Secure Booting SMP Architecture Processors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In SMP architecture electronic apparatuses, secure booting across multiple processors linked by a communication bus poses challenges due to the need for synchronized boot procedures and ensuring the integrity and authentication of hardware and software elements, particularly in preventing hacking attempts.
Innovation Solution
A method involving a first processor securely booting and protecting a part of shared memory to form a secure domain, authenticating a second processor, and extending write-access entitlement to the protected memory, allowing both processors to boot their operating systems within the secure domain, using an asymmetric authentication algorithm and bus encryption for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all processors are powered-up at the same time and synchronize boot procedures via memory bus, then the booting process can be coordinated across multiple processors, but the security of the boot process is compromised because processors may execute unauthenticated code from shared memory
Solution Approach 1:
The patent segments the shared memory into protected and unprotected regions, and divides the boot process into phases where only authenticated code can access critical memory areas. The bootstrap processor creates a protected domain that isolates security-critical operations from other processors until authentication is complete.
Solution Approach 2:
The patent implements preliminary authentication of code and data before they are executed or accessed by any processor. The bootstrap processor authenticates the operating system and critical data structures before allowing application processors to access them, preventing execution of unauthorized code.
2Object-affected harmful factors
If the bootstrap processor protects a part of shared memory to form a secure domain, then security is improved, but access to memory becomes restricted requiring authentication mechanisms
Solution Approach 1:
The patent introduces an authentication manager as an intermediary component that handles authentication requests from application processors. This mediator manages the complex authentication logic and access control, allowing the bootstrap processor to maintain a simple protected domain interface while delegating authentication complexity to a dedicated management component.
3Stability of the object's composition
If application processors wait for a boot signal from the bootstrap processor, then synchronized booting is achieved, but the boot time is extended due to sequential processing
Solution Approach 1:
The patent implements preliminary authentication and preparation of the protected domain by the bootstrap processor before application processors need to access shared memory. This allows application processors to resume their boot procedures quickly after receiving the boot signal, rather than waiting for complex authentication during their boot process.
Data Source
AI summary
A method of secure booting of an SMP architecture apparatus provides for the formation of a secure domain comprising a first processor and a part of a shared memory, before the booting of the operating system of the first processor. The operating system of a second processor is booted only after the reciprocal authentication with the first processor and, in case of authentication, the extension of the secure domain to the second processor.