JP4027738B2 - デジタルデバイスのセキュリティを守るための、安全なブートローダー - Google Patents
デジタルデバイスのセキュリティを守るための、安全なブートローダー Download PDFInfo
- Publication number
- JP4027738B2 JP4027738B2 JP2002198961A JP2002198961A JP4027738B2 JP 4027738 B2 JP4027738 B2 JP 4027738B2 JP 2002198961 A JP2002198961 A JP 2002198961A JP 2002198961 A JP2002198961 A JP 2002198961A JP 4027738 B2 JP4027738 B2 JP 4027738B2
- Authority
- JP
- Japan
- Prior art keywords
- digital device
- memory
- program file
- boot loader
- read
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Lifetime
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F21/575—Secure boot
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Multimedia (AREA)
- Technology Law (AREA)
- Mathematical Physics (AREA)
- Storage Device Security (AREA)
- Stored Programmes (AREA)
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US30374301P | 2001-07-06 | 2001-07-06 | |
| US303743 | 2001-07-06 | ||
| US09/954,124 US7237121B2 (en) | 2001-09-17 | 2001-09-17 | Secure bootloader for securing digital devices |
| US954124 | 2001-09-17 |
Publications (3)
| Publication Number | Publication Date |
|---|---|
| JP2003108257A JP2003108257A (ja) | 2003-04-11 |
| JP2003108257A5 JP2003108257A5 (OSRAM) | 2005-11-10 |
| JP4027738B2 true JP4027738B2 (ja) | 2007-12-26 |
Family
ID=26973624
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| JP2002198961A Expired - Lifetime JP4027738B2 (ja) | 2001-07-06 | 2002-07-08 | デジタルデバイスのセキュリティを守るための、安全なブートローダー |
Country Status (3)
| Country | Link |
|---|---|
| EP (1) | EP1273996B1 (OSRAM) |
| JP (1) | JP4027738B2 (OSRAM) |
| DE (1) | DE60228027D1 (OSRAM) |
Families Citing this family (42)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| FR2852777B1 (fr) * | 2003-03-21 | 2005-06-10 | Gemplus Card Int | Procede de protection d'un terminal de telecommunication de type telephone mobile |
| US7142891B2 (en) * | 2003-10-10 | 2006-11-28 | Texas Instruments Incorporated | Device bound flashing/booting for cloning prevention |
| JP2005130059A (ja) * | 2003-10-22 | 2005-05-19 | Fuji Xerox Co Ltd | 画像形成装置および交換部品 |
| US7734932B2 (en) | 2003-11-10 | 2010-06-08 | Broadcom Corporation | System and method for securing executable code |
| US7500098B2 (en) | 2004-03-19 | 2009-03-03 | Nokia Corporation | Secure mode controlled memory |
| US7464405B2 (en) | 2004-03-25 | 2008-12-09 | International Business Machines Corporation | Method for preventing loading and execution of rogue operating systems in a logical partitioned data processing system |
| US7694121B2 (en) * | 2004-06-30 | 2010-04-06 | Microsoft Corporation | System and method for protected operating system boot using state validation |
| US7725703B2 (en) * | 2005-01-07 | 2010-05-25 | Microsoft Corporation | Systems and methods for securely booting a computer with a trusted processing module |
| JP4600750B2 (ja) * | 2005-01-31 | 2010-12-15 | ソニー株式会社 | データ処理回路、データ処理装置、データ処理方法、データ処理制御方法、データ処理プログラム及びデータ処理制御プログラム |
| JP4596247B2 (ja) * | 2005-01-31 | 2010-12-08 | ソニー株式会社 | データ処理回路、データ処理装置、データ処理方法、データ処理制御方法、データ処理プログラム及びデータ処理制御プログラム |
| US8321686B2 (en) | 2005-02-07 | 2012-11-27 | Sandisk Technologies Inc. | Secure memory card with life cycle phases |
| US8108691B2 (en) | 2005-02-07 | 2012-01-31 | Sandisk Technologies Inc. | Methods used in a secure memory card with life cycle phases |
| US8423788B2 (en) | 2005-02-07 | 2013-04-16 | Sandisk Technologies Inc. | Secure memory card with life cycle phases |
| JP4537908B2 (ja) | 2005-03-29 | 2010-09-08 | 株式会社東芝 | プロセッサ、メモリ、コンピュータシステムおよびシステムlsi |
| US7748031B2 (en) | 2005-07-08 | 2010-06-29 | Sandisk Corporation | Mass storage device with automated credentials loading |
| JP4568196B2 (ja) | 2005-09-01 | 2010-10-27 | 株式会社東芝 | プロセッサ、コンピュータシステムおよび認証方法 |
| US7536540B2 (en) | 2005-09-14 | 2009-05-19 | Sandisk Corporation | Method of hardware driver integrity check of memory card controller firmware |
| JP4891324B2 (ja) | 2005-09-14 | 2012-03-07 | サンディスク コーポレイション | 大容量フラッシュメモリを備える高信頼性デバイスのための、セキュアでありながらフレキシブルなシステムアーキテクチャ |
| US20070061597A1 (en) | 2005-09-14 | 2007-03-15 | Micky Holtzman | Secure yet flexible system architecture for secure devices with flash mass storage memory |
| EP1845470B1 (en) | 2006-04-13 | 2016-11-09 | STMicroelectronics (Research & Development) Limited | Multiple purpose integrated circuit |
| WO2007135672A2 (en) * | 2006-05-24 | 2007-11-29 | Safend Ltd. | Method and system for defending security application in a user's computer |
| JP2008102618A (ja) * | 2006-10-17 | 2008-05-01 | Toshiba Corp | 電子機器およびファームウェア保護方法 |
| US8423794B2 (en) | 2006-12-28 | 2013-04-16 | Sandisk Technologies Inc. | Method and apparatus for upgrading a memory card that has security mechanisms for preventing copying of secure content and applications |
| US8239688B2 (en) | 2007-01-07 | 2012-08-07 | Apple Inc. | Securely recovering a computing device |
| US8254568B2 (en) | 2007-01-07 | 2012-08-28 | Apple Inc. | Secure booting a computing device |
| US8171275B2 (en) | 2007-01-16 | 2012-05-01 | Bally Gaming, Inc. | ROM BIOS based trusted encrypted operating system |
| CA2618544C (en) * | 2007-01-16 | 2015-07-21 | Bally Gaming, Inc. | Rom bios based trusted encrypted operating system |
| US20090259855A1 (en) * | 2008-04-15 | 2009-10-15 | Apple Inc. | Code Image Personalization For A Computing Device |
| US8150039B2 (en) | 2008-04-15 | 2012-04-03 | Apple Inc. | Single security model in booting a computing device |
| DE102009007258A1 (de) * | 2009-02-03 | 2010-11-18 | Fresenius Medical Care Deutschland Gmbh | Vorrichtung und Verfahren zum Verhindern von unautorisierter Verwendung und/oder Manipulation von Software |
| WO2010113266A1 (ja) * | 2009-03-31 | 2010-10-07 | 富士通株式会社 | 情報処理装置,情報処理装置の起動制御方法及び起動プログラム |
| WO2010134192A1 (ja) * | 2009-05-22 | 2010-11-25 | 三菱電機株式会社 | 電子機器及び鍵生成プログラム及び記録媒体及び鍵生成方法 |
| US8250379B2 (en) | 2009-10-13 | 2012-08-21 | Microsoft Corporation | Secure storage of temporary secrets |
| US8583909B2 (en) * | 2009-12-04 | 2013-11-12 | Lg Electronics Inc. | Digital broadcast receiver and booting method of digital broadcast receiver |
| FR2970099B1 (fr) * | 2010-12-29 | 2013-01-11 | Viaccess Sa | Procede de chargement d'un code d'au moins un module logiciel |
| US8924739B2 (en) * | 2011-01-05 | 2014-12-30 | Apple Inc. | System and method for in-place encryption |
| CN103370718B (zh) * | 2011-03-21 | 2016-01-20 | 索尼爱立信移动通讯有限公司 | 使用分布式安全密钥的数据保护方法、设备和系统 |
| US9015455B2 (en) * | 2011-07-07 | 2015-04-21 | Intel Corporation | Processsor integral technologies for BIOS flash attack protection and notification |
| EP2742453B1 (en) * | 2011-08-12 | 2020-01-08 | ABB Schweiz AG | Method and system for protected transmission of files |
| US9195831B1 (en) | 2014-05-02 | 2015-11-24 | Google Inc. | Verified boot |
| JP7413300B2 (ja) | 2021-03-15 | 2024-01-15 | 株式会社東芝 | 記憶装置 |
| WO2022213129A1 (en) * | 2021-04-02 | 2022-10-06 | Google Llc | Read-only memory (rom) security |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5892904A (en) * | 1996-12-06 | 1999-04-06 | Microsoft Corporation | Code certification for network transmission |
| US6021201A (en) * | 1997-01-07 | 2000-02-01 | Intel Corporation | Method and apparatus for integrated ciphering and hashing |
| US6735696B1 (en) * | 1998-08-14 | 2004-05-11 | Intel Corporation | Digital content protection using a secure booting method and apparatus |
| BRPI0005192B1 (pt) * | 1999-03-03 | 2016-04-19 | Sony Corp | aparelho de processamento de dados, unidade terminal possuindo um meio de gravação não volátil fixável/destacável, e, processos de processamento de dados, e de transmissão de um aparelho de processamento de dados |
| AU5634100A (en) * | 1999-06-23 | 2001-01-09 | Brodia Group, The | Software smart card |
| GB2356469B (en) * | 1999-11-17 | 2001-12-12 | Motorola Ltd | Portable data carrier memory management system and method |
-
2002
- 2002-07-01 DE DE60228027T patent/DE60228027D1/de not_active Expired - Lifetime
- 2002-07-01 EP EP02100772A patent/EP1273996B1/en not_active Expired - Lifetime
- 2002-07-08 JP JP2002198961A patent/JP4027738B2/ja not_active Expired - Lifetime
Also Published As
| Publication number | Publication date |
|---|---|
| EP1273996B1 (en) | 2008-08-06 |
| EP1273996A2 (en) | 2003-01-08 |
| EP1273996A3 (en) | 2003-10-01 |
| JP2003108257A (ja) | 2003-04-11 |
| DE60228027D1 (de) | 2008-09-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP4027738B2 (ja) | デジタルデバイスのセキュリティを守るための、安全なブートローダー | |
| US7237121B2 (en) | Secure bootloader for securing digital devices | |
| JP5636371B2 (ja) | 汎用コンピューティングデバイスにおけるコード実行制御および再帰的セキュリティプロトコルでのコード実行制御のための方法およびシステム | |
| CN101221613B (zh) | 用于验证处理系统部件的方法和装置 | |
| KR101397637B1 (ko) | 다중 사용자 감응 코드 및 데이터를 보호하는 아키텍처를 포함하는 방법 및 장치 | |
| US7313705B2 (en) | Implementation of a secure computing environment by using a secure bootloader, shadow memory, and protected memory | |
| KR100974161B1 (ko) | 숨겨진 중간 키들을 사용하여 소프트웨어를 인증하기 위한 시스템 및 방법 | |
| Meijer et al. | Self-encrypting deception: weaknesses in the encryption of solid state drives | |
| JP4089171B2 (ja) | 計算機システム | |
| US8006095B2 (en) | Configurable signature for authenticating data or program code | |
| TWI489308B (zh) | 未知安全金鑰下開機影像之安全更新 | |
| JP4702957B2 (ja) | 耐タンパ・トラステッド仮想マシン | |
| CN101356536B (zh) | 移动安全系统及方法 | |
| TWI468971B (zh) | 安全軟體下載 | |
| US7475254B2 (en) | Method for authenticating software using protected master key | |
| TWI567580B (zh) | 用於防止惡意軟體執行的方法與系統 | |
| KR101567620B1 (ko) | 데이터 처리 시스템 및 방법 | |
| TWI514186B (zh) | 用以設定保護平台免受惡意軟體之政策的使用者可控制平台層級觸發技術 | |
| WO2004006075A1 (ja) | 開放型汎用耐攻撃cpu及びその応用システム | |
| CN113656086A (zh) | 安全存储及加载固件的方法及电子装置 | |
| JP2009032282A (ja) | データ・アクセス制御機能を使用した、統合システム内でのセキュア動作の初期化、維持、更新および回復 | |
| CN101149774A (zh) | 经散布保护机制防护固件映像档的下载暨储存方法及装置 | |
| US9177121B2 (en) | Code protection using online authentication and encrypted code execution | |
| TWI526869B (zh) | 用以致能耦接至客戶端之儲存系統之加值儲存服務的方法、裝置、系統及非暫時性機器可讀媒體 | |
| TW200937249A (en) | Handling of secure storage key in always on domain |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| A621 | Written request for application examination |
Free format text: JAPANESE INTERMEDIATE CODE: A621 Effective date: 20050708 |
|
| A521 | Request for written amendment filed |
Free format text: JAPANESE INTERMEDIATE CODE: A523 Effective date: 20050914 |
|
| A977 | Report on retrieval |
Free format text: JAPANESE INTERMEDIATE CODE: A971007 Effective date: 20070727 |
|
| TRDD | Decision of grant or rejection written | ||
| A01 | Written decision to grant a patent or to grant a registration (utility model) |
Free format text: JAPANESE INTERMEDIATE CODE: A01 Effective date: 20070925 |
|
| A61 | First payment of annual fees (during grant procedure) |
Free format text: JAPANESE INTERMEDIATE CODE: A61 Effective date: 20071010 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20101019 Year of fee payment: 3 |
|
| R150 | Certificate of patent or registration of utility model |
Ref document number: 4027738 Country of ref document: JP Free format text: JAPANESE INTERMEDIATE CODE: R150 Free format text: JAPANESE INTERMEDIATE CODE: R150 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20101019 Year of fee payment: 3 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20111019 Year of fee payment: 4 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20111019 Year of fee payment: 4 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20121019 Year of fee payment: 5 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20131019 Year of fee payment: 6 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| R250 | Receipt of annual fees |
Free format text: JAPANESE INTERMEDIATE CODE: R250 |
|
| EXPY | Cancellation because of completion of term |