Software version-aware encryption key for secure mutable partitions
AssigneeSkydio, Inc.
InventorsJerry Xiri Zhang, Brian David Kubisiak, Alex Mallery
Life of this patent
Estimating the term…
Abstract
Described herein are systems for software version-aware encryption key for secure mutable partitions. For example, some methods include verifying a digital signature of a header for an application image, wherein the header includes a hash of the application image; generating an encryption key based on the hash; encrypting, using the encryption key, data to be written to a writable partition that is mounted with a filesystem of the application image; and decrypting, using the encryption key, data read from the writable partition.
Claims20
An unmanned aerial vehicle comprising:
- a processing apparatus configured to:
- verify a digital signature of a header for an application image, wherein the header includes a hash of the application image;
- generate an encryption key based on the hash;
- and
- decrypt, using the encryption key, data read from an overlay mount of a filesystem of the application image.
A method comprising:
- verifying a digital signature of a header for an application image, wherein the header includes a hash of the application image;
- generating an encryption key based on the hash;
- and
- decrypting, using the encryption key, data read from a writable partition that is mounted with a filesystem of the application image.
A system for secure data storage comprising:
- a data storage device comprising a read-only partition storing signature-verified software, and a writable partition configured to store cache data;
- a trusted execution environment configured to:
- store a device-specific secret key, generate an identifier string for a software version, and derive an encryption key based on the device-specific secret key and the identifier string;
- and
- a processor configured to:
- encrypt data written to the writable partition using the derived encryption key, integrate the writable partition with the read-only partition in a filesystem structure, detect corruption of the writable partition upon software version change, and reformat the writable partition responsive to the detection of corruption.
Dependencies are inferred from the claim text.