Storage Controller Module Verification for Secure Firmware Expansion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increased capacity of firmware in storage devices due to the inclusion of additional codes makes them vulnerable to security risks, and existing technologies lack effective methods to verify and manage these additional codes securely.
Innovation Solution
A storage device with a volatile memory device and a storage controller that verifies and loads modules from outside using manufacturer and user signatures, and performs code patch operations based on operation mode information, ensuring secure execution of additional codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If additional codes are included in the firmware to increase capacity and functionality, then the adaptability and versatility of the storage device is improved, but the security vulnerability and reliability of the firmware decreases
Solution Approach 1:
The patent divides the firmware into separate modules: main firmware for core operations and additional codes for specialized functions. This segmentation allows the storage device to maintain security in the main firmware while enabling versatility through optional modules, resolving the contradiction between functionality and security.
Solution Approach 2:
The patent introduces a signature verification mechanism as an intermediary between external code sources and the firmware execution environment. This mediator verifies the authenticity and security of additional codes before loading them, enabling functional expansion while maintaining security integrity.
2Adaptability or versatility
If additional codes are included in the firmware to provide debugging and test operations, then the adaptability for specialized operations is improved, but the complexity of firmware management increases
Solution Approach 1:
The patent separates debugging and test codes into distinct additional modules that can be independently loaded and managed. This segmentation simplifies firmware management by allowing these specialized codes to be handled separately from the main firmware, reducing the complexity of managing diverse code types.
Solution Approach 2:
The patent implements preliminary signature verification before loading additional codes. This preliminary action ensures that only authenticated codes are executed, simplifying the management of untrusted codes by establishing security upfront rather than requiring continuous complex verification during execution.
3Reliability
If signature verification operations are performed to ensure security of additional codes, then the reliability and security of the storage device is improved, but the processing time and productivity decreases
Solution Approach 1:
The patent performs signature verification as a preliminary action before module loading. By completing the security check beforehand, the actual module loading process is simplified and accelerated, as the verification burden is shifted to the preparation phase rather than the execution phase.
Solution Approach 2:
The patent uses cryptographic signatures that create a copy of the verification information. The signature itself acts as a condensed representation of the code's authenticity, allowing verification without repeatedly processing the entire code, thus maintaining security while improving loading speed.
Data Source
AI summary
A storage device according to the present disclosure includes: a volatile memory device configured to load main firmware; and a storage controller configured to receive a module loading request and a module from outside the storage device, perform a first signature verification operation verifying a first signature included in the module or a second signature verification operation verifying the first signature and a second signature included in the module based on information of signature to be verified, and load the module received from outside the storage device to the volatile memory device based on a result of performing the first signature verification operation or the second signature verification operation.