Verified Boot Key Rotation via Platform Provider Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for electronic devices during the boot process are inadequate in verifying the integrity of software, making them vulnerable to execution of potentially hazardous or malicious code, and lack efficient mechanisms for key rotation and revocation.
Innovation Solution
A system that verifies software images during boot using a key arrangement allowing multiple signatures, supports key rotation, and automates the process of generating and distributing signed software updates through a platform provider system, ensuring that only trusted and up-to-date software components are executed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple different signing keys are used to sign software components from different providers, then the versatility and flexibility of the system is improved, but the complexity of verifying and managing these keys increases
Solution Approach 1:
The patent introduces a platform provider as an intermediary that issues certificates to multiple software providers. Each software provider's public key is certified by the platform provider's certificate, creating a trust chain. This mediator structure allows the system to support multiple providers without requiring the device to directly manage and verify each provider's key individually, thus reducing verification complexity while maintaining versatility
Solution Approach 2:
The patent segments the trust verification process into hierarchical levels: root certificates at the platform provider level, and component-level certificates signed by individual software providers. This segmentation allows the device to verify trust at different levels independently, simplifying the overall verification process while supporting multiple providers through structured certificate validation
2Reliability
If key rotation is implemented to enhance security, then the security level is improved, but the complexity of managing key versions and ensuring compatibility increases
Solution Approach 1:
The patent incorporates key version information and minimum version requirements into the software image before deployment. The device checks these predetermined version requirements during the boot process, enabling proactive key rotation without requiring complex runtime key management. This preliminary embedding of version constraints simplifies the rotation process while maintaining security
Solution Approach 2:
The patent implements dynamic key version management where the device can adapt to different key versions based on the software image being verified. The system checks key version compatibility and enforces minimum version requirements, allowing the key infrastructure to evolve and rotate keys over time without requiring manual reconfiguration or complex management protocols
3Productivity
If automated signing and distribution of software updates is implemented, then the productivity of software deployment is improved, but the complexity of the signing system increases
Solution Approach 1:
The patent enables the platform provider system to automatically sign software updates and distribute them without manual intervention. The automated signing system uses pre-configured certificates and keys to sign updates, and the device autonomously verifies these signatures during installation. This self-service automation improves deployment productivity while the standardized certificate structure keeps system complexity manageable
Solution Approach 2:
The patent pre-configures signing certificates, public keys, and version requirements into the software image before distribution. This preliminary preparation enables automated signing and verification processes to function efficiently without requiring complex runtime decision-making or manual configuration, thus improving productivity while maintaining reasonable system complexity
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and apparatus, including computer-readable media, for verified boot and key rotation. In some implementations, a device extracts a public key from a secure data storage area of the device. The device extracts a first certificate for an intermediate key and a second certificate for a signing key, the first certificate and the second certificate being extracted from a system image. The device verifies a signature of the first certificate using the public key. After verifying the signature of the first certificate, the device verifies the second certificate using a public key in the first certificate. In response to verifying the second certificate, the device loads the system image during a boot process of the device.