Firmware Update System Using Digital Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing firmware updating methods lack security, making them vulnerable to malicious modifications and overwriting, and fail to ensure data integrity, leading to potential device malfunction and loss of functionality.
Innovation Solution
A firmware updating system and method that employs digital and asymmetric encryption for authorization verification, symmetric encryption for secure firmware transmission, and dual firmware storage areas to ensure secure updates and integrity, with automatic failover in case of update errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware is updated in place without protection mechanisms, then update speed is fast and process is simple, but security is compromised and firmware can be easily stolen or maliciously modified
Solution Approach 1:
The firmware storage is divided into multiple independent areas (first firmware storage area and second firmware storage area), allowing the system to store different firmware versions separately. This segmentation enables secure updates by comparing signatures of different versions and preventing unauthorized modifications without requiring complex protection mechanisms throughout the entire system.
Solution Approach 2:
The system performs preliminary signature verification on the new firmware before actually executing or overwriting the old firmware. By checking the digital signature in advance and only proceeding with the update if verification succeeds, the system ensures security without adding complex runtime protection mechanisms.
2Reliability
If firmware update overwrites the currently used firmware, then update process is efficient, but if update is terminated unexpectedly the device cannot be used normally
Solution Approach 1:
The system maintains both old and new firmware versions simultaneously in separate storage areas during the update process. This cushioning approach ensures that if the update is terminated unexpectedly, the original firmware remains intact and the device can continue to function normally, eliminating the need for complex rollback mechanisms.
Solution Approach 2:
The system implements a feedback mechanism where the digital signature of the new firmware is verified against the expected signature before completion of the update. Only after successful verification does the system allow the new firmware to replace the old one, ensuring reliability while maintaining update efficiency through automated verification.
3Reliability
If firmware update process lacks verification mechanisms, then update speed is fast, but firmware integrity cannot be ensured and malicious firmware can be installed
Solution Approach 1:
The system performs preliminary digital signature verification on the firmware before allowing installation or execution. By checking the integrity and authenticity of the firmware in advance using cryptographic verification, the system ensures firmware integrity without requiring continuous complex verification during operation, thus minimizing time loss.
Solution Approach 2:
The system replaces complex mechanical or procedural verification mechanisms with cryptographic digital signature verification. This substitution allows for fast, automated, and reliable integrity checking that does not require manual intervention or complex mechanical processes, maintaining update speed while ensuring firmware integrity.
Data Source
AI summary
A firmware updating system and method are provided. The firmware updating method includes configuring a host to digitally sign a firmware to be updated, and configuring an electronic device to perform an authorization verification on an update tool, and only the update tool that passes the verification has an update permission. The update tool uses an encryption algorithm to encrypt the firmware to be updated that includes a digital signature. After the encryption is completed, the host sends the update tool to the electronic device through the update tool. The electronic device then uses a decryption algorithm to decrypt the received firmware to obtain the firmware to be updated including the digital signature, and write the firmware to be updated into a firmware storage area to be updated. The electronic device then verifies the digital signature in the firmware to be updated.