US 2019/0163465 A1 · METHOD FOR PROVIDING A FIRMWARE UPDATE OF A DEVICE

Abstract

A method provides a firmware update to an electronic device, to code signing for firmware updates of electronic devices, and a system therefor. In particular, the system and method for updates firmware that is authenticated through a public key infrastructure. The method includes an electronic device receiving a firmware update provided with a signature of a signing key, a signing certificate with a signature of a master key, and a revision number. The device verifies the signature of the master key on the signing certificate of the signing key, checks the revision number on the signing certificate of the signing key against a roll back counter, and verifies the signature of the signing key on the firmware update. The device then rejecting or accepting the received firmware update based on the outcome of the above verifying and checking.

Claims19

Dependent claims

A method for providing a firmware update of a device, comprising:

receiving, via an electronic device, a firmware update provided with a signature of a signing key, a signing certificate with a signature of a master key, and a revision number;
verifying, the device, the signature of the master key on the signing certificate of the signing key;
checking, via the device, a revision number on the signing certificate of the signing key against a roll back counter;
verifying, via the device, the signature of the signing key on the firmware update;
rejecting or accepting the received firmware update based on the outcome of the above verifying and checking.

2 more elements

A firmware update system, comprising:

an electronic device comprising firmware, a Signature Management Module SMM and a roll back counter;
a Hardware Security Module HSM comprising an online component storing one or more signing keys and an offline component storing one or more master keys;
a signing portal for providing:
a software package with a signature by a private part of one of the signing keys stored in the HSM online component;
and
a signing certificate of the respective signing key provided with a signature by a private part of one of the master keys stored in the HSM offline component;
wherein the signing certificate comprises a revision number;
and
wherein the SMM is arranged for checking:
the signature of the signing key by a public part of the respective signing key;
the signature of the master key by a public part of the respective master key;
and
the revision number against the roll back counter.

10 more elements

Dependencies are inferred from the claim text.

Method for providing a firmware update of a device

Life of this patent

Method for providing a firmware update of a device

Life of this patent

Abstract

Claims19