Method and apparatus for protecting embedded software

A method for securing software update information from a server to a device, comprising:

• generating physically unclonable function (PUF) information using a PUF information generator on a device, wherein the PUF information comprises at least one PUF response output and at least one corresponding challenge input;
• determining at least one encrypted PUF response output using a first encrypter on the device, wherein the at least one encrypted PUF response output is determined by encrypting the at least one PUF response output using one of at least one public key received from the server;
• transmitting the at least one encrypted PUF response output to the server, wherein a second encrypter on the server is used to decrypt the at least one PUF response output, wherein one of the at least one PUF response output is further used to encrypt the software update information;
• and
• receiving the encrypted software update information and the corresponding challenge input on the device, wherein a third encrypter on the device is configured to decrypt the encrypted software update information to obtain the software update information using the corresponding PUF response output;
• removing noise in the at least one PUF response output;
• storing the decrypted software update information for execution;
• receiving the at least one public key, the encrypted software update information, and the corresponding challenge input corresponding to the at least one PUF response output used for encrypting the software update information from the server;
• transmitting the at least one encrypted PUF response output from the device;
• and
• executing the software update information stored in the memory.

A system for sharing secured software update information, the system comprising:

• at least one device, wherein the at least one device each comprises
• a PUF cell array configured to generate at least one PUF response output at corresponding at least one challenge input;
• a first encrypter configured to encrypt the at least one PUF response output with one of at least one public key;
• and
• a second encrypter configured to decrypt encrypted software update information;
• a helper data generator configured to remove noise in the at least one PUF response output;
• a memory configured to store the decrypted software update information for execution;
• a first input/output (I/O) interface;
• configured to receive the at least one public key, the encrypted software update information, and the corresponding challenge input corresponding to the at least one PUF response output used for encrypting the software update information from the server, and transmit the at least one encrypted PUF response output from the device;
• and
• a processor configured to execute the software update information stored in the memory;
• and
• a server comprising a third encrypter, wherein the third encrypter is configured to decrypt the at least one PUF response from the encrypted at least one PUF response;
• and
• a second input/output (I/O) interface between each of the at least one device and the server, configured to
• transmit the at least one public key, the encrypted software update information, and the corresponding challenge input corresponding to the one of the at least one PUF response output used for encrypting the software update information from the server;
• and
• receive the at least one encrypted PUF response output from the device.