Back to results
US 11,698,971 B2Granted
Secure boot device
AssigneeHoneywell International Inc.
InventorsRalf Thor, Nagaraja Sundaresh, Francois Vincent, Pradeep Durgam
Life of this patent
Estimating the term…
Abstract
One embodiment is a device comprising a controller for verifying a digital signature of a process, a memory for storing an indication from the controller that the digital signature was verified the indication including at least one symmetric key, and a bootloader for receiving the indication from the memory and performing at least one security check using the at least one symmetric key, wherein the bootloader executes a function of the external process, only when it passes the security check.
Claims20
A device comprising:
- a controller that verifies a digital signature of a process;
- a memory that stores an indication from the controller that the digital signature was verified the indication including at least one symmetric key;
- and
- a bootloader that receives the indication from the memory and performing at least one security check using the at least one symmetric key, wherein the bootloader exchanges a new image for an existing image and determines if a message authentication code (MAC) is correct,
- wherein the bootloader executes a function of an external process, only when it passes the security check.
2 more elements
A system comprising:
- a control module that verifies a digital signature of a first system;
- a memory module that stores an indication from the controller that the digital signature was verified the indication including at least one symmetric key;
- and
- a bootloading module that receives the indication from the memory and performing at least one security check using the at least one symmetric key, wherein the bootloading module exchanges a new image for an existing image and determines if a message authentication code (MAC) is correct,
- wherein the bootloading module executes a function of an external system, only when it passes the security check.
2 more elements
A method comprising:
- receiving a firmware update with a controller;
- storing the firmware update in a storage memory by the controller;
- verifying a digital signature of the firmware update by the controller;
- storing an identifier in a secure location, if the controller verifies the firmware update;
- accessing the identifier with a bootloader;
- performing a security check by the bootloader using the identifier, wherein the bootloader exchanges a new image for an existing image and determines if a message authentication code (MAC) is correct;
- and
- installing an update, only when the bootloader successfully performs the security check.
5 more elements
Dependencies are inferred from the claim text.