Computing system for managing firmware and firmware managing method thereof

A firmware update system comprising:

• a computing system comprising a memory and a processor including a signed firmware generation unit;
• and
• a hardware security module comprising a signature generation unit and a security storage,
• wherein the computing system is configured to receive a first firmware image from a user of a first electronic device and transmit the first firmware image to the signature generation unit,
• wherein the signature generation unit is configured to read a first private key of the first firmware image from the security storage, generate a first hash value from the first firmware image, generate a first signature using the first hash value and the first private key, and transmit the first signature to the signed firmware generation unit, and
• wherein the signed firmware generation unit is configured to receive the first signature, receive first model information of the first electronic device from the user, select a first code-signer version from a plurality of code-signer versions corresponding to a respective first model among a plurality of different models stored in the memory using the first model information, combine the first firmware image and the first signature using the selected first code-signer version to generate a first signed firmware image, and transmit the first signed firmware image to the user for installation to the first electronic device as a firmware update.

An electronic device comprising:

• storage configured to store a first certificate element;
• a modem configured to receive over a network at least one signed firmware image including at least one executable firmware image;
• a nonvolatile memory device configured to store the at least one executable firmware image;
• and
• a processor configured to execute the at least one executable firmware image,
• wherein the at least one signed firmware image further includes a second certificate element, a third certificate element, and a signature,
• wherein the processor verifies the second certificate element by using a first public key included in the first certificate element, verifies the third certificate element by using a second public key included in the second certificate element if the verification of the second certificate element is successful, and verifies the signature by using a third public key included in the third certificate element if the verification of the third certificate element is successful,
• wherein the processor executes the executable firmware image as a firmware update if the verification of the signature is successful.