eMMC Write Protection for Secure Upgrades
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods for Embedded Multimedia Cards (eMMC) in smart devices, such as those using WIDEVINE software, are vulnerable to hacking, leading to abnormal rewriting of data and system instability due to their reliance on software encryption, which can be cracked, allowing unauthorized modifications.
Innovation Solution
Implementing a data processing method that includes executing a write protection cancellation command on a specified partition, writing an upgrade file, and then re-enabling write protection, ensuring that the eMMC can securely update data without causing system instability by using physical and logical addresses to manage write protection effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If write protection is enabled on the read-only partition to prevent abnormal rewriting, then data security is improved, but normal upgrading capability is lost
Solution Approach 1:
The system performs preliminary actions by creating a backup of the read-only partition before enabling write protection, and by pre-checking the write protection state before allowing upgrades. This allows the system to maintain security while enabling controlled upgrades through the backup mechanism and state management.
Solution Approach 2:
The write protection mechanism is made dynamic through the ability to enable and disable write protection based on the operational context. The system can transition between write-protected and write-enabled states, allowing it to maintain security during normal operation while permitting upgrades when needed, thus resolving the contradiction between security and adaptability.
2Adaptability or versatility
If write protection is disabled to allow upgrading, then upgrading capability is improved, but data security deteriorates
Solution Approach 1:
Before disabling write protection to enable upgrading, the system performs a preliminary backup of the read-only partition. This backup serves as a safety net that allows the system to restore security if the upgrade process fails or if unauthorized modifications occur, thus maintaining data security while enabling upgrading capability.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring the write protection state and the integrity of the read-only partition. After upgrading, the system verifies the write protection status and restores it if necessary, creating a feedback loop that ensures data security is maintained while allowing controlled upgrades.
3Reliability
If physical address mapping is implemented to manage write protection, then write protection effectiveness is improved, but device complexity increases
Solution Approach 1:
The system creates a copy of the read-only partition's address mapping information and uses this copy to manage write protection. By working with a replicated address map rather than directly manipulating the original complex address structures, the system simplifies the write protection implementation while maintaining effectiveness, thus reducing the perceived complexity.
Data Source
AI summary
Embodiments of the present disclosure relate to the field of computer data processing, and provide a data processing method and a smart device, which can effectively resolve a problem of abnormal rewriting of data in a read-only partition of an embedded multimedia card (eMMC) while ensuring that normal upgrading is not affected. The method includes receiving a write protection cancellation command sent by a central processing unit, executing the write protection cancellation command on a specified partition that is in the read-only partition and that is used to store an upgrade file, receiving the upgrade file sent by the central processing unit, writing the upgrade file to the specified partition, after completing writing the upgrade file, sending a write completion message to the central processing unit, receiving a write protection command sent by the central processing unit, and executing the write protection command on the specified partition.