DICE Boot Measurement Flags for Faster Secure Startup

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Layered boot devices, such as DICE devices, suffer from long boot times due to the computational expense of measuring each layer during the boot sequence, which is necessary for secure booting.

Innovation Solution

A system that performs layer measurements during shutdown, setting flags for compromised layers, and uses these flags to bypass measurements during startup, thereby reducing computational overhead and boot time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If layer measurements are performed during boot sequence, then secure booting is ensured, but boot time increases

Engineering Contradiction:

Improvesecure bootingVSAvoidboot time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent performs layer measurements during the shutdown phase before the system is fully powered off, rather than during the boot sequence. The measurements are stored in non-volatile memory, and during subsequent boots, the system retrieves these pre-computed measurements and their associated flags, bypassing the need to re-perform the computationally expensive measurement operations during startup.

Inventive Principle:

Principle #10Preliminary action

2Loss of time

If layer measurements are performed during shutdown, then boot time is reduced, but computational overhead during shutdown increases

Engineering Contradiction:

Improveboot timeVSAvoidcomputational overhead during shutdown

Core Design Contradiction:

Loss of timeVSUse of energy by moving object

Solution Approach 1:

The measurement process is performed periodically at shutdown events rather than at every boot event. Once measurements are taken and flags are set during shutdown, the system can rapidly boot without repeating the measurements unless another shutdown occurs. This periodic approach distributes the computational burden away from frequent boot operations.

Inventive Principle:

Principle #19Periodic action

3Loss of time

If flags are used to bypass measurements during startup, then boot time is reduced, but device complexity increases

Engineering Contradiction:

Improveboot timeVSAvoiddevice complexity

Core Design Contradiction:

Loss of timeVSDevice complexity

Solution Approach 1:

The patent introduces flags as intermediary data structures that store the results of layer measurements. These flags act as a mediator between the measurement process and the boot process, allowing the system to quickly determine whether full measurements are needed or if pre-computed results can be used. The flags are stored in non-volatile memory and require minimal processing to retrieve and evaluate during boot.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12591683B2Reducing start up times in device identity composition engine (DICE) devices

Publication Date: 2026.03.31 MICRON TECHNOLOGY INC

AI summary

In some aspects, the techniques described herein relate to a system including: a storage array; a controller configured to detect a shutdown event; and an auto-measure circuit configured to: generate a plurality of measurements corresponding to a plurality of layers of a boot sequence, each layer including executable code used to generate a respective measurement; compare the plurality of measurements to a respective plurality of golden measurements; update flags associated with the plurality of layers based on the comparing; and instruct the controller to shut down the system after updating the flags.