Secure Boot ROM Patching Using OTP Indicators
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The vulnerability of the boot process in computer or server systems to persistent and undetectable malware, particularly in the ROM, makes it difficult and costly to address security flaws or errors post-manufacture, leading to early retirement of devices.
Innovation Solution
A method and apparatus for secure booting that involves verifying firmware integrity using certificates in ROM, checking for patches in OTP indicators, and writing these patches into RAM, allowing for post-manufacture updates and secure boot processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ROM is hardcoded in silicon for secure boot process, then security and reliability are improved, but adaptability and ease of repair deteriorate
Solution Approach 1:
The patent segments the boot process into multiple stages: initial ROM-based verification, followed by OTP indicator checking, and finally patched firmware execution. This segmentation allows the system to maintain security through ROM while enabling adaptability through separable patching mechanisms in later stages.
Solution Approach 2:
The patent introduces OTP indicators as intermediary elements between the hardcoded ROM and the firmware. These indicators act as a bridge that enables secure post-manufacture updates without compromising the integrity of the original ROM, resolving the contradiction between security and adaptability.
2Manufacturing precision
If ROM is hardcoded in silicon, then manufacturing precision and reliability are improved, but ease of manufacture and repair deteriorate
Solution Approach 1:
The patent implements preliminary action by pre-programming OTP indicators during or after manufacturing to indicate whether patches are available. This allows the system to be manufactured with high precision while maintaining ease of future updates, as the patching capability is prepared in advance but activated only when needed.
3Reliability
If ROM instructions are verified for integrity, then security is improved, but measurement precision and detection capability worsen
Solution Approach 1:
The patent applies dynamics by making the verification process adaptive rather than static. The system dynamically adjusts its verification behavior based on OTP indicators, allowing it to switch between strict ROM verification and patched firmware verification modes, thereby improving both security and detection capability.
Data Source
AI summary
A system and method are provided that enable a processor to have the immutable code and data that it uses for its boot process to be securely patched. A system may include a read only memory (ROM) storing one or more certificates and instructions, an array of one-time programmable (OTP) indicators, a bootstrap controller connected to the ROM and the array of OTP indicators, and a random access memory (RAM) connected to the bootstrap controller. The bootstrap controller is configured to verify integrity of firmware for boot based on certificates stored in ROM, check for a patch in the array of OTP indicators, and write the one or more certificates and the instructions in ROM and the patch into the RAM. The patch may be loaded into RAM by the bootstrap controller and overwrite ROM instructions or certificates in RAM.