Secure Boot Apparatus with Segmented Control Paths
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure boot methods, such as those defined by the TCG, are inflexible and do not support optional components, leading to complete system failure if one component fails, and lack detailed recording of individual component states during the boot process, making it difficult to diagnose issues and comply with legal requirements for emergency functionality.
Innovation Solution
A method and system that allows multiple execution sequences for secure boot, records the success or failure of each component, and uses multiple RIM Certificates to support optional components, enabling the device to operate in a reduced functionality mode even if some components are revoked or disabled, with a mechanism to update enabled components without customizing certificates for each device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single control path is used for secure boot, then security verification is simplified, but the system cannot tolerate any component failure and loses adaptability
Solution Approach 1:
The patent segments the boot process into multiple independent control paths: a first control path for mandatory components and a second control path for optional components. This segmentation allows the system to verify and boot different sets of components based on their criticality, enabling continued operation even when optional components fail while maintaining security verification for mandatory components.
2Use of energy by moving object
If auditing features are made optional, then resource consumption is reduced, but verification fails when the feature is not implemented
Solution Approach 1:
The patent applies local quality by making the auditing feature configurable at the component level rather than system-wide. The auditing feature can be enabled or disabled independently for different components based on their specific requirements, allowing resource-constrained components to skip auditing while maintaining verification reliability for components that require it.
3Ease of manufacture
If updated certificates are sent to all devices, then certificate updates are simplified, but devices with different enabled components receive unnecessary certificates
Solution Approach 1:
The patent implements a universal certificate structure that contains verification data for both mandatory and optional components in a single certificate format. This universal certificate can be applied to any device regardless of which specific components are enabled, eliminating the need for customized certificates while maintaining transmission efficiency by sending only one certificate type to all devices.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method to allow a device to boot in a secure fashion, even though some of the components within the secure device's firmware may be not present, not authorised, or not correctly operating.