Managing secure firmware updates
AssigneeAmazon Technologies, Inc.
InventorStephen Christopher Trier
Life of this patent
Estimating the term…
Abstract
Techniques for managing secure data transfer, including firmware updates and/or cryptographic keys, may be provided. For example, a portable device may be provided that includes at least a first memory configured to store data associated with secure firmware updates while the device is interacting with a second device. In some examples, a network connection with a third device may be established. The data associated with the firmware update may be received from the third device by utilizing the established network connection. Further, in some examples, the received data may be stored in the first memory only while the first device is interacting with the second device. The portable device may also enable a firmware update of the second device based at least in part on the data stored in the first memory.
Claims24
A portable device for managing secure firmware updates, comprising:
- a non-volatile memory that stores computer-executable instructions;
- a first volatile memory configured to store firmware update data associated with the secure firmware updates;
- a network interface device with a second volatile memory configured to store protocol packet information associated with the secure firmware updates;
- and
- a processor configured to access the non-volatile memory, wherein the processor is configured to execute the computer-executable instructions, while the portable device is interacting with an updatable computing device, to collectively at least:
- enable reception of power, from the updatable computing device, for operating the portable device while interacting with the updatable computing device;
- establish a network connection, via the network interface device, with a data center computing device;
- receive the firmware update data from the data center computing device in response to an instruction to update firmware of the updatable computing device;
- store the firmware update data in the first volatile memory only while the portable device is interacting with the updatable computing device;
- provide the firmware update data stored in the first volatile memory to the updatable computing device based at least in part on the instruction to update the firmware of the updatable computing device;
- and
- remove the power from the first volatile memory to destroy content of the firmware update data.
A first device for managing a secure firmware update, comprising:
- a first volatile memory configured to store data associated with the secure firmware update while the first device is interacting with a second device;
- a processor configured to access computer-executable instructions of a second memory of the first device, wherein the processor is configured to execute the computer-executable instructions to collectively at least:
- establish a network connection with a third device via a network interface of the first device, the network interface having a third memory for enabling the network interface;
- receive the data from the third device utilizing the network connection;
- store the received data in the first volatile memory only while the first device is interacting with the second device;
- enable a firmware update of the second device based at least in part on data stored in the first volatile memory;
- and
- disable access to the data after the first device is detached from the second device.
A computer-implemented method for managing a secure firmware update, comprising:
- under control of one or more computer systems of a handheld device configured with computer-executable instructions, establishing a connection between the handheld device and a data center via a network interface of the handheld device, the network interface having memory capable of enabling the network interface;
- based at least in part on the established connection, providing an authentication credential to the data center;
- receiving a firmware update from the data center and based at least in part on a successful authentication using the provided authentication credential;
- storing the firmware update in a second volatile memory only while the handheld device is attached to a computing device;
- providing the firmware update to the computing device attached to the handheld device;
- and
- disabling access to the firmware update after the handheld device is detached from the computing device.
One or more non-transitory computer-readable media storing computer-executable instructions for managing a secure firmware update that, when executed by a portable device controller of a portable device, configure the portable device controller to perform operations comprising:
- identifying that the portable device is attached to an updatable device;
- establishing a network connection between the portable device and a firmware provider via a network interface of the portable device, the network interface configured with network interface memory;
- based at least in part on the established connection and a request for new firmware, receiving instructions for installing the new firmware on the updatable device;
- providing access to a second volatile memory storing the new firmware only while the portable device is attached to the updatable device;
- enabling an update of the updatable device based at least in part on the new firmware provided by the portable device;
- and
- disabling access to the new firmware after the portable device is detached from the updatable device.
Dependencies are inferred from the claim text.