SECURE BOOTING FOR UPDATING FIRMWARE OVER THE AIR

• US 20090320012A1
• Filed: 06/04/2008
• Published: 12/24/2009
• Est. Priority Date: 06/04/2008
• Status: Abandoned Application

• Current Assignee: MediaTek, Inc.
• Original Assignee: MediaTek, Inc.
• Inventors: LEE, Chien-Min, HSU, Chia-Jung
• Application Number:
  US12/132,759
• Publication Number:
  US 20090320012A1
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 11/1417 Boot up procedures
• CPC Class Codes: G06F 11/1441 Resetting or repowering
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H03M 13/09 Error detection only, e.g. using cyclic redundancy check [CRC] codes or single parity bit

Abstract

A firmware updating method for use in a mobile device is provided. The method comprises the following steps. First, during a previous downloading procedure or a previous updating procedure, a flag indicating a current status of the previous downloading procedure or the previous updating procedure, and a signature corresponding to the flag are generated and stored in a non-volatile storage device. Next, the flag and the signature are acquired from the non-volatile storage device when booting subsequent to the previous downloading or updating procedure. Next, integrity of the flag is verified by inspecting the signature. Lastly, the updating procedure is performed to update an original firmware with a new firmware when the integrity of the flag is verified and the flag indicates that the previous updating procedure is undergoing or the previous download procedure is completed.

Claims

1. A firmware updating method for use in a mobile device, comprising:

during a previous downloading procedure or a previous updating procedure, generating and storing a flag indicating a current status of the previous downloading procedure or the previous updating procedure, and a signature corresponding to the flag in a non-volatile storage device;

acquiring the flag and the signature from the non-volatile storage device when booting subsequent to the previous downloading or updating procedure;

verifying an integrity of the flag by inspecting the signature; and

performing the updating procedure to update an original firmware with a new firmware when the integrity of the flag is verified and the flag indicates that the previous updating procedure is undergoing or the previous download procedure is completed.

2. The method of claim 1, further comprising:

performing a normal booting procedure for initiating system when the integrity of the flag is not verified or the flag does not indicate that updating procedure is undergoing or the previous download procedure is completed.

3. The method of claim 1, wherein the original firmware is loaded and executed during the normal booting procedure.

4. The method of claim 3, wherein the flag indicating that the previous downloading procedure is undergoing is generated and stored before downloading the new firmware.

5. The method of claim 3, wherein the flag indicating that the previous downloading procedure is completed is generated and stored after the new firmware is completely downloaded.

6. The method of claim 3, wherein the flag indicating that the previous updating procedure is undergoing is generated and stored before updating the original firmware with the new firmware.

7. The method of claim 3, wherein the flag indicating that the previous updating procedure is completed is generated and stored after completely updating the original firmware with the new firmware.

8. The method of claim 1, wherein the generating and storing step further comprises:

generating a valid mark following the flag and the signature.

9. The method of claim 1, wherein a flag record block is allocated in the non-volatile storage device and the generating and storing step further comprises:

determining whether the flag record block is full;

if the flag block is full, allocating a new flag record block in the non-volatile storage device;

writing the flag and the signature in the newly allocated flag record block;

writing a valid mark following the flag and the signature; and

erasing the full flag record block.

10. The method of claim 9, further comprising:

if the flag record block is not full, writing the flag, the signature and a valid mark in the flag record block following the last valid mark.

11. The method of claim 8, wherein the signature is a cyclic redundancy check (CRC) code of the flag.

12. The method of claim 8, wherein the signature is an encryption of the flag using a specific key.

13. The method of claim 8, wherein the signature is generated by hashing the flag using a hash function and encrypting the hash value using a specific key.

14. A firmware updating method for use in a mobile device, comprising:

finding at least one record from a flag record block of a non-volatile storage device when booting, wherein each has a flag, a signature and a valid mark;

acquiring a most recently created record from the found record or records;

verifying an integrity of the acquired flag using the signature of the acquired flag; and

performing a updating procedure to update an original firmware with a new firmware when the integrity of the acquired flag is verified and the acquired flag indicates that a previous updating procedure is undergoing or a previous download procedure is completed.

15. The method of claim 14, wherein the valid mark is utilized as a boundary between two adjacent pairs of flag and signature or between a record and unused space of the flag record block.

16. The method of claim 14, wherein when more than one record is found, the found records are adjacently stored according to the established times thereof from the earliest to the latest, and the acquired record is the last record of the flag record block.

17. The method of claim 16, wherein the acquiring step further comprises:

erasing records earlier than the acquired record; and

moving the acquired record to the beginning of the flag record block.