Remote provisioning and authenticated writes to secure storage devices

A system for securing electronic devices, comprising:

• a storage device including at least one non-transitory machine-readable storage medium;
• a hardware processor coupled to the storage device and configured to:
• provision one or more read-only areas of the storage device;
• provision a candidate copy area of the storage device;
• secure access to the read-only areas of the storage device;
• determine that an attempted write to one of the read-only areas has been made;
• copy contents of the attempted write to the candidate copy area;
• verify a signature of data to be written to the read-only area using a unique key associated with the read-only area;
• and
• in response to verifying the signature of the data to be written to the read-only area using the unique key associated with the read-only area, copy the contents from the candidate copy area to the read-only area.

A method of electronic device security, comprising:

• provisioning one or more read-only areas of the storage device using a hardware processor;
• provisioning a candidate copy area of the storage device;
• securing access to the read-only areas of the storage device;
• determining that an attempted write to one of the read-only areas has been made;
• copying contents of the attempted write to the candidate copy area;
• verifying a signature of data to be written to the read-only area using a unique key associated with the read-only area;
• and
• in response to verifying the signature of the data to be written to the read-only area using the unique key associated with the read-only area, copying the contents from the candidate copy area to the read-only area.