NFC Firmware Update Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Near field communication (NFC) devices face security risks due to the potential for falsified firmware updates, which can lead to personal information leakage and other security incidents during the updating process.
Innovation Solution
A method for securely updating NFC device firmware involves copying metadata from an application processor to the NFC device, verifying its integrity, and transmitting firmware data only when the metadata is verified as unchanged, using digital signatures and cyclic redundancy check (CRC) values to ensure data integrity and authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware is updated without verification, then updating speed is fast, but security reliability deteriorates due to potential falsified firmware
Solution Approach 1:
The patent applies preliminary action by verifying the metadata's integrity through digital signature validation before the actual firmware update process begins. The NFC device checks whether the metadata has been tampered with by comparing the embedded digital signature with a newly generated signature, ensuring that only authenticated firmware proceeds to the update stage. This prevents falsified firmware from being installed while maintaining a structured update workflow.
Solution Approach 2:
The patent segments the firmware update process into distinct phases: metadata verification phase and firmware data transfer phase. By separating these operations, the system can validate the authenticity of firmware metadata independently before committing to the full update process. This segmentation allows for efficient error handling and maintains security without requiring the entire update mechanism to be overly complex.
2Reliability
If firmware update verification is performed, then security reliability is improved, but updating time increases due to additional verification steps
Solution Approach 1:
The patent applies partial action by performing only the essential verification step of checking the metadata's digital signature, rather than verifying every single byte of the firmware data. The metadata contains critical information including version numbers, device identifiers, and digital signatures that are sufficient to determine firmware authenticity. This selective verification approach ensures security while minimizing the time overhead compared to comprehensive verification methods.
3Reliability
If metadata is verified before firmware transfer, then firmware integrity is ensured, but communication overhead increases due to additional data exchange
Solution Approach 1:
The patent merges the metadata verification process with the existing firmware update communication protocol. The metadata, including the digital signature, is embedded within the firmware package itself, allowing the verification to be performed as part of the standard update handshake. This integration avoids the need for separate verification communication channels or complex additional protocols, maintaining firmware integrity while keeping the communication overhead manageable.
Data Source
AI summary
A method of updating firmware of a near field communication (NFC) device includes copying metadata, which is included in a firmware image file, from an application processor to the NFC device. One of a certification success signal and a certification fail signal is provided from the NFC device to the application processor after the NFC device verifies an integrity of the metadata. Firmware data, which is included in the firmware image file, is copied from the application processor to the NFC device when the application processor receives the certification success signal from the NFC device.