Secure Boot Sequencing With Queued Code Segment Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems with multiple processing cores face memory capacity reduction and boot sequence delays due to the need for significant internal memory capacity to store program instructions and security checks, which cause processing cores to idle during authentication.
Innovation Solution
A method that combines application images into a consolidated image, allowing parallel loading and security operations, reducing memory requirements and minimizing idle time during the boot sequence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If program instructions are loaded from external memory to internal memory and parsed to determine portions for respective processing cores, then the system can execute software programs with multiple processing cores, but the internal memory capacity must be significantly larger than the actual size of the software program, effectively reducing the capacity of the internal memory
Solution Approach 1:
The application image is divided into multiple code segments that are processed and loaded independently. The system parses the application image to identify individual code segments corresponding to different processing cores, allowing selective loading and execution without requiring the entire application to be loaded into internal memory simultaneously.
Solution Approach 2:
The patent transitions from a single-dimensional memory loading approach to a multi-dimensional approach by implementing a queue system and parallel processing streams. Code segments are organized in queues and processed through multiple channels simultaneously, enabling efficient memory utilization without sacrificing multi-core execution capability.
2Reliability
If security checks are performed on program instructions to verify integrity and authenticity, then the security of the system is enhanced, but the processing cores must wait idly during security verification, causing delays to the boot sequence and reducing system performance
Solution Approach 1:
Security verification is initiated before the complete application image is loaded into internal memory. The system begins authentication processes on code segments as they are being transferred from external memory, performing security checks in advance rather than waiting for complete loading. This preliminary security verification eliminates idle waiting time for processing cores during the boot sequence.
Solution Approach 2:
The patent implements continuous parallel operations where code segment loading, security verification, and processing core execution preparation occur simultaneously without interruption. The queue system maintains continuous flow of code segments through the security verification pipeline, ensuring that processing cores are never idle during the boot sequence while maintaining rigorous security checks.
Data Source
AI summary
In an example embodiment, a method is provided for enhancing secure boot processes. The method includes receiving a first application code segment of a set of application code segments of a combined application image, and queuing a message in a queue representative of a request for a security operation on the first application code segment. The method also includes receiving an indication representative of an acknowledgement of completion of the security operation by a hardware security module on a second application code segment of the set of application code segments that was received prior to the first application code segment. Based on receiving the indication, the method includes pausing receiving a third application code segment of the set of application code segments that is next to the first application code segment of the combined application image and providing the message from the queue to the hardware security module.