Secure Boot Module Merging for Memory Optimization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for detecting software alterations in computer systems are inefficient in utilizing memory resources, particularly in devices with limited size or cost, due to redundant storage of signature verification processing and key information across modules.

Innovation Solution

A mechanism where each module stores its own digital signature and shares verification information with subsequent modules, allowing effective detection of alterations without redundant storage of public keys, thereby optimizing memory usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each module stores its own signature verification processing and key information, then alteration detection capability is improved, but memory resource utilization deteriorates due to redundant storage

Engineering Contradiction:
Improvealteration detection capabilityVSAvoidmemory resource utilization
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges the signature verification functionality into a single dedicated module rather than duplicating it across multiple modules. This centralization eliminates redundant storage of verification processing code and key information, directly resolving the contradiction between maintaining alteration detection capability and reducing memory resource consumption.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The single signature verification module serves as a universal component that can verify multiple different modules (kernel, file system, applications). This multi-functional approach allows one module to perform the role that would otherwise require multiple duplicate verification components, thereby improving memory resource utilization while preserving comprehensive alteration detection capability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If signature verification processing is embedded in each module, then verification capability is improved, but device complexity increases

Engineering Contradiction:
Improveverification capabilityVSAvoidsystem structure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines all signature verification processing into a single dedicated module, reducing the number of components that need to be designed, implemented, and maintained. This merging approach simplifies the overall system structure while preserving the ability to verify alterations across all modules, thereby reducing device complexity without sacrificing verification capability.

Inventive Principle:
Principle #5Merging (Combining)

3Adaptability or versatility

If public keys are stored in each module, then verification independence is improved, but memory resource efficiency deteriorates

Engineering Contradiction:
Improveverification independenceVSAvoidmemory resource efficiency
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent introduces a central signature verification module as an intermediary that holds the public keys and verification logic. Instead of each module independently storing copies of public keys, they all interact with this single intermediary component. This approach maintains the ability to perform independent verification of each module while eliminating redundant storage of public keys, thereby improving memory resource efficiency without compromising verification independence.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3547194B1Apparatus and method for secure boot
Publication Date: 2023.09.06 CANON KK
  • EP3547194B1 patent drawingFigure 1
  • EP3547194B1 patent drawingFigure 2A
  • EP3547194B1 patent drawingFigure 2B

AI summary

An information processing apparatus that successively activates a plurality of modules, comprises a first module, a second module, and a third module. The first module activates the second module which has been verified, and the second module activates the third module which has been verified. The first module includes verification information used for verifying both of the second module and the third module, verifies the second module using the verification information and verifies the third module using the verification information.