Secure Bootloader Update via Pre-Shared Key Certificate Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In storage systems, updating the bootloader in a storage device requires a new certificate, but existing methods lack secure session establishment for certificate provisioning, leading to potential security threats.
Innovation Solution
A system and method that provide a common key to both the host and storage device for bootloader updates, establishing a secure session using a pre-shared key to provision a certificate for the storage device, ensuring secure key management and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the bootloader is updated in the storage device, then the storage device can execute updated software, but the prior certificate becomes invalid and a new certificate must be provisioned
Solution Approach 1:
The system establishes a secure session and provisions a new certificate into the storage device before the bootloader update is completed. This preliminary action ensures that the new certificate is ready and valid when the updated bootloader executes, maintaining authentication continuity throughout the update process.
Solution Approach 2:
A secure session acts as an intermediary mechanism between the host and storage device during certificate provisioning. This secure channel ensures that the certificate update process itself is protected, allowing the transition from old to new certificate without exposing the system to security risks.
2Reliability
If a new certificate is provisioned into the storage device after bootloader update, then authentication can be maintained, but security threats may occur without secure session establishment
Solution Approach 1:
The system creates a secure session that acts as a protected environment for certificate provisioning. Within this secure session, all certificate-related operations are isolated from external attacks, similar to performing sensitive operations in a controlled, secure atmosphere that prevents contamination or interference.
Solution Approach 2:
The system establishes security measures and secure sessions before performing certificate provisioning operations. By preparing the secure environment in advance and implementing protective measures beforehand, the system prevents potential security threats from compromising the certificate update process.
3Ease of operation
If certificate provisioning is performed without secure session, then the process is simpler, but the integrity of authentication process is compromised
Solution Approach 1:
The system extracts the certificate provisioning operation from the general communication channel and places it within a dedicated secure session. This separation isolates the sensitive certificate update process from regular operations, providing enhanced security while maintaining a clear, structured procedure for certificate provisioning.
Data Source
AI summary
A system includes a storage device, a first device, and a second device. The first device stores a first secret key and a first public key. The second device stores a first key and a second key and receives the first public key, generates a first ciphertext for an updated software image and the second key, based on the first key, and generates a second ciphertext for the first ciphertext and the second key, based on the first public key. The first device obtains the first ciphertext and the second key by decrypting the second ciphertext and provides the first ciphertext and the second key to the storage device. The storage device obtains the updated software image and the second key by decrypting the first ciphertext. The first device provisions, based on the second key, a certificate for a unique key of the storage device into the storage device.