Secure Boot via Shared Memory SPL Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure boot methods for terminal devices lack effective protection during the system boot process, leading to high risks of abnormal system boot and operation.
Innovation Solution
A secure boot method that establishes a secure connection between a first processor and a second processor through synchronous virtual serial transmission of an SPL image file via shared memory, with authentication and decryption processes to ensure system integrity and prevent unauthorized booting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If synchronous virtual serial transmission via shared memory is implemented, then system boot security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a shared memory as an intermediary between the first processor and second processor to enable secure image file transmission. The shared memory acts as a controlled interface that allows data exchange while maintaining security boundaries, resolving the contradiction by providing a structured communication channel that improves security without requiring complex direct processor-to-processor coordination mechanisms
Solution Approach 2:
The patent divides the boot process into distinct segments: the first processor handles image file acquisition and authentication, while the second processor handles system boot execution. This segmentation allows each processor to specialize in specific security-critical tasks, improving overall system boot security while maintaining manageable complexity through clear functional separation
2Reliability
If authentication and decryption processes are added, then system integrity is improved, but processing time increases
Solution Approach 1:
The patent performs authentication and decryption processes during the boot initialization phase, before the actual system boot begins. By completing these security-critical operations in advance, the patent ensures system integrity is verified beforehand, while minimizing the impact on overall boot time since these processes occur during the necessary initialization sequence rather than adding to the critical boot path
Data Source
AI summary
The invention discloses a secure boot method for a terminal device, a terminal device and a medium, relates to the technical field of secure boot, and is used for solving a problem of low system boot security caused by lack of protection for system boot in the related art. The terminal device includes a first processor, a second processor and a shared memory. The method includes: acquiring, by the first processor, an SPL image file; acquiring, by the first processor and the second processor, a third duration and starting timing synchronously; in a case that the third duration expires, transmitting, by the first processor, the SPL image file to the second processor via the shared memory; and booting, by the first processor and/or the second processor, a system of the terminal device cooperatively based on the SPL image file received by the second processor.