Storage controller and method of providing firmware image
AssigneeSamsung Electronics Co., Ltd.
InventorsYongjae Lee, Dongbin Park, Wonje Heo
Life of this patent
Estimating the term…
Abstract
A storage controller configured to control a nonvolatile memory includes a one-time programmable (OTP) memory configured to store a first public key, and a processor configured to, based on a first signature added to a firmware image including a host authentication public key being verified using the first public key, receive a storage command including at least one second public key and a first host authentication signature for the at least one second public key and store the at least one second public key in the OTP memory based on the first host authentication signature being verified using the host authentication public key.
Claims15
A storage controller configured to control a nonvolatile memory, the storage controller comprising:
- a one-time programmable (OTP) memory configured to store a first public key;
- and
- a processor configured to:
- verify a firmware image including a host authentication public key using the first public key, based on a first signature added to the firmware image,
- receive a storage command comprising at least one second public key and a first host authentication signature for the at least one second public key, and
- store the at least one second public key in the OTP memory based on the first host authentication signature being verified using the host authentication public key,
- wherein the processor is further configured to store a state value indicating a dual signature verification ready state in the OTP memory after storing the at least one second public key in the OTP memory.
A storage controller configured to control a nonvolatile memory, the storage controller comprising:
- a one-time programmable (OTP) memory configured to store a first public key;
- a buffer memory configured to buffer an update firmware image received from a host;
- and
- a processor configured to:
- authenticate an existing firmware image including a host authentication public key using at least the first public key,
- authenticate a second public key using the host authentication public key, and store the second public key to the OTP memory,
- authenticate the update firmware image by verifying a first signature added to the update firmware image using the first public key and verifying a second signature added to the update firmware image using the second public key, and
- control the nonvolatile memory to store the update firmware image based on the authentication being completed.
A method of operating a storage device, comprising:
- based on a first signature added to a firmware image including a host authentication public key being verified using a first public key, receiving a storage command comprising at least one second public key and a first host authentication signature for the at least one second public key;
- verifying the first host authentication signature;
- and
- based on successfully verifying the first host authentication signature:
- storing the at least one second public key;
- determining whether a signature state value of the storage device corresponds to a first state value of a single signature verification state;
- and
- based on determining that the signature state value of the storage device corresponds to the first state value, switching the signature state value to a second state value of a dual signature verification ready state.
Dependencies are inferred from the claim text.