Method and apparatus for secure computing device start up

Patent metadata

Field	Value
Publication number	US-11048801-B2
Application number	US-201815938701-A
Country	US
Kind code	B2
Filing date	Mar 28, 2018
Priority date	Mar 28, 2017
Publication date	Jun 29, 2021
Grant date	Jun 29, 2021

Abstract

The present invention provides methods and devices for secure computing device start up. The method includes generating a public/private key pair and signing a software image and obtaining a first time stamp and a second time stamp. The method further includes combining the signed software image, the first time stamp and the second time stamp into a bundle and deploying the bundle. During secure start up, the method includes authenticating the signed software image, the first time stamp and the second time stamp and booting the computing device if authentication passes. The computing device aborts booting the computing device if the authentication process fails.

First claim

The invention claimed is:

1. A method for secure computing device start up, the method comprising:
generating a public/private key pair and signing a software image using the private key of the public/private key pair;
obtaining a first time stamp and a second time stamp;
discarding or destroying the private key of the public/private key pair prior to obtaining the second time stamp;
combining the signed software image, the first time stamp and the second time stamp into a bundle;
deploying the bundle; during secure start up, authenticating the signed software image, the first time stamp and the second time stamp; and
booting the computing device if authentication passes.

2. The method according to claim 1 , further including formatting a certificate signing request (CSR) which includes the public key of the public/private key pair and signing the CSR with the private key.

3. The method according to claim 1 , wherein the first time stamp is received from a time stamp authority.

4. The method according to claim 1 , wherein the second time stamp is received from an intermediate certification authority.

5. The method according to claim 1 , wherein authenticating the signed software image includes determining if the first time stamp is present and trusted.

6. The method according to claim 5 , wherein authenticating the signed software image includes determining if the second time stamp is present and trusted.

7. The method according to claim 6 , wherein authenticating the signed software image includes determining if the first time stamp is less than the second time stamp.

8. The method according to claim 7 , wherein authenticating the signed software image includes determining if the second time stamp minus the first time stamp is less or equal to a predetermined value.

9. The method according to claim 1 , wherein the first time stamp and the second time stamp are obtained from a same time stamp authority.

10. A method for signing a software image for use during computing device start up, the method comprising:
generating a public/private key pair and signing a software image using the private key of the public/private key pair;
obtaining a first time stamp and a second time stamp;
discarding or destroying the private key of the public/private key pair prior to obtaining the second time stamp;
combining the signed software image, the first time stamp and the second time stamp into a bundle; and
deploying the bundle for use during computing device start up.

11. The method according to claim 10 , further including formatting a certificate signing request CSR) which includes the public key of the public/private key pair and signing the CSR with the private key.

12. The method according to claim 10 , wherein the first time stamp is received from a time stamp authority.

13. The method according to claim 10 , wherein the second time stamp is received from an intermediate certification authority.

14. The method according to claim 10 , wherein the first time stamp and the second time stamp are obtained from a same time stamp authority.

15. A device for signing a software image for use during computing device start up, the device comprising:
a processor; and
machine readable memory storing machine executable instructions which when executed by the processor configure the device to:
generate a public/private key pair and sign a software image using the private key of the public/private key pair;
obtain a first time stamp and a second time stamp;
discard or destroy the private key of the public/private key pair prior to obtaining the second time stamp;
combine the signed software image, the first time stamp and the second time stamp into a bundle; and
deploy the bundle for use during computing device start up.

Assignees

• Sierra Wireless Inc

Inventors

• Leblanc Lawrence Joseph

Classifications

• H04L2463/121

  Timestamp · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title