Secure Overlay Manager Protection for Boot Process
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security methods for memory devices are inadequate in protecting against unauthorized access and manipulation, particularly during the boot process, as they require multiple signature retrievals to verify code versions, leading to slow performance and increased RAM usage.
Innovation Solution
The method involves partitioning data into segments, computing cryptographic signatures based on a control parameter indicative of the current version, storing and verifying these signatures to ensure only valid code is executed, and allowing independent verification of each segment, thereby enhancing security and speed by reducing the need for multiple signature checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple signature retrievals are performed to verify code versions, then data security is improved, but boot process speed deteriorates
Solution Approach 1:
The patent divides the code into multiple segments and generates individual signatures for each segment. The verification process retrieves and verifies signatures segment by segment rather than retrieving all signatures at once, enabling parallel verification operations that improve boot speed while maintaining security through independent verification of each segment
2Reliability
If multiple signature retrievals are performed to verify code versions, then data security is improved, but RAM usage increases
Solution Approach 1:
The verification process is segmented into multiple independent operations, each handling a single signature verification. This allows the system to verify signatures incrementally and discard verified segment data from RAM, significantly reducing peak memory usage compared to loading all signatures into memory simultaneously for batch verification
3Measurement precision
If traditional signature verification is used, then code integrity is verified, but the process requires multiple retrieval operations slowing down execution
Solution Approach 1:
The patent generates and stores individual signatures for each code segment during the code creation phase, before the boot process begins. This preliminary organization of signed segments allows the verification process to simply retrieve and verify each segment's signature independently without requiring complex multi-step retrieval operations, significantly reducing verification time while maintaining integrity checks
Data Source
AI summary
A method for protection of data includes maintaining a control parameter indicative of a current version of the data. The data is partitioned into multiple segments. Respective signatures of the segments are computed, responsively to the control parameter, the segments and respective signatures forming respective signed input segments, which are stored in a memory. After the signed input segments are stored, a signed output segment is fetched from the memory. The signature of the signed output segment is verified responsively to the control parameter, and the data in the signed output segment is processed responsively to verifying the signature.