Secure Boot Memory Device Using Platform Configuration Registers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory devices lack secure boot mechanisms that can autonomously verify the integrity of software and hardware components during the boot process without relying on external license servers, making them vulnerable to unauthorized access and tampering.
Innovation Solution
Incorporating a secure memory device with auto-measurement capabilities, a write-protected area for storing a public key, and Platform Configuration Registers (PCRs) to securely store and validate measurements of software, firmware, and hardware signatures, enabling secure boot operations without external dependencies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a memory device uses traditional boot verification methods relying on external license servers, then the boot process can be verified, but the system becomes vulnerable to external attacks and requires network connectivity
Solution Approach 1:
The patent introduces Platform Configuration Registers (PCRs) as an intermediary secure storage mechanism within the memory device itself. These PCRs store hashed measurements of boot components, acting as a trusted intermediary that eliminates the need for external license servers during boot verification, thereby preventing external attacks while maintaining verification reliability
Solution Approach 2:
The memory device performs self-verification by measuring its own boot components and comparing them against stored golden values in the PCRs. This self-service approach allows the device to autonomously verify its own integrity without external assistance, eliminating vulnerability to external attacks while maintaining security
2Reliability
If a memory device implements secure boot mechanisms with external license servers, then boot integrity can be verified, but the system complexity increases and external dependencies are introduced
Solution Approach 1:
The patent extracts the license server dependency from the boot verification process and replaces it with locally stored golden values in Platform Configuration Registers. By taking out the external server requirement and embedding the verification capability within the memory device itself, the solution maintains boot integrity verification while significantly reducing system complexity and external dependencies
Solution Approach 2:
The patent merges the boot verification functionality directly into the memory device by integrating PCR storage and measurement capabilities. This consolidation combines what were previously separate components (memory device, external license server, boot verifier) into a unified self-contained system, reducing overall system complexity while maintaining verification reliability
3Adaptability or versatility
If a memory device allows writing to all memory areas during boot, then flexibility is maintained, but security is compromised allowing unauthorized modifications
Solution Approach 1:
The patent applies different access properties to different memory regions: the Platform Configuration Registers are made write-once/read-many to prevent unauthorized modifications, while other memory areas retain normal read-write access for boot operations. This local differentiation of access rights maintains boot process flexibility in non-critical areas while ensuring security in critical verification areas
4Reliability
If a memory device performs comprehensive measurements of all boot components, then security is improved, but the boot process time increases
Solution Approach 1:
The patent performs measurements selectively on critical boot components (firmware, bootloader, kernel) rather than attempting to measure every single component. This partial measurement approach focuses verification efforts on the most security-critical elements, maintaining high security verification while minimizing the time overhead of the measurement process
Data Source
AI summary
The disclosed embodiments relate to secure booting of memory device. The disclosed embodiments generate measurement data associated with a memory device. Next, the disclosed embodiments read a golden measurement from a secure location in the memory device, the golden measurement generated based on a version of the data associated with the memory device, and therefore it is unique to the device. The disclosed embodiments validate the golden measurement value using a public key and determine whether the golden measurement is equal to the measurement data. The golden measurement value can also be saved in a write protected area which can only be changed by a secure write command, therefore, it is imutable by others. Finally, the disclosed embodiments continue a boot process when the golden measurement is equal to the measurement data.