Secure firmware provisioning and device binding mechanism

A portable computing device, comprising:

• a processor;
• a memory arranged to store instructions executed by the processor;
• and
• boot-loader logic, the boot-loader logic including boot-loader instructions executable by the processor to:
• retrieve a unique device identifier;
• generate a random number;
• securely store the generated random number;
• computationally combine the random number and a representation of the unique device identifier to create a device-binding value;
• and
• generate an address-offset from the device-binding value.

A non-transitory computer-readable storage medium whose stored contents configure a computing system to perform a boot-loader method, the boot-loader method comprising:

• generating a random number;
• securely storing the generated random number in a first memory;
• creating a device-binding value by computationally combining the generated random number with a value that uniquely represents a portable device;
• generating an address-offset from the device-binding value;
• and
• storing information in a second memory based on the address-offset.