Root Key Secure Activation in RPMB Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The secure writing of a root key in a replay protected memory block (RPMB) section is critical for preventing illegal modification and leakage, but existing methods are ineffective as the root key can be intercepted when passing through a non-secure operating system during activation.
Innovation Solution
The root key is written to the memory during a secure activation process before the processor activates a non-secure operating system, ensuring it does not go through the non-secure system and thus preventing leakage, with the root key being generated using a combination of the processor's and memory's identifiers to ensure uniqueness and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the root key is written during normal system activation, then the system can be activated efficiently, but the root key may be intercepted and leaked through the non-secure operating system
Solution Approach 1:
The root key is written to the RPMB section during the secure activation process, which occurs before the non-secure operating system is activated. This preliminary action ensures the root key is securely stored in memory before any non-secure processes could potentially intercept it, resolving the security vulnerability while maintaining a clear activation sequence.
2Reliability
If the root key is stored in the RPMB section, then replay protection can be implemented, but the root key must be securely written without leakage
Solution Approach 1:
The root key writing operation is extracted from the normal system activation process and placed in a dedicated secure activation process. This separation ensures that the root key is written through a secure pathway that does not involve the non-secure operating system, thereby preventing leakage while enabling replay protection functionality.
Solution Approach 2:
A secure activation process acts as an intermediary between the root key generation and the RPMB section. This intermediary process ensures that the root key is transmitted and stored securely without being exposed to the non-secure operating system, preventing interception while maintaining the replay protection mechanism.
3Ease of operation
If the processor activates the non-secure operating system first, then the system can provide full functionality, but the root key writing process becomes vulnerable to interception
Solution Approach 1:
The secure activation process that writes the root key is performed as a preliminary action before activating the non-secure operating system. This sequencing allows the system to maintain full functionality through the non-secure OS while ensuring the root key is already securely stored and cannot be intercepted during subsequent operations.
Data Source
AI summary
A root key processing method and an associated device are disclosed. The root key processing method is performed by a processor connected to a memory configured with an RPMB section, and includes the following steps. The processor detects whether a root key of the RPMB section is already written in the memory after the processor is powered on. If not, in a secure activation process of the processor, the root key of the RPMB section is written to the memory, wherein the secure activation process is that the processor does not activate a non-secure operation system. The method is capable of preventing leakage of the root key from the memory.