Boot Loader Password Verification for Secure System Software Writing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
During system software upgrades on electronic devices, the existing methods lack robust security measures, allowing unauthorized access and potential malicious software installation by using a passcode different from the user-set HLOS password, which can be compromised.
Innovation Solution
A password verification function is integrated into the system writing operation, executed by a boot loader that decrypts and compares the received password with the stored HLOS password, ensuring only the user-set password confirms the identity before proceeding with the system software writing process, utilizing a write-protected memory for secure storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a passcode verification function is used during system software writing, then security against unauthorized software installation is improved, but the complexity of the writing process increases
Solution Approach 1:
The patent applies preliminary action by verifying the passcode before the system software writing process begins. The boot loader checks whether the passcode matches the stored password in write-protected memory before allowing the writing operation to proceed, preventing unauthorized software installation in advance
Solution Approach 2:
The patent uses the boot loader as an intermediary between the system software writing process and the passcode verification mechanism. The boot loader retrieves the password from write-protected memory, compares it with the provided passcode, and controls whether the writing operation should proceed, acting as a security gatekeeper
2Reliability
If write-protected memory is used to store the HLOS password, then security against unauthorized access is improved, but the device complexity increases
Solution Approach 1:
The patent applies local quality by implementing write-protection on specific memory regions where the HLOS password is stored. Rather than protecting the entire memory system, only the critical password storage area is made write-protected, providing targeted security while minimizing overall system complexity
Solution Approach 2:
The write-protected memory is configured in advance during device manufacturing or initialization, before any software writing operations occur. This preliminary setup ensures that the password cannot be modified or tampered with during normal operation or unauthorized writing attempts
Data Source
AI summary
Systems, methods, and software can be used to write system software on an electronic device. In some aspects, an instruction to write system software on an electronic device is received from a booting device that is different than the electronic device. In response to the instruction, a boot loader on the electronic device is invoked. A password is received from the booting device. Whether the received password matches a high level operating system (HLOS) password stored on the electronic device is determined. If the received password matches the HLOS password, the system software is written on the electronic device. If the received password does not match the HLOS password, the writing of the system software is halted.