Firmware Image Verification Using Hash Lookup Tables
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional digital signature verification algorithms for firmware images in embedded systems require significant computational resources, leading to longer boot times, which can compromise fast booting speeds, especially in devices like video surveillance systems that need rapid initialization.
Innovation Solution
A method that accelerates the verification process by using a combination of image hash values, public keys, and digital signatures stored in a second non-volatile memory, allowing for fast validation data to be used for initial verification, with a fallback to conventional digital signature verification if discrepancies are detected, ensuring high security and speed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional digital signature verification algorithms are used for firmware image verification, then verification security is ensured, but boot time increases
Solution Approach 1:
The patent pre-calculates and stores hash values of firmware images in a lookup table during the firmware creation phase. During boot verification, the system directly compares the calculated hash value against pre-stored values, eliminating the need for time-consuming digital signature verification while maintaining security. This preliminary preparation of verification data resolves the contradiction between secure verification and fast booting.
Solution Approach 2:
The patent creates a simplified copy of the verification mechanism by storing only hash values (digital fingerprints) of firmware images in the lookup table, rather than storing complete firmware images or complex signature verification algorithms. This copying approach allows rapid comparison while ensuring security through cryptographic hash functions, thus reducing boot time without compromising verification reliability.
2Reliability
If digital signature verification is performed during firmware loading, then firmware authenticity is verified, but verification complexity increases
Solution Approach 1:
The patent extracts the essential verification element (hash value) from the complex digital signature verification process and stores it in a lookup table. This extraction simplifies the verification mechanism to a straightforward hash comparison, reducing verification complexity while maintaining firmware authenticity verification through cryptographic hashing.
Solution Approach 2:
The patent uses disposable hash values stored in the lookup table that are specific to each firmware version. These simple hash objects replace complex signature verification structures, providing adequate security for authenticity verification while significantly reducing system complexity and resource requirements.
Data Source
AI summary
A method and a system for accelerating verification procedure for an image file are provided. In the method, the system retrieves an image file from a first non-volatile memory, and calculates a hash value with respect to the image file. A combination of the hash value, a public key and a digital signature is compared with another hash value, public key and digital signature backup in a second non-volatile memory. A comparison result is generated for verifying the image file in the first non-volatile memory. After the image file is verified, the system can load the image file. Instead of the conventional technology that uses digital signature to verify the image file, the present method can effectively accelerate the verification procedure.