch detection and potential repair.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple copies of boot firmware are stored and validated using digital signatures, then reliability is improved, but device complexity increases
Solution Approach 1:
The system generates and stores digital signatures of boot firmware copies before the boot process begins. During bootup, the security processor retrieves these pre-stored signatures and compares them against the current boot firmware copy, enabling rapid validation without time-consuming computations during the critical boot phase.
Solution Approach 2:
The patent stores multiple copies of boot firmware in the firmware storage device, each with its own digital signature. This creates redundant validated copies that can be used if the primary copy becomes corrupted, thereby improving reliability through duplication rather than through complex real-time verification mechanisms.
2Reliability
If boot firmware is validated during bootup operation, then reliability is improved, but bootup time increases
Solution Approach 1:
Digital signatures of boot firmware copies are generated and stored in advance before the boot process begins. During bootup, the security processor simply retrieves the stored signature and compares it with the current firmware copy, avoiding time-consuming hash computations during the critical boot phase and thus minimizing bootup time while maintaining validation reliability.
3Reliability
If the computing system switches to a valid boot firmware copy upon detecting corruption, then reliability is improved, but device complexity increases
Solution Approach 1:
The system maintains multiple copies of boot firmware in storage, each independently signed. When corruption is detected in the active copy, the system can switch to a previously validated copy from storage without requiring complex repair mechanisms or external intervention, thereby improving availability through simple copy switching.
Solution Approach 2:
The security processor automatically detects firmware corruption through signature validation and autonomously switches to a valid copy from storage without requiring external intervention. This self-service capability improves reliability while keeping the control mechanism relatively simple, as the processor handles the switching based on pre-stored valid copies.
Data Source
AI summary
An apparatus and method for providing access to reliable boot firmware. In various implementations, a computing system includes an integrated circuit with a security processor. Prior to performing any steps of a bootup operation using one of multiple copies of boot firmware, the security processor determines whether multiple signatures exist where the signatures are based on the multiple copies of boot firmware. Each of the multiple copies of boot firmware is a copy of a particular version of boot firmware. If the multiple signatures do not yet exist, then the security processor generates the signatures using the multiple copies of boot firmware. During a bootup operation, when the security processor determines that the multiple signatures already exist, the security processor uses these signatures to validate one or more of the multiple copies of boot firmware. The security processor continues with the bootup operation using the validated copy of boot firmware.