Encrypted Firmware Update Network with Secure Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for updating firmware and software in electronic devices often fail to ensure secure and efficient delivery of updates, particularly in mobile devices, due to the presence of bugs and the need for frequent updates which can introduce new features or delete existing ones, and lack effective encryption and decryption mechanisms.
Innovation Solution
An electronic device network is established with an update generator that includes encrypting and decrypting engines, secure sockets layer support, and a delivery server for secure communication, enabling secure encrypted updates to be retrieved and applied to mobile devices, which comprise encrypting and decrypting components, and a security services component for secure communication, using techniques like stream symmetric and block symmetric enciphering to manage encrypted updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional update methods are used, then updates can be delivered to devices, but security and data integrity are compromised
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic hashes of firmware images in a secure database before distribution. This allows verification to be performed locally without requiring complex real-time decryption mechanisms during the update process, thus improving security while managing complexity.
Solution Approach 2:
The patent introduces cryptographic hash functions as an intermediary mechanism. Instead of directly verifying encrypted firmware, the system uses hash values as a mediator that can be securely stored and compared, simplifying the verification process while maintaining strong security guarantees.
2Reliability
If encryption is applied to firmware updates, then data security is improved, but update verification and processing become more complex
Solution Approach 1:
The patent creates cryptographic copies (hash values) of the firmware data that can be stored and verified without requiring the original encrypted data. This copying approach allows simple verification processes while maintaining data integrity, as the hash copies serve as secure representations of the original firmware state.
3Productivity
If frequent firmware updates are implemented, then bugs are fixed and features are updated, but security vulnerabilities increase
Solution Approach 1:
The patent applies preliminary action by pre-verifying firmware integrity through cryptographic hashing before deployment. This allows frequent updates to be implemented with maintained security, as each update can be quickly verified using pre-computed hashes rather than requiring complex real-time security checks.
Data Source
AI summary
Disclosed herein is an electronic device network having a plurality of associated electronic devices. The electronic devices may include an update agent adapted to decipher code and/or data segments. The update agent may also be adapted to modify and/or upgrade firmware and/or software components resident in the electronic devices by employing the deciphered code and/or data segments along with contents of an update. An update generator, resident in the electronic devices may employ deciphering techniques to the code and/or date segments to extract enciphered code and/or data segments. The update generator may also process the code and/or data segments to generate an update including difference information. The update generator may also be adapted to encipher difference information in the generated update.