Secure firmware update

• US 20060143600A1
• Filed: 12/29/2004
• Published: 06/29/2006
• Est. Priority Date: 12/29/2004
• Status: Abandoned Application

• Current Assignee: Kinglite Holdings Inc.
• Original Assignee: Kinglite Holdings Inc.
• Inventors: Bethur, Jithendra, Cottrell, Andrew, Srikant, M., Markey, Timothy J., Srinivasan, Lakshmanan
• Application Number:
  US11/026,813
• Publication Number:
  US 20060143600A1
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]

Abstract

A secure firmware update method includes receiving a firmware update image, for example, firmware code including corrected or updated functionality. Next, the firmware update image and the source of the firmware update image are authenticated. After the firmware update image and the source of the firmware update image have been authenticated, the current firmware image is replaced by the firmware update image. If either of the new firmware image or the firmware update module is not authorized, the memory remains locked; thereby, preventing the unauthorized firmware image from being flashed into the memory. An electronic device includes a processor and a memory. The memory maintains instructions that when executed by the processor, causes the processor to receive a firmware update image. Next, the instructions cause the processor to authenticate the firmware update image and the source of the image. After the firmware update image and the source of the firmware update image have been authenticated, the current firmware image is replaced by the firmware update image.

Claims

1. A secure firmware update method, comprising:

receiving a firmware update image;

authenticating the firmware update image and the source of the firmware update image;

replacing the current firmware image with the firmware update image when both the firmware update image and the source of the firmware update image have been authenticated.

2. The secure firmware update method of claim 1, wherein replacing the current firmware image with the received firmware update image further includes reflashing the memory with the firmware update image.

3. The secure firmware update method of claim 1, wherein authenticating the firmware image and the source of the firmware update image further includes [Insert the verification process here].

4. The secure firmware update method of claim 1, further including placing a device in a suspend state before replacing the current firmware with the firmware update image.

5. The secure firmware update method of claim 4, wherein placing the device in the suspend state further includes placing the device in an S3 state.

6. The secure firmware update method of claim 2, further including unlocking the memory after the firmware update image and the source of the firmware update image have been authenticated.

7. An electronic device, comprising:

a processor; and

a memory, coupled to the processor, the memory maintaining instructions that when executed by the processor, cause the processor to;

receive a firmware update image,

authenticate the firmware update image and the source of the firmware update image, and

replace the current firmware image with the firmware update image when both the firmware update image and the source of the firmware update image have been authenticated.

8. The electronic device of claim 7, wherein the instructions cause the processor to reflash the memory with the firmware update image when both the firmware update image and the source of the firmware update image have been authenticated.

9. The electronic device of claim 7, wherein the instructions cause the processor to place the electronic device in a suspend state before replacing the current firmware image with the received firmware update image.

10. The electronic device of claim 7, wherein the instructions further cause the processor to unlock the memory after the firmware update image and the source of the firmware update image have been authenticated before the current firmware image is replaced.

11. The electronic device of claim 8, wherein the instructions further cause the processor to unlock the memory before the memory is reflashed with the firmware update image.

12. A method of securely updating the firmware of an electronic device, comprising:

receiving a request to update a current firmware image;

receiving a firmware update image;

placing the electronic device in a suspend operating state;

authenticating the firmware update image and the source of the firmware update image;

replacing the current firmware image with the firmware update image when both the firmware update image and the source of the firmware update image have been authenticated; and

returning the electronic device to a normal operating state.

13. The method of claim 12, wherein authenticating the firmware update image and the source of the firmware update image further includes verifying that the source of the firmware update image is a trusted source and that the firmware update image is a trusted image.

14. The method of claim 12, wherein replacing the current firmware image with the firmware update image further includes reflashing the memory with the firmware update image.