Secure Firmware Update via Dedicated Hardware
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional firmware update tools are inefficient and insecure, often requiring multiple system resets and consuming CPU resources, which can lead to corruption and resource misuse.
Innovation Solution
A secure and transparent firmware update process is implemented using a secure memory area and a secure device that executes updates in parallel with CPU processes, allocating a secure memory area and utilizing a secure device to authenticate and apply firmware updates without directly involving the CPU.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional firmware update tools are used, then firmware updates can be applied, but CPU resources are consumed and system resets are required which reduces productivity
Solution Approach 1:
The system separates firmware update functionality from the main CPU by introducing a dedicated secure device. The CPU handles system operations while the secure device independently manages firmware authentication and updating, allowing parallel execution and eliminating the need for system resets during updates.
Solution Approach 2:
A secure device acts as an intermediary between the CPU and firmware storage. This intermediary authenticates firmware updates and applies them without requiring CPU intervention or system resets, thus maintaining productivity while ensuring update security.
2Ease of operation
If firmware updates are applied through CPU execution, then updates can be installed, but the risk of corruption increases
Solution Approach 1:
The secure device autonomously handles firmware authentication and updating without CPU involvement. It independently verifies firmware integrity, applies updates to the firmware storage device, and manages the update process entirely on its own, eliminating corruption risks associated with CPU execution while maintaining operational simplicity.
3Reliability
If multiple system resets are performed during updates, then firmware can be updated, but time is lost reducing productivity
Solution Approach 1:
The secure device performs firmware authentication and validation before applying updates, and conducts update operations during system operation without requiring resets. This preliminary verification and in-operation updating eliminates time loss from multiple system resets while ensuring update completeness.
Data Source
AI summary
A computing device that implements a secure and transparent firmware update process is provided. The computing device includes a secure memory area and a secure device that separately executes firmware updates in parallel with other processes executed by a CPU. The secure memory area may be allocated by the CPU and/or a memory controller using any of a variety of memory protection techniques. System software executed by the CPU receives update firmware requests from a trusted source, stores a firmware payload included in these requests in the secure memory area, and executes the next scheduled process. Firmware executed by the secure device retrieves the firmware payload from the secure memory area, authenticates the firmware payload, and applies the firmware payload to a firmware storage device. The secure device performs these acts transparently from the point of view of the CPU, these avoiding consumption of resources of the CPU.