Chip Safety Boot Mirror Integrity Checks After Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The conventional security boot process in intelligent driving chips, which utilize external flash storage, fails to ensure functional safety due to potential data damage during decryption by the hardware security module, leading to poor boot safety.
Innovation Solution
A control method and apparatus that perform integrity checks on decryption results using first and second check codes to ensure the integrity of mirror data, ensuring that only undamaged data is used for booting, thereby enhancing functional safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted for storage in external flash during safety boot process, then security requirements are met, but functional safety-related failures may occur during decryption
Solution Approach 1:
The patent applies preliminary action by performing integrity verification on encrypted data before decryption. The verification module checks the encrypted mirror data using a verification algorithm to obtain first verification information, which is then compared with second verification information obtained after decryption. This preliminary check prevents damaged data from proceeding through the decryption process, thereby avoiding functional safety failures while maintaining security encryption.
2Reliability
If integrity check is performed on decryption result, then data integrity is ensured, but boot process time increases
Solution Approach 1:
The patent performs integrity verification in parallel during the boot process rather than sequentially. The verification module operates concurrently with the decryption process, checking encrypted data before and after decryption without blocking the overall boot flow. This approach ensures data integrity while minimizing additional time overhead by integrating verification into the existing boot timeline.
Solution Approach 2:
The patent implements feedback mechanisms where verification results from both before and after decryption are compared. The processing module receives feedback from the verification module and makes real-time decisions about whether to proceed with boot operations. This feedback loop ensures that any integrity issues are immediately detected and handled, maintaining reliable boot processes while managing time efficiency through responsive decision-making.
Data Source
AI summary
Disclosed are a control method and apparatus for safety boot of a chip, an electronic device and a storage medium. The method includes: determining, at a preset stage of a chip boot process, first mirror data to be checked at the preset stage and first check code corresponding to the first mirror data, from a decryption result obtained by a hardware security module; determining second check code based on the first mirror data; comparing the second check code with the first check code to obtain a comparison result; determining an integrity check result of the first mirror data based on the comparison result; and executing, based on the integrity check result, a safety boot program corresponding to the first mirror data at the preset stage.