Firmware verification system and firmware verification method
AssigneeNuvoton Technology Corporation
InventorMin-Nan Cheng
Life of this patent
Estimating the term…
Abstract
A firmware verification system is suitable for a secure boot stage. The firmware verification system comprises a non-volatile firmware list storage device. The non-volatile firmware list storage device is configured to store a firmware list; wherein each entry corresponds to a firmware stored in a flash memory in a microcontroller, and each entry includes a plurality of fields. The bootloader reads the entries. According to the contents of the fields in each entry, the bootloader determines the correctness of the public key and the correctness of the digital signature for each firmware in the microcontroller.
Claims10
A firmware verification system, suitable for a secure boot stage;
- wherein the firmware verification system comprises:
- a read-only memory (ROM), configured to store a bootloader;
- a microcontroller, including a flash memory for storing a plurality of firmware;
- and
- a non-volatile firmware list storage device, configured to store a firmware list;
- wherein the firmware list includes a plurality of entries;
- wherein each entry respectively corresponds to one of the firmware stored in the flash memory, and each entry includes a firmware information field, a security version number field, and a public key hash value field;
- wherein the bootloader is used to read one of the entries, and according to contents of the firmware information field, the security version number field, and the public key hash value field in the one of the entries, to determine correctness of a public key and correctness of a digital signature of the firmware that is corresponding to the one of the entries in the microcontroller.
A firmware verification method, suitable for a secure boot stage, the firmware verification method comprising:
- storing a bootloader in a read-only memory (ROM);
- storing a plurality of firmware in a flash memory;
- wherein the flash memory is included in a microcontroller;
- storing a firmware list in a non-volatile firmware list storage device;
- wherein the firmware list includes a plurality of entries;
- wherein each entry respectively corresponds to one of the firmware stored in the flash memory, and each entry includes a firmware information field, a security version number field, and a public key hash value field;
- and
- the bootloader reads one of the entries, and according to contents of the firmware information field, the security version number field, and the public key hash value field in the one of the entries, determines a correctness of a public key and a correctness of a digital signature of the firmware that is corresponding to the one of the entries in the microcontroller.
A firmware verification system, suitable for a secure boot stage;
- wherein the firmware verification system comprises:
- a non-volatile firmware list storage device, configured to store a firmware list;
- wherein each entry respectively corresponds to one of a plurality of firmware stored in a flash memory in a microcontroller, and each entry includes a firmware information field, a security version number field, and a public key hash value field;
- wherein a bootloader reads one of the entries, and according to contents of the firmware information field, the security version number field, and the public key hash value field in the one of the entries, determines a correctness of a public key and a correctness of a digital signature for each firmware that is corresponding to the one of the entries in the microcontroller.
Dependencies are inferred from the claim text.