Program update method and server

• US 20090138728A1
• Filed: 04/23/2008
• Published: 05/28/2009
• Est. Priority Date: 11/15/2002
• Status: Active Grant

• Current Assignee: Panasonic Semiconductor Solutions Co., Ltd. (Winbond Electronics Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Inoue, Shinji, Maeda, Takuji, Ito, Takayuki, Nemoto, Yusuke, Yamada, Yasushi, Fujiwara, Makoto, Yasui, Junichi
• Granted Patent: US 7,849,331 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/72 in cryptographic circuits

Abstract

A system including a secure LSI 1 establishes a communication path to/from a server 3 (UD1), and receives a common key-encrypted program generated by encryption with a common key and transmitted from the server 3 (UD6 and UD7). The received common key-encrypted program is decrypted to generate a raw program, and the raw program is re-encrypted with an inherent key to newly generate an inherent key-encrypted program, which is stored in an external memory.

Claims

1-11. -11. (canceled)

12. A secure device including an LSI device and an external memory provided outside the LSI device, wherein

the LSI device comprises:

an inherent key storage means for generating and storing an inherent key unique to the LSI device;

an encryption means for generating inherent key-encrypted information by encrypting information received from outside of the LSI device using the inherent key; and

an output means for outputting the inherent key-encrypted information to the external memory,

wherein the inherent key stored in the inherent key storage means becomes unchangeable after generated.

13. The secure device of claim 12, the inherent key storage means comprising:

a setting storage part for receiving and setting information indicating whether rewritable or not for a storing area of the inherent key storage means in which the inherent key is stored; and

a rewrite control part for selectively controlling rewritability of the storing area in accordance with the information set in the setting storage part,

wherein the LSI device further comprises a unrewritability setting means for sending information indicating unrewritable for the storing area to the setting storage part when the inherent key is stored in the inherent key storage means.

14. The secure device of claim 12, wherein the inherent key-encrypted information is data encrypted with the inherent key.

15. The secure device of claim 12, wherein the inherent key-encrypted information is program encrypted with the inherent key.

16. The secure device of claim 12, further comprising:

a receiving means for receiving from an external server common key-encrypted information which is information encrypted with a common key stored in the external server;

a common key storage means for storing a common key identical to the common key stored in the external server; and

a converting means for converting information received by the receiving means,

wherein the encryption means further performs decryption process using the common key stored in the common key storage means,

wherein the converting means receives the common key-encrypted information from the receiving means, generates a second inherent key-encrypted information by, using the encryption means, decrypting the received common key-encrypted information using the common key to generate raw information and encrypting the raw information using the inherent key, and outputs the second inherent key-encrypted information to the external memory.

17. The secure device of claim 16, wherein the receiving means further receives from the external server additional information including authentication HASH value which is to be calculated in case that the raw information has not been tampered with,

wherein the LSI device further comprises a HASH calculating means for calculating a HASH value of the raw information generated by decryption,

wherein the secure device further comprises a verification means for verifying whether or not the raw information has been tampered with by comparing a HASH value calculated by the HASH calculating means and the authentication HASH value.

18. The secure device of claim 16, further comprising a delete means for deleting old inherent key-encrypted information stored in the external memory prior to the second inherent key-encrypted information, after verifying that the second inherent key-encrypted information has been stored in the external memory.

19. The secure device of claim 16, wherein the receiving means further receives from the external server another HASH value for the second inherent key-encrypted information,

wherein the secure device further comprises a complete verification means for judging that storing the second inherent key-encrypted information has been completed when the another HASH value received by the receiving means is equal to a HASH value calculated about the second inherent key-encrypted information.

20. The secure device of claim 16, wherein the LSI device comprises a storage means for storing a boot program for boot-up operation of the secure device,

wherein the converting means is controlled by the boot program.

21. An LSI device, comprising:

an inherent key storage means for generating and storing an inherent key unique to the LSI device;

an encryption means for generating inherent key-encrypted information which is information encrypted using the inherent key; and

an output means for outputting the inherent key-encrypted information to an external memory which is provided outside the LSI device,

wherein the inherent key stored in the inherent key storage means becomes unchangeable after generated.

22. An encryption method in a secure device including an LSI device and an external memory provided outside the LSI device, comprising the steps of:

generating an inherent key unique to the LSI device and storing the inherent key in a inherent key storage means;

generating inherent key-encrypted information by encrypting information received from outside of the LSI device using the inherent key; and

outputting the inherent key-encrypted information to the external memory,

wherein the inherent key stored in the inherent key storage means becomes unchangeable after generated.