Secure IC OS Updates Using Certificate-Embedded Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure integrated circuit chips face challenges in secure software updates, particularly for devices that are not network-connected, due to size and trustworthiness constraints, necessitating an improved method for operating system updates.
Innovation Solution
A method involving a digital certificate with a list of authorized hashes for OS update files, computed by the issuing authority, is used to authenticate and activate OS updates on secure integrated circuit chips, allowing updates to be transmitted separately from the certificate while leveraging existing security infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the OS update file is included in the digital certificate, then the authenticity verification is ensured, but the certificate size exceeds the secure element's storage capacity
Solution Approach 1:
The solution segments the authentication data into two parts: a compact digital certificate containing only the hash of the OS update file, and the separate OS update file itself. This segmentation allows the certificate to remain within size constraints while still enabling authenticity verification through hash comparison.
Solution Approach 2:
Instead of embedding the entire OS update file in the certificate, the patent uses a cryptographic hash (copy/fingerprint) of the file as the authentication token. This hash serves as a compact representation that verifies the file's authenticity without requiring the full file size to be stored in the certificate.
2Volume of moving object
If the OS update file is transmitted separately from the certificate, then the size constraint is satisfied, but the integration with existing security protocols becomes more complex
Solution Approach 1:
The patent performs preliminary action by pre-computing and embedding the hash of the OS update file into the digital certificate during the update creation phase. This allows the verification process to be simplified to a straightforward hash comparison, reducing the complexity of the transmission and verification process despite the separate file transmission.
3Adaptability or versatility
If traditional over-the-network patching is used, then updates can be pushed to networked devices, but non-networked devices cannot receive updates securely
Solution Approach 1:
The patent introduces an intermediary verification mechanism using digital certificates with embedded hashes. This intermediary system allows secure verification of update authenticity without requiring continuous network connectivity, as the verification can be performed offline by comparing the received file's hash against the pre-stored certificate hash.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Method for operating an integrated circuit chip comprising a digital certificate of an issuing authority, a manufacturing server, an issuing-authority server, and a terminal to securely update an operating system of the integrated circuit chip, the method comprising computing a first hash associated with an operating system (OS) update file; storing the first hash in the digital certificate; transmitting the digital certificate and the OS update file to the terminal; operating the terminal to transmit the digital certificate and the OS update file to the integrated circuit chip; operating the integrated circuit chip to unpack the digital certificate including the first hash; computing a second hash of the OS update file; verifying that the OS update file is authentic based on the first hash and the second hash, and if the OS update file is authentic, activating the OS update file.