ECU Secure Boot Verification Shifted to Shutdown for Fast Startup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle devices with fast boot-up requirements do not have sufficient time to execute secure boot processes, compromising security during boot-up, as existing methods lack descriptions for ensuring security in such scenarios.
Innovation Solution
An electronic control device with a controller, security verifier, and boot-up code is implemented, where the code is verified during shutdown, allowing secure boot-up by executing verified boot-up code during the next boot cycle, ensuring security through a secure module like a hardware security module.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure boot is executed during boot-up using a secure module, then security is improved, but boot-up time increases and fast boot-up cannot be achieved
Solution Approach 1:
The patent performs code verification in advance during shutdown instead of during boot-up. The security verifier verifies the boot-up code while the microcomputer is transitioning to shutdown state, stores the verification result, and then executes the verified code during fast boot-up without performing verification again, thus achieving both security and fast boot-up
Solution Approach 2:
The patent creates a copy of the verification result from the shutdown phase and reuses it during boot-up. Instead of re-verifying the code during boot-up, the system retrieves and uses the previously stored verification result, eliminating redundant verification operations and enabling fast boot-up while maintaining security
2Reliability
If code verification is performed during boot-up, then security is ensured, but the ECU cannot achieve fast boot-up from standby
Solution Approach 1:
The verification process is moved to the shutdown phase where it is performed in advance. The security verifier verifies the boot-up code during the transition to shutdown state, and the verification result is stored for later use during boot-up, allowing the ECU to skip verification during fast boot-up and achieve both security and speed
Solution Approach 2:
The patent dynamically adjusts the verification process based on the system state. During shutdown, verification is performed and the result is stored. During subsequent boot-up from standby, the system dynamically retrieves and uses the stored verification result, adapting the verification timing to optimize both security and boot-up speed
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a technology to ensure security during fast boot-up. Provided according to the present invention is an electronic control device installed on a mobile body, the electronic control device including a controller which controls a microcomputer using code, a security verifier which makes security verification of the code, and boot-up code which is part of the code and is executed when the microcomputer is booted. The controller enables, when the code or the boot-up code has been verified by the security verifier at the time of a transition of the microcomputer to a shutdown state, the boot-up code to be executed during next boot-up.