Firmware authentication and deciphering for secure TV receiver

A device comprising:

• a unique identifier;
• a processing unit;
• a random access memory coupled to the processing unit;
• a read-only memory coupled to the processing unit and having instruction codes that, when executed by the processing unit, causes the processing unit to:
• read in a firmware image and a certificate associated with the firmware image, the certificate including a seed number, a public key, and a digital signature;
• store the firmware image and the associated certificate into the random access memory;
• concurrently authenticate the certificate and the firmware image, wherein the simultaneous authentication of the certificate and the firmware image comprises:
• generating an encryption key using the seed number and the unique identifier;
• encrypting or decrypting the firmware image using the generated encryption key;
• hashing the encrypted or decrypted firmware image to obtain a hash;
• encrypting the public key using the obtained hash;
• and
• comparing the encrypted public key with the digital signature.

A method for authenticating program code to be executed by an information processing apparatus, the method comprising:

• receiving the program code and a certificate associated with the program code from an external Flash memory device;
• storing the received program code and the associated certificate in a secure random access memory disposed in the information processing apparatus;
• hashing a portion of the certificate to obtain a first hash value;
• comparing the first hash value with a unique identifier disposed in the information processing apparatus;
• decrypting the program code in the event that the comparison returns a positive result, wherein the decrypting comprises:
• generating a second encryption key by performing a first encryption algorithm on a seed value disposed in the certificate and the unique identifier;
• and
• decrypting the program code using the second encryption key.

A method for authenticating a firmware image by a receiver having a secure random access memory, the method comprising:

• receiving the firmware image and a digital certificate associated with the firmware image from an external device, the digital certificate including a seed value;
• storing the firmware image and the digital certificate in the secure random access memory;
• hashing the firmware image to obtain a hash;
• authenticating the firmware image by comparing the hash with a checksum stored in the digital certificate;
• generating an encryption key using the seed value stored in the digital certificate and a unique identifier disposed in the receiver;
• decrypting the firmware image using the generated encryption key;
• and
• storing the decrypted firmware in the secure random access memory.