EP0816970A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Method and apparatus for firmware authentication
Assignee: Sun Microsystems Inc
•
Filing: 1997-06-26
•
Granted: —
•
Expires: 2017-06-26
Abstract
Abstract An apparatus for firmware authentication and methods of operating the same result in software upgradability to firmware without compromising the integrity of the firmware. The apparatus for firmware authentication of a boot PROM comprises a software programmable data section having a plurality of micro-code. An authentication section having a hash generator configured to generate a data hash in response to the plurality of micro-code programmed in the software programmable data section to authorize execution of the plurality of micro-code of the data section. <IMAGE>
Inventors
- 👤 Russell Norman Mirov
- 👤 Gregory Charles Onufer
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-24 15:14
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/22; G06F9/24; G06F21/00; G06F21/50; G06F21/57; G06F21/572; G06F21/575; G06F12/00; G06F12/14; G06F12/1408; G06F2211/00; G06F2211/007; G06F2211/008; G06F2211/009; G06F2211/1097
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
66 words
A boot PROM (programmable read only memory) having
programming instructions for initiating a computer system comprising: a software programmable data section having a plurality of micro-code;
and an authentication section having a hash generator configured to
generate a data hash in response to the plurality of micro-code programmed
in the software programmable data section to authorize execution of the
plurality of micro-code of the data section.
Claim 2
Dependent Claim
45 words
The boot PROM according to claim 1, wherein: the software programmable data section includes a predetermined
signature; and the authentication section includes a predetermined public key and a
decryptor configured to provide an verification hash in response to the
predetermined signature and the public key.
Claim 3
Dependent Claim
36 words
The boot PROM according to claim 2, wherein the authentication
section includes a comparator configured to compare the data hash with the
verification hash to authenticate the plurality of micro-code of the software
programmable data section.
Claim 4
Dependent Claim
35 words
The boot PROM according to claim 2, wherein the predetermined
signature includes an encryption of a private key and an initial hash of a
plurality of initial micro-code programmed to the software programmable
data section.
Claim 5
Dependent Claim
41 words
The boot PROM according to claim 1, wherein the authentication
section includes a plurality of trusted micro-code configured to initiate
execution of the plurality of micro-code of the software programmable data
section in response to proper authentication of the data hash.
Claim 6
Dependent Claim
43 words
The boot PROM according to claim 5, wherein the proper
authentication of the data hash by the authentication section of the plurality
of trusted micro-code affords the plurality of micro-code programmed in the
software programmable data section to a level of trusted code.
Claim 7
Dependent Claim
27 words
The boot PROM according to claim 1, wherein the software
programmable data section includes a flash memory configured to enable
software reprogramming of the plurality of micro-code.
Claim 8
Dependent Claim
17 words
The boot PROM according to claim 1, wherein the authentication
section includes a ROM (read only memory).
Claim 9
Independent Claim
63 words
A method of operating a boot PROM (programmable read only
memory) having programming instructions for initiating a computer system
comprising the steps: generating a data hash in response to a plurality of micro-code
programmed in a software programmable data section; and authenticating the data hash in an authentication section to authorize
execution of the plurality of micro-code of the software programmable data
section.
Claim 10
Dependent Claim
41 words
The method of operating a boot PROM according to claim 9,
wherein the software programmable data section includes a predetermined
signature and the step of authenticating includes decrypting a verification
hash in response to the predetermined signature and a public key.
Claim 11
Dependent Claim
37 words
The method of operating a boot PROM according to claim 10,
wherein the step of authenticating includes comparing the data hash with
the verification hash to authenticate the plurality of micro-code of the
software programmable data section.
Claim 12
Dependent Claim
41 words
The method of operating a boot PROM according to claim 10
further comprising the step encrypting a private key and an initial hash of a
plurality of initial micro-code programmed to the software programmable
data section to provide the predetermined signature.
Claim 13
Dependent Claim
52 words
The method of operating a boot PROM according to claim 9,
wherein the authentication section includes a plurality of trusted micro-code
further comprises the step of propagating a level of trusted code to the
plurality of micro-code of the software programmable data section in
response to proper authentication of the data hash.
Claim 14
Independent Claim
37 words
The method of operating a boot PROM according to daim 9
wherein the software programmable data section includes a flash memory
further comprises the step of reprogramming the plurality of micro-code in
the software programmable data section.
Claim 15
Dependent Claim
21 words
The method of operating a boot PROM according to claim 9
wherein the authentication section includes a ROM (read only memory).
Claim 16
Dependent Claim
149 words
A computer initialization system having a plurality of micro-code
to initiate the computer system comprising: a hard disk having a plurality of storage blocks configured to store
programming data and initializing boot data; a CPU (central processing unit) coupled to the hard disk configured
to process programing data from the hard disk; a display device coupled to the CPU and the hard disk configured to
receive display data from the CPU and the hard disk; and a boot PROM (programmable read only memory) coupled to the hard
disk having a software programmable data section including the plurality of
micro-code and an authentication section including a hash generator
configured to generate a data hash in response to the plurality of micro-code
programmed in the software programmable to authorize execution of the
plurality of micro-code of the data section for directing the initializing boot
data of the hard disk to execute.
Claim 17
Dependent Claim
54 words
The computer initialization system according to claim 16,
wherein: the software programmable data section of the boot PROM includes a
predetermined signature; and the authentication section of the boot PROM includes a
predetermined public key and a decryptor configured to provide an
verification hash in response to the predetermined signature and the public
key.
Claim 18
Dependent Claim
37 words
The computer initialization system according to claim 17, wherein
the authentication section includes a comparator configured to compare the
data hash with the verification hash to authenticate the plurality of micro-code
of the software programmable data section.
Claim 19
Dependent Claim
36 words
The computer initialization system according to claim 16, wherein
the predetermined signature includes a encryption of a private key and an
initial hash of a plurality of initial micro-code programmed to the software
programmable data section.
Claim 20
Dependent Claim
44 words
The computer initialization system according to claim 19,
wherein the proper authentication of the data hash by the authentication
section of the plurality of trusted micro-code affords the plurality of micro-code
programmed in the software programmable data section to a level of
trusted code.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.