Verifying secure software images using digital certificates
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
The embodiments relate to improved security in computing devices. In some aspects, the techniques described herein relate to a device including: a secure storage area, the secure storage area including a first public key written during manufacturing of the device; a controller configured to: receive data, the data including a payload, digital certificate, and digital signature, validate the digital certificate using the first public key, extract a second public key from the digital certificate; validate the digital signature using the second public key; and process the payload.
Claims20
A device comprising:
- a storage area storing a first key;
- and
- a controller configured to:
- receive a payload, a certificate, and a signature,
- validate the certificate using the first key,
- obtain a second key from the certificate,
- validate the signature using the second key, and
- process the payload.
A system comprising:
- a key storage device storing a private key;
- and
- one or more processors configured to:
- receive, from a vendor, a request including a vendor key,
- generate a certificate by signing the request using the private key, and
- return the certificate to the vendor.
A device comprising:
- a storage area storing a first key and a certificate;
- and
- a controller configured to:
- load the certificate from the storage area,
- validate the certificate using the first key,
- obtain a second key from the certificate,
- validate a signature of an image using the second key, and
- process the image in response to the signature being valid.
Dependencies are inferred from the claim text.