Firmware Verification Switching to Random MAC Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing use of software-based information processing devices makes them vulnerable to malicious tampering during firmware updates, especially with the advent of quantum computers that can easily decrypt digital signatures, which are commonly used for verification.
Innovation Solution
An information processing device and method that switches from digital signature verification to message authentication code verification using a randomly generated message authentication key, making it difficult for quantum computers to tamper with the firmware and allowing detection of tampering without compromising secrecy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signature verification is used for firmware verification, then security and secrecy are improved, but vulnerability to quantum computer decryption increases
Solution Approach 1:
The patent changes the verification parameter from digital signature (public key encryption) to message authentication code (symmetric encryption with random key). This parameter change makes the system resistant to quantum computer attacks while maintaining verification security, as symmetric encryption algorithms are not vulnerable to Shor's algorithm that threatens public key cryptography.
Solution Approach 2:
The patent uses a randomly generated message authentication key that is discarded after use. This disposable key approach ensures that even if compromised, the damage is limited to a single verification instance, and the randomness makes it infeasible for quantum computers to predict or brute-force the key.
2Adaptability or versatility
If firmware is easily updated to correct defects and expand functions, then adaptability is improved, but ease of tampering increases
Solution Approach 1:
The patent performs preliminary verification of firmware updates using the message authentication code before allowing installation. This preliminary action ensures that only authenticated firmware can be updated, preventing unauthorized tampering while maintaining the ease of legitimate updates.
Solution Approach 2:
The message authentication code acts as an intermediary between the firmware update process and the verification system. It provides a secure bridge that allows easy updates while preventing tampering, as the MAC verifies the integrity and authenticity of the update without exposing cryptographic keys.
Data Source
AI summary
An information processing device includes a first determination unit that determines whether instruction information for issuing an instruction to switch from a first verification method of verifying validity of firmware by using a digital signature generated based on public key encryption to a second verification method of verifying the validity of the firmware by using a message authentication code generated using a message authentication key generated based on a random number has been received, a random number generator that generates the random number, a first generation unit that generates the message authentication key used to generate the message authentication code, based on the random number, when it is determined by the first determination unit that the instruction information has been received, and a second generation unit that generates the message authentication code of the firmware using the message authentication key.