Embedded System Startup Snapshot Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing embedded system startup methods that rely on fast snapshot image loading for high-speed startup do not adequately address the need for security inspection, leading to inefficiencies in falsification verification, particularly for unexecuted programs.
Innovation Solution
An embedded system startup method that performs falsification verification on the snapshot image stored in a nonvolatile storage unit before loading it into RAM, confirming its integrity before restoring and executing the program, thereby minimizing unnecessary processing and ensuring security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security inspection is carried out for the snapshot image at startup, then program integrity is ensured, but processing time increases and startup time is extended
Solution Approach 1:
The patent applies preliminary action by performing falsification verification on the snapshot image during the startup process before program execution. The verification unit checks the integrity of the snapshot image loaded into RAM from non-volatile storage, ensuring program authenticity before the program actually runs. This preliminary security check prevents executing compromised code while maintaining efficient startup by verifying only the snapshot image rather than all programs.
2Reliability
If falsification verification is performed for unexecuted programs, then complete security coverage is achieved, but processing time increases significantly
Solution Approach 1:
The patent applies the extraction principle by isolating the verification target to only the snapshot image rather than all programs in the system. The verification unit specifically extracts and verifies the snapshot image integrity, while unexecuted programs are excluded from verification. This selective approach maintains security coverage for the critical snapshot image while avoiding the performance penalty of verifying all programs, thus resolving the contradiction between security coverage and verification efficiency.
3Speed
If the snapshot image is loaded completely into RAM at startup, then fast program execution is achieved, but security verification becomes more complex
Solution Approach 1:
The patent applies partial action by loading only the necessary snapshot image into RAM for verification and execution, rather than loading all system data. The verification unit performs falsification verification on the snapshot image that has been loaded, ensuring security while maintaining fast execution speed. This partial loading approach balances the need for fast program execution with simplified verification complexity, as only the essential snapshot image requires verification.
Data Source
AI summary
To prevent delay in startup time while ensuring program integrity at startup of an embedded system. In a startup method for an embedded system according to the present disclosure, a processor, which is provided in the embedded system and includes a main memory unit, and a nonvolatile storage unit storing a snapshot image based on a state of the main memory unit during execution of at least a first program, performs falsification verification for the snapshot image at startup, and, if being normal is confirmed by the falsification verification, executes the first program restored on the main memory unit from the snapshot image.