Secure boot method, semiconductor device and recording medium

Patent metadata

Field	Value
Publication number	US-9530004-B2
Application number	US-201414471280-A
Country	US
Kind code	B2
Filing date	Aug 28, 2014
Priority date	Sep 10, 2013
Publication date	Dec 27, 2016
Grant date	Dec 27, 2016

Abstract

A secure boot method for a system, the system including a processor and a storage medium configured to store a program, a plurality of first partial hash values calculated based on a plurality of first partial programs into which the program is divided, and a first legitimate hash value which is a hash value calculated based on a plurality of first legitimate partial hash values, the plurality of first legitimate partial hash values being calculated based on a plurality of legitimate partial programs. The secure boot method includes calculating, a second calculated hash value based on the plurality of first partial hash values, and determining, whether or not the second calculated hash value matches the first legitimate hash value to continue the start-up processing of the system when the determination indicates match, and suspend the start-up processing of the system when the determination does not indicate match.

First claim

What is claimed is:

1. A secure boot method for a system, the system including: a processor; and a storage medium configured to store a program, a plurality of first partial hash values calculated based on a plurality of first partial programs into which the program is divided, and a first legitimate hash value which is a hash value calculated based on a plurality of first legitimate partial hash values, the plurality of first legitimate partial hash values being calculated based on a plurality of legitimate partial programs into which a legitimate program is divided, the legitimate program corresponding to the program;
the secure boot method comprising:
calculating, by the processor, during start-up of the system, a second calculated hash value based on the plurality of first partial hash values which has been already calculated and stored in the storage medium before the start-up of the system; and
determining, by the processor, during the start-up of the system, whether or not the second calculated hash value matches the first legitimate hash value to continue the start-up processing of the system when the determination indicates match, and suspend the start-up processing of the system when the determination does not indicate match.

2. The secure boot method according to claim 1 , further comprising:
calculating, by the processor, after the start-up of the system, a plurality of second partial hash values, which are hash values calculated based on a plurality of second partial programs into which the program of the system being started up is divided; and
determining, by the processor, after the start-up of the system, whether or not the calculated plurality of second partial hash values match the plurality of first partial hash values which has been already calculated and stored in the storage medium before the start-up of the system to continue execution processing of the system when the determination indicates match, and suspend the execution processing of the system when the determination does not indicate match.

3. The secure boot method according to claim 2 , wherein the calculating the plurality of second partial hash values and the determining whether or not the calculated plurality of second partial hash values match the plurality of first partial hash values are carried out in a time-division manner with respect to all of the plurality of second partial programs.

4. The secure boot method according to claim 2 , wherein the calculating the plurality of second partial hash values and the determining whether or not the calculated plurality of second partial hash values match the plurality of first partial hash values are carried out after start-up of the system and when the system is in a low-load state.

5. The secure boot method according to claim 4 , wherein when the system is in the low-load state the system is in an idle state or when operation of the system has been terminated.

6. The secure boot method according to claim 1 , further comprising:
updating, by the processor, the program of the system to a new program;
acquiring, by the processor, a plurality of first new partial hash values, and the first new legitimate hash value corresponding to the new program;
calculating, by the processor, a plurality of third partial hash values based on a plurality of third partial programs into which the updated new program is divided, and a third calculated hash value based on the calculated plurality of third partial hash values; and
determining, by the processor, both whether or not the calculated plurality of third partial hash values match the acquired plurality of first new partial hash values, and whether or not the third calculated hash value match the acquired first new legitimate hash value to continue an updating process of the system when both of the two determinations indicate match, and suspend the updating process of the system when at least one of the two determinations does not indicate match.

7. The secure boot method according to claim 1 , further comprising:
updating, by the processor, the program of the system to a new program;
acquiring, by the processor, a plurality of first new partial hash values and the first new legitimate hash value, corresponding to the new program; and
instructing, by the processor, a re-start of the system.

8. The secure boot method according to claim 1 , wherein the number of the plurality of first partial hash values is n, and one second calculated hash value is calculated on the basis of the n first partial hash values.

9. The secure boot method according to claim 1 , wherein the number of the plurality of first partial hash values is n, one second calculated hash value is calculated on the basis of m first partial hash values among the n first partial hash values, and n/m second calculated hash values are calculated on the basis of the n first partial hash values.

10. A semiconductor device, comprising:
a storage device configured to store a program, a plurality of first partial hash values calculated based on a plurality of first partial programs into which the program is divided, and a first legitimate hash value, which is a hash value calculated based on a plurality of first partial hash values, the plurality of first partial hash values being calculated based on a plurality of legitimate partial programs into which a legitimate program is divided, the legitimate program corresponding to the program; and
a computer processor configured to execute a process including:
calculating, during start-up of the system, a second calculated hash value based on the plurality of first partial hash values which has been already calculated and stored in the storage device before the start-up of the system, and

determining, during the start-up of the system, whether or not the second calculated hash value matches the first legitimate hash value to continue the start-up processing of the system when the determination indicates match, and suspend the start-up processing of the system when the determination does not indicate match.

11. The semiconductor device according to claim 10 , wherein the process includes:
calculating, after the start-up of the system, a plurality of second partial hash values, which are hash values calculated based on a plurality of second partial programs into which the program of the system being started up is divided, and
determining, after the start-up of the system, whether or not the calculated plurality of second partial hash values match the plurality of first partial hash values which has been already calculated and stored in the storage device before the start-up of the system to continue processing of executing the system when the determination indicates match, and suspend processing of executing the system when the determination does not indicate match.

12. The semiconductor device according to claim 11 , wherein
the computer processor executes the calculating the plurality of second partial hash values and the determining whether or not the calculated plurality of second partial hash values match the plurality of first partial hash values in a time-division manner with respect to all of the plurality of partial programs.

13. The semiconductor device according to claim 10 , wherein the process includes:
updating the program of the system to a new program,
acquiring a plurality of first new partial hash values and the first new legitimate hash value, corresponding to the new program,
calculating a plurality of third partial hash values based on a plurality of third partial programs into which the updated new program is divided, and a third calculated hash value bas

Assignees

• Socionext Inc

Inventors

• Yajima Jun
• Saito Kenji

Classifications

• G06F21/575 Primary

  Secure boot · CPC title

• G06F2221/2109

  Game systems · CPC title