Secure Firmware Update for Resource-Constrained Microcontrollers

The patent divides the authentication process into two distinct phases: first, asymmetric cryptographic verification of the firmware image signature to ensure authenticity; second, symmetric cryptographic verification using a lightweight algorithm to ensure integrity. This segmentation allows each method to be optimized for its specific purpose, with asymmetric methods used only where necessary and symmetric methods used for resource-constrained environments.

The patent changes the cryptographic parameters by using different key lengths and algorithm complexities for different authentication stages. The asymmetric authentication uses standard secure parameters (e.g., RSA 2048-bit or ECC P-256), while the symmetric authentication uses lightweight parameters suitable for resource-constrained devices. This parameter adaptation resolves the contradiction between security requirements and resource limitations.

The patent segments the authentication workload by performing computationally intensive asymmetric cryptographic operations only during the initial firmware image verification stage, then switching to lightweight symmetric cryptographic operations for subsequent integrity checks. This segmentation ensures that high processing power requirements are confined to a single authentication phase rather than continuously consuming resources.

The patent performs the computationally expensive asymmetric authentication in advance during the firmware update process, before the device enters normal operation. By completing the heavy cryptographic verification beforehand, the system eliminates the need for continuous high processing power during runtime, thus resolving the contradiction between initial security requirements and ongoing power consumption.