Electronic Device Public-Key Rotation with Anti-Rollback Boot Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of electronic devices is compromised when the same public key is used for an extended period or due to poor management, leading to potential cracking and vulnerabilities, necessitating a safe and effective method for public key replacement without disrupting system operations.
Innovation Solution
An electronic device with a write-once memory pre-stored with multiple public keys and a counter with anti-rollback protection, allowing sequential use of these keys for verification, ensuring smooth transitions during updates and maintaining system security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the same public key is used for a long time to ensure system security, then the security verification is maintained, but the risk of key cracking and vulnerability increases
Solution Approach 1:
The patent implements dynamic public key management by allowing the system to switch between multiple public keys (first public key and second public key) based on operational needs. The processor can dynamically select which public key to use for verification, transitioning from a static single-key system to a dynamic multi-key system that adapts to security requirements and reduces key exposure time.
Solution Approach 2:
The system changes the parameter of public key identity by introducing multiple public keys with different identities (first public key and second public key). This parameter change allows the system to rotate keys over time, reducing the risk associated with any single key while maintaining continuous security verification capability.
2Object-affected harmful factors
If the public key is replaced to reduce security risks, then the key cracking risk is reduced, but the system may fail to boot up due to update failures
Solution Approach 1:
The patent prepares a second public key in advance before the first public key becomes compromised or needs replacement. This second public key serves as a cushion or backup that ensures continuous system operation. When the first public key needs replacement, the system can smoothly transition to the second public key without interruption, preventing boot-up failures.
Solution Approach 2:
The second public key acts as an intermediary during the key replacement process. It provides a transitional security mechanism that bridges the gap between the old first public key and any future third public key, ensuring that security verification continues uninterrupted during the replacement transition.
3Adaptability or versatility
If multiple public keys are stored in write-once memory to enable key replacement, then the key replacement capability is achieved, but the device complexity increases
Solution Approach 1:
The patent segments the public key storage by dividing it into multiple distinct public keys (first public key, second public key) stored in separate locations within the write-once memory. This segmentation allows the system to manage and switch between different keys independently, enabling key replacement capability while organizing the complexity into manageable segments.
Solution Approach 2:
The system performs preliminary action by pre-storing multiple public keys in the write-once memory during manufacturing or initial setup. This preliminary preparation eliminates the need for complex runtime key generation or import mechanisms, reducing the overall device complexity while maintaining key replacement capability through simple key selection based on predefined indices.
Data Source
AI summary
An electronic device includes an immutable memory, a counter, and a processor. The immutable memory stores a first public key and a second public key in advance, and the first public key and the second public key are unmodifiable. The counter has an anti-rollback protection and counts a counting value. When the counting value is a first value, the processor selects a first public key corresponding to the first value. When the counting value is a second value, the processor selects the second public key corresponding to the second value. When the counting value is a third value, the processor selects the first public key and the second public key. The first value and the second value are in a first state, and the third value is in a second state, where the first state and the second state are different.