Method and apparatus for device security verification utilizing a virtual trusted computing base

A computing device, comprising:

• a memory configured based on a memory layout including a secure memory loader image and an encrypted firmware image;
• a processor configured to load and execute the secure memory loader image of the memory;
• and
• a memory protection unit processor configured to control access to the memory,
• wherein the processor is configured to execute the secure memory loader image after booting of the computing device, and
• wherein self-security verification of a secure memory loader is performed, and validity of a key for decryption is verified in conjunction with a one-time programmable memory or a device security management server by the security memory loader of which security is self-verified,
• encrypted firmware stored in the memory is decrypted by the secure memory loader using the key to verify confidentiality of the firmware when the key is valid, and
• authentication and integrity of the firmware are verified by the secure memory loader by comparing a signature value generated for the decrypted firmware with an existing signature value.