Concurrent Image Measurement and Execution for Secure Boot
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Memory devices in computing systems face delays during secure boot processes due to cryptographic measurements, which are critical in time-sensitive applications like automobiles, leading to potential negative impacts on system performance.
Innovation Solution
Concurrent measurement and execution of image portions using separate processing resources, allowing for secure boot without copying images to volatile memory, thereby reducing delays.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic measurements are performed sequentially before execution, then security is ensured, but boot time delays increase
Solution Approach 1:
The patent performs cryptographic measurements of image portions before execution begins, but structures the measurement process to complete critical security verification in advance. The first portion of the image is measured and validated beforehand, allowing the boot process to start immediately while subsequent portions are measured during execution, thus ensuring security without delaying the critical boot time.
Solution Approach 2:
The patent enables continuous operation by overlapping the measurement of later image portions with the execution of earlier portions. While the first processing resource executes the first portion of the image, the second processing resource simultaneously measures subsequent portions, eliminating idle time and maintaining continuous useful action throughout the boot process.
2Reliability
If cryptographic measurements are performed on the entire image before execution, then authentication security is improved, but system productivity decreases
Solution Approach 1:
The patent divides the image into multiple portions and processes them separately using two different processing resources. The first portion is measured and executed by the first processing resource, while subsequent portions are measured by the second processing resource and executed sequentially. This segmentation allows parallel processing of measurement and execution tasks, maintaining authentication security while improving system productivity through concurrent operations.
Solution Approach 2:
The patent performs critical security measurements of the first image portion before execution begins, ensuring authentication security is established in advance. Subsequent portions are measured during execution rather than requiring complete pre-measurement, thus maintaining security requirements while reducing the total time the system remains non-operational, thereby improving overall productivity.
3Measurement precision
If complete image measurement is performed before execution, then measurement precision is ensured, but loss of time increases
Solution Approach 1:
The patent performs cryptographic measurements of the first image portion before execution to ensure measurement precision and authentication security are established in advance. However, it does not require complete measurement of all image portions before execution begins, instead measuring subsequent portions during execution, thus maintaining measurement accuracy where critical while reducing the time delay.
Solution Approach 2:
The patent maintains continuous useful action by overlapping the measurement process with execution. While the first portion is executed, the second processing resource simultaneously measures subsequent portions, ensuring measurement precision is maintained for all portions without creating idle time gaps, thus eliminating the trade-off between measurement accuracy and time loss.
Data Source
AI summary
Apparatuses and methods related to concurrently measuring and executing images. An apparatus for concurrently measuring and executing images can include a memory device, a first processing resource and a second processing resource. The first processing resource can execute instructions stored in the memory device to execute a first portion of an image responsive to measuring the first portion of the image and execute a second portion of the image responsive to measuring the second portion of the image. The second processing resource can execute instructions stored in the memory device to measure the first portion of the image and measure the second portion of the image concurrently with an execution of the first portion of the image by the first processing resource.


