Methods used in a secure yet flexible system architecture for secure devices with flash mass storage memory
    41.
    发明申请
    Methods used in a secure yet flexible system architecture for secure devices with flash mass storage memory 有权
    用于具有闪存大容量存储存储器的安全设备的安全而灵活的系统架构中的方法

    公开(公告)号:US20070061581A1

    公开(公告)日:2007-03-15

    申请号:US11317341

    申请日:2005-12-22

    摘要: A device with mass storage capability that uses a readily available non secure memory for the mass storage but has firmware (and hardware) that provides security against unauthorized copying of data. This is true even though the firmware itself is stored in the non secure mass storage memory, and therefore potentially vulnerable to hacking. An indication of the authenticity of the firmware must be present before it will be executed by the device. This protects the device contents from unauthorized duplication or tampering. Additional functionality can be added to the device with additional firmware applications, and the authenticity of those additional applications will also be verified before they will be executed. This further prevents unauthorized copying or tampering of secure content through any mechanisms that may be unscrupulously introduced. Any data within the mass storage memory may also be encrypted.

    摘要翻译: 具有大容量存储能力的设备使用容易获得的用于大容量存储的非安全存储器,但是具有提供针对未经授权的数据复制的安全性的固件(和硬件)。 即使固件本身存储在非安全大容量存储器中也是如此,因此可能易受黑客攻击。 必须在固件执行之前存在固件的真实性的指示。 这样可以保护设备内容免受未经授权的重复或篡改。 额外的功能可以添加到具有附加固件应用程序的设备,这些附加应用程序的真实性也将在执行前被验证。 这进一步防止了通过可能被无耻地引入的任何机制来非法复制或篡改安全内容。 大容量存储器内的任何数据也可以被加密。