Configuration Memory Layout for Authorized Firmware Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack efficient methods to manage and authenticate multiple configurations, allowing unauthorized changes that can lead to denial of service and security vulnerabilities.
Innovation Solution
Implementing a memory structure with a binary word containing a first value representing the installed configuration and a second value indicating permitted configurations, using a shared encryption key for updates, and a read-only region to manage configuration files, ensuring only authorized changes can be made.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple configuration files are stored in memory for different device versions, then the device can support configuration updates and version changes, but the memory structure becomes more complex and requires additional management mechanisms
Solution Approach 1:
The memory is divided into a limited-access region (containing the binary word with configuration metadata) and a read-only region (containing encryption keys). This segmentation separates configuration management functions from storage functions, allowing efficient handling of multiple configuration files without requiring complex overall memory management.
Solution Approach 2:
The binary word is pre-configured in the limited-access region with the first value indicating the installed configuration version and the second value indicating permitted configurations. This preliminary setup enables the device to automatically manage configuration updates without requiring complex runtime decision-making logic.
2Productivity
If configuration files are made accessible for updates, then the device can be upgraded and maintained, but unauthorized access and malicious modifications become possible leading to security vulnerabilities
Solution Approach 1:
The read-only region containing the encryption key is protected against unauthorized writing from the start. This preliminary protective measure prevents malicious modifications before they can occur, while still allowing legitimate updates through the authenticated process using the protected key.
Solution Approach 2:
The encryption key stored in the read-only region acts as an intermediary that mediates between configuration update requests and the actual configuration files. It authenticates updates without being exposed to direct manipulation, thus maintaining security while enabling maintainability.
3Reliability
If a read-only region with encryption key is implemented to secure configuration updates, then unauthorized changes are prevented, but the memory structure and update process become more complex
Solution Approach 1:
The memory is segmented into distinct regions with specific access permissions: a limited-access region for configuration metadata and a read-only region for the encryption key. This clear segmentation simplifies the access control logic compared to implementing complex permission systems within a unified memory structure.
Solution Approach 2:
The read-only region serves multiple functions: it stores the encryption key, prevents unauthorized writing, and provides the foundation for the authenticated update process. This multi-functionality reduces the need for additional separate security mechanisms, thereby limiting overall complexity.
4Ease of operation
If the binary word contains detailed information about permitted configurations, then precise control over configuration installation is achieved, but the data structure and processing requirements increase
Solution Approach 1:
The binary word uses two specific parameters (first value for installed configuration version, second value for permitted configurations) to control configuration installation. This parameter-based approach provides precise control while keeping the data structure simple and易于 processing compared to more detailed configuration description structures.
Data Source
AI summary
An electronic device is configured to support at least two configurations, one of the configurations being installed. The device includes a memory. In a limited-access region of the memory, a binary word is stored. That binary word has: a first value representative of the version of the installed configuration; and at least one second value indicating which configurations can be installed. A method of configuration of the electronic device includes determining, according to the second value, whether the configuration which attempts to be installed is permitted.