# US 8,788,839 B1 · Securely replacing boot loaders > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,839 B1 - Document ID: US8788839B1 - Status: Granted - Kind: B1 - Application number: 13/648,689 - Filed: 2012-10-10 - Granted: 2014-07-22 - Earliest claimed: 2012-10-10 - Assignees: Google Inc. - Applicants: Google Inc. - Inventors: Ke Dong; Michael Daniel Fuller; Shawn M. Ledbetter - Web page: https://patentgrep.com/patent/US8788839B1 ## CPC - G06F 21/575: {Secure boot} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of booting an electronic device includes verifying communicable connection of a sender input/output terminal of the electronic device to a receiver input/output terminal of the electronic device, using a first boot loader executing on a computing processor of the electronic device. The method further includes reading a signature of a unique identifier of the electronic device from a removable storage device received by the electronic device, verifying the signature of the unique identifier of the electronic device, and allowing installation of a second boot loader on the electronic device when the signature is valid. ## Claims ### Claim 1 A method of replacing a boot loader of an electronic device, the method comprising: verifying, using a first boot loader executing on a computing processor of the electronic device, a shorted electrical connection between a sender input/output terminal of the electronic device and a receiver input/output terminal of the electronic device; reading a signature of a unique identifier of the electronic device from a removable storage device received by the electronic device; verifying the signature of the unique identifier of the electronic device; and allowing installation of a second boot loader on the electronic device when the signature is valid. ### Claim 2 (depends on 1) The method of claim 1, further comprising: sending a connection key from the sender terminal to the receiver terminal; and verifying receipt of the connection key from the receiver terminal. ### Claim 3 (depends on 2) The method of claim 2, further comprising generating the connection key as a random number. ### Claim 4 (depends on 2) The method of claim 2, further comprising sending the connection key bit-by-bit from the sender terminal to the receiver terminal and verifying each received bit, confirming correct connection of the sender terminal to the receiver terminal. ### Claim 5 (depends on 1) The method of claim 1, further comprising enabling a communication port receiving the removable storage device when correct connection of the input/output terminals is verified. ### Claim 6 (depends on 1) The method of claim 1, further comprising determining a presence of the signature of the unique identifier of the electronic device or the second boot loader on the storage device. ### Claim 7 (depends on 1) The method of claim 1, further comprising reading of the second boot loader from the storage device and storing the second boot loader in memory of the electronic device. ### Claim 8 (depends on 1) The method of claim 1, further comprising disallowing installation of the second boot loader when the signature is invalid. ### Claim 9 (depends on 1) The method of claim 1, further comprising booting the electronic device using the first boot loader when the signature is invalid. ### Claim 10 (depends on 1) The method of claim 1, further comprising booting the electronic device after installation of the second boot loader. ### Claim 11 A method of booting an electronic device, the method comprising: initiating execution of a first boot loader on a computing processor of the electronic device; electrically connecting a sender input/output terminal of the electronic device to a receiver input/output terminal of the electronic device; and connecting a removable storage device to a connection port of the electronic device, the storage device storing a signature of a unique identifier of the electronic device and a second boot loader; wherein the first boot loader: verifies a shorted electrical connection between the input/output terminals; reads the signature of the unique identifier of the electronic device from the connected storage device; verifies the signature of the unique identifier of the electronic device; and allows installation of the second boot loader on the electronic device when the signature is valid. ### Claim 12 (depends on 11) The method of claim 11, wherein the first boot loader: sends a connection key from the sender terminal to the receiver terminal; and verifies receipt of the connection key from the receiver terminal. ### Claim 13 (depends on 12) The method of claim 12, wherein the first boot loader generates the connection key as a random number. ### Claim 14 (depends on 12) The method of claim 12, wherein the first boot loader sends the connection key bit-by-bit from the sender terminal to the receiver terminal and verifies each received bit to confirm correct connection of the sender terminal to the receiver terminal. ### Claim 15 (depends on 11) The method of claim 11, wherein the first boot loader enables the communication port when correct connection of the input/output terminals is verified. ### Claim 16 (depends on 1) The method of claim 1, wherein the first boot loader determines a presence of the signature of the unique identifier of the electronic device or the second boot loader on the storage device. ### Claim 17 (depends on 11) The method of claim 11, wherein the first boot loader initiates reading of the second boot loader from the storage device. ### Claim 18 (depends on 11) The method of claim 11, wherein the first boot loader disallows installation of the second boot loader when the signature is invalid. ### Claim 19 (depends on 11) The method of claim 11, further comprising booting the electronic device using the first boot loader when the signature is invalid. ### Claim 20 (depends on 11) The method of claim 11, further comprising booting the electronic device after installation of the second boot loader. ### Claim 21 An electronic device comprising: a circuit comprising: memory storing a first boot loader; a computing processor in communication with the memory, the processor executing the first boot loader; and first and second input/output terminals in communication with the computing process; and a communication port in communication with the circuit; wherein the first boot loader verifies a shorted electrical connection between the first and second input/output terminals; reads the signature of the unique identifier of the electronic device from a storage device connected to the communication port; verifies the signature of the unique identifier of the electronic device; and allows installation of the second boot loader on the electronic device when the signature is valid. ### Claim 22 (depends on 21) The electronic device of claim 21, wherein the first boot loader: sends a connection key from the sender terminal to the receiver terminal; and verifies receipt of the connection key from the receiver terminal. ### Claim 23 (depends on 22) The electronic device of claim 22, wherein the first boot loader generates the connection key as a random number. ### Claim 24 (depends on 22) The electronic device of claim 22, wherein the first boot loader sends the connection key bit-by-bit from the sender terminal to the receiver terminal and verifies each received bit to confirm correct connection of the sender terminal to the receiver terminal. ### Claim 25 (depends on 21) The electronic device of claim 21, wherein the first boot loader enables the communication port when correct connection of the input/output terminals is verified. ### Claim 26 (depends on 21) The electronic device of claim 21, wherein the first boot loader determines a presence of the signature of the unique identifier of the electronic device or the second boot loader on the storage device. ### Claim 27 (depends on 21) The electronic device of claim 21, wherein the first boot loader initiates reading of the second boot loader from the storage device. ### Claim 28 (depends on 21) The electronic device of claim 21, wherein the first boot loader disallows installation of the second boot loader when the signature is invalid. ### Claim 29 (depends on 1) The electronic device of claim 1, wherein the first boot loader executes on the electronic device when the signature is invalid. ### Claim 30 (depends on 21) The electronic device of claim 21, wherein the storage device comprises a universal serial bus flash drive.