Firmware Verification via Hash Segmentation and Sorting

The patent applies preliminary action by pre-calculating and storing the hash value of legitimate firmware in the controller before firmware update occurs. The efuse region stores the mapping and sorting algorithm that will be used for verification. When firmware update is requested, the controller immediately verifies the incoming firmware against the pre-stored hash value, preventing erroneous or illegal firmware from being installed. This advance preparation ensures that only authenticated firmware can update the device, thereby maintaining reliability while enabling update functionality.

The patent applies segmentation by dividing the firmware data into multiple data groups and calculating hash values for each group separately. Instead of computing a single hash for the entire firmware, the system segments the firmware into chunks, computes individual hash values for each segment, and then combines them using a mapping and sorting algorithm. This segmentation approach maintains verification speed by allowing parallel processing of multiple smaller hash computations while significantly enhancing security, as deliberate damage or tampering with any single segment will result in a mismatched hash value, preventing unauthorized firmware installation.

The patent applies asymmetry by implementing a non-one-to-one mapping relationship between firmware data and its hash representation. The mapping and sorting algorithm transforms the original hash data into a different format and arrangement, creating an asymmetric transformation that is easy to compute in one direction but difficult to reverse. This asymmetric mapping enhances security against deliberate damage because tampering with the firmware will not produce a predictable change in the hash value, making it impossible for attackers to craft malicious firmware that passes verification. The asymmetric structure ensures that only the original legitimate firmware can produce the expected hash signature.