Back to results
US 10,757,087 B2Granted
Secure client authentication based on conditional provisioning of code signature
AssigneeWinbond Electronics Corp.
InventorNir Tasher
Life of this patent
Estimating the term…
Abstract
A memory subsystem includes a memory interface for accessing a non-volatile memory (NVM), a host interface for communicating with a host, and a processor. The processor is configured to calculate a signature over program code that is used by the host and is stored in the NVM, to verify, upon detecting a boot process performed by the host, whether the boot process is legitimate, and, only if the boot process was verified to be legitimate, to provide the signature to the host for authentication to a remote server.
Claims9
A memory subsystem, comprising:
- a memory interface for accessing a non-volatile memory (NVM);
- a host interface for communicating with a host;
- and
- a microprocessor, configured to:
- calculate a signature over program code that is used by the host and is stored in the NVM;
- upon detecting a power-up of the host, verify whether first read commands issued by the host following the power-up are directed to addresses in accordance with predefined addresses expected for a genuine boot code;
- and
- only if the first read commands were verified to be directed to addresses of the genuine boot code, provide the signature to the host for authentication to a remote server.
5 more elements
A secure client device, comprising:
- a non-volatile memory (NVM);
- a host;
- and
- a memory subsystem, configured to:
- access the NVM for the host;
- calculate a signature over program code that is used by the host and is stored in the NVM;
- upon detecting a power-up of the host, verify whether first read commands issued by the host following the power-up are directed to addresses in accordance with predefined addresses expected for a genuine boot code;
- and
- only if the first read commands were verified to be directed to addresses of the genuine boot code, provide the signature to the host for authentication to a remote server.
6 more elements
A method, comprising:
- calculating a signature over program code that is used by a host and is stored in a non-volatile memory (NVM);
- upon detecting a power-up of the host, verifying whether first read commands issued by the host following the power-up are directed to addresses in accordance with predefined addresses expected for a genuine boot code;
- and
- only if the first read commands were verified to be directed to addresses of the genuine boot code, providing the signature to the host for authentication to a remote server.
1 more element
Dependencies are inferred from the claim text.