Trojan detection in cryptographic hardware adapters
AssigneeInternational Business Machines Corporation
InventorMichael D. Hocker
Life of this patent
Estimating the term…
Abstract
A cryptographic hardware security module (HSM) includes a memory storage device and an immutable hardware unit in signal communication with the memory storage device. The memory storage device is configured to store firmware. The immutable hardware unit is configured to perform a hash operation on targeted firmware stored in the memory storage device to determine an authenticity of the targeted firmware based at least in part on results of the hash operation.
Claims12
A cryptographic hardware security module (HSM) comprising:
- a memory storage device configured to store firmware;
- and
- an immutable hardware unit in signal communication with the memory storage device, the immutable hardware unit configured to perform a hash operation on targeted firmware stored in the memory storage device to determine an authenticity of the targeted firmware based at least in part on results of the hash operation;
- and
- a secured boundary that contains the memory storage device and the immutable hardware unit,
- wherein the immutable hardware unit comprises:
- a hash engine in signal communication with the memory storage device, the hash engine configured to receive the targeted firmware and to perform the hash operation on the targeted firmware to generate hash results, and
- wherein the hash results are configured to be delivered to an external processor located externally from the HSM such that the external processor determines the authenticity of the targeted firmware in response to comparing the hash results to a predetermined hash corresponding to an authenticated firmware.
A method of authenticating firmware stored in a cryptographic hardware security module (HSM), the method comprising:
- securing a memory storage device and an immutable hardware unit within a secured boundary that prevents external access to the memory storage device and the immutable hardware unit;
- initiating an authentication process;
- delivering targeted firmware from the storage memory device to the immutable hardware unit;
- performing, by the immutable hardware unit, a hash operation on the targeted firmware;
- and
- determining an authenticity of the targeted firmware based at least in part on results of the hash operation,
- wherein determining the authenticity of the targeted firmware further comprises:
- delivering the targeted firmware to a hash engine within the immutable hardware unit;
- performing, by the hash engine, the hash operation on the targeted firmware to generate hash results,
- delivering the hash results to an external processor located externally from the HSM;
- comparing, by the external processor, the hash results to a predetermined hash corresponding to an authenticated firmware;
- and
- determining, by the external processor, the authenticity of the targeted firmware based on the comparison between the hash results and the predetermined hash.
A computer program product to control a cryptographic hardware security module (HSM) to authenticate firmware, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by an electronic computer processor to control the cryptographic HSM to perform operations comprising:
- initiating an authentication process;
- delivering targeted firmware from a storage memory device to an immutable hardware unit, wherein the memory storage device and the immutable hardware unit are each secured within a secured boundary that prevents external access to the memory storage device and the immutable hardware unit;
- performing, by the immutable hardware unit, a hash operation on the targeted firmware;
- and
- determining an authenticity of the targeted firmware based at least in part on results of the hash operation,
- wherein determining the authenticity of the targeted firmware further comprises:
- delivering the targeted firmware to a hash engine within the immutable hardware unit;
- performing, the hash engine, the hash operation on the targeted firmware to generate hash results,
- delivering the hash results to an external processor located externally from the HSM;
- comparing, by the external processor, the hash results to a predetermined hash corresponding to an authenticated firmware;
- and
- determining, by the external processor, the authenticity of the targeted firmware based on the comparison between the hash results and the predetermined hash.
Dependencies are inferred from the claim text.