US 12,585,781 B2 · Secure boot method and apparatus

Abstract

A secure boot method. The method may be performed by a communication device. According to the method, the communication device can flexibly perform secure boot by using different cryptographic algorithms based on different security requirements, to ensure security of the communication device. The communication device may obtain external secure boot code (ESBC). The ESBC includes a code segment of a first cryptographic algorithm. After the ESBC is obtained, the communication device may perform an integrity check on the ESBC, and after the integrity check on the ESBC succeeds, verify a signature of next-level software based on the first cryptographic algorithm. When a cryptographic algorithm used by the communication device cannot meet a security requirement, the ESBC may be obtained, and the first cryptographic algorithm included in the ESBC is used to perform the secure boot, to meet the security requirement.

Claims18

Dependent claims

A secure boot method comprising:

storing a baseline value of an external secure boot code (ESBC) stored in a secure storage entity,
wherein the baseline value is a hash value of the ESBC,
wherein secure storage entity comprises at least a reserved storage area configured to store the baseline value of the ESBC
obtaining the ESBC, wherein the ESBC comprises a code segment of a first cryptographic algorithm;
enable the ESBC for a secure boot,
performing an integrity check on the ESBC based on the baseline value of the ESBC;
and
after the integrity check on the ESBC succeeds, verifying a signature of next-level software based on the first cryptographic algorithm,
wherein the first cryptographic algorithm is a post-quantum algorithm for resisting a post-quantum attack.

6 more elements

A communication apparatus, comprising at least one processor and a memory coupled with the one or more processors, wherein the memory comprising instructions, when executed by the at least one processor, cause the communication apparatus to perform the following operations:

storing a baseline value of an external secure boot code (ESBC) stored in a secure storage entity,
wherein the baseline value is a hash value of the ESBC,
wherein secure storage entity comprises at least a reserved storage area configured to store the baseline value of the ESBC
obtaining the ESBC, wherein the ESBC comprises a code segment of a first cryptographic algorithm;
and
enable the ESBC for a secure boot,
performing an integrity check on the ESBC based on the baseline value of the ESBC;
wherein after the integrity check on the ESBC succeeds,
verifying a signature of next-level software based on the first cryptographic algorithm, wherein the first cryptographic algorithm is a post-quantum algorithm for resisting a post-quantum attack.

6 more elements

Dependencies are inferred from the claim text.

Secure boot method and apparatus

Life of this patent

Secure boot method and apparatus

Life of this patent

Abstract

Claims18